|
hmm, that's indeed a problem...
you could point ctrl+alt+del to the task manager and from there hook CreateProcess to kill it even before it started. Another way would be to simply rename taskmgr to taskmgr_ or something like that. This could be done every time your museum shell is started... Even another solution would be to inject a custom DLL into every process (using this registry trick you see in some malware) that just checks if a mutex or something similar exists and then kills taskmgr when your museum shell does not give the green light.
Hope there is an idea you like..
|