API to get names of running processes

NTDEV
1

I would like to check from inside my kernel mode driver if a certain user
application is running.

What API can I use?

Thanks,

Johan

Hitta rätt på nätet med MSN Sök http://search.msn.se/

2

What is the purpose of this thought?

 

Good Luck,



From: “DDK Developer”

>Reply-To: “Windows System Software Devs Interest List”
>To: “Windows System Software Devs Interest List”
>Subject: [ntdev] API to get names of running processes
>Date: Tue, 09 Mar 2004 18:17:01 +0100
>
>I would like to check from inside my kernel mode driver if a certain
>user
>application is running.
>
>What API can I use?
>
>Thanks,
>
>Johan
>
> _________________________________________________________________
>Hitta rätt på nätet med MSN Sök http://search.msn.se/
>
>
>—
>Questions? First check the Kernel Driver FAQ at
>http://www.osronline.com/article.cfm?id=256
>
>You are currently subscribed to ntdev as: xxxxx@hotmail.com
>To unsubscribe send a blank email to
>xxxxx@lists.osr.com

INDIA TODAY @ Rs. 5 for 5 years ! Subcribe Now …

3

Why not look at the PSAPI usr-mode process enumeration api ( used to be
tool-help api)?

You can use PS*Notify*() api’s in your driver ( these are k-mode ddk api),
but you would not
be notified of any process started before your driver is active.

-prokash

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of DDK Developer
Sent: Tuesday, March 09, 2004 9:17 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] API to get names of running processes

I would like to check from inside my kernel mode driver if a certain user
application is running.

What API can I use?

Thanks,

Johan

Hitta r?tt p? n?tet med MSN S?k http://search.msn.se/

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@garlic.com
To unsubscribe send a blank email to xxxxx@lists.osr.com