Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #10  
Old 08-31-2013, 02:21
mr.exodia mr.exodia is offline
Retired Moderator
 
Join Date: Nov 2011
Posts: 783
Rept. Given: 490
Rept. Rcvd 1,123 Times in 305 Posts
Thanks Given: 89
Thanks Rcvd at 716 Times in 333 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
hmm, that's indeed a problem...

you could point ctrl+alt+del to the task manager and from there hook CreateProcess to kill it even before it started. Another way would be to simply rename taskmgr to taskmgr_ or something like that. This could be done every time your museum shell is started... Even another solution would be to inject a custom DLL into every process (using this registry trick you see in some malware) that just checks if a mutex or something similar exists and then kills taskmgr when your museum shell does not give the green light.

Hope there is an idea you like..
Reply With Quote
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Ctrl-Minus in Hiew mer0x36 General Discussion 2 12-12-2024 03:47
How to disable VM detection? te$ter General Discussion 3 05-16-2015 17:06
Origins of Ctrl-Alt-Del Anticode General Discussion 0 04-17-2005 20:16
Why?the kb is disable 3boy General Discussion 1 09-03-2003 20:22


All times are GMT +8. The time now is 14:14.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )