Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hi,
I am using VB6 to write an application that needs to be deployed on a number of PC's.
I need to find a way to ensure that the process is launched securely so that it cannot be deleted by the user using the task manager.
At the moment, the process is launched by the current user.
My first solution was to call the process csrss.exe (a genuine system process), so that when a user tries to end the process through task manager the O/S reports that it cannot close it because it is a critical process. However, the virus guards running on the PC's detect the process name as a virus, so I need to find another way of securely running the process.
How do you create a program that will run as a system process, or launched by the 'system' user? Or is there another way to securely run a process that cannot be deleted by the current user.
ps: The users that should not be able to delete the process have only 'user' rights, it is fine for administrators to delete it if they want to.
Many Thanks
Xscript

Has anyone got any ideas?
Is it possible to launch a program as the system account or that cannot be deleted by users with just 'user' rights?
Any help appreciated,
Xscript

It sounds like you know what you need to do. The end goal should be to create the process under the SYSTEM account so that even members of the Administrator group do not have rights to kill it via Task Manager.
One way would be to make the process a service. I'm not very familiar with how to do this in Visual Basic, but if you can get it done then it's easy to make it run in the SYSTEM context.
You've said you're using VB, but you might get some ideas from C++. Look here for some possible ideas if you don't want to use a service.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |