How to avoid process termination

NTDEV
1

I know about PsSetCreateProcessNotifyRoutine but it notify me only when the process is terminated and I want to avoid that. Thanks in advance.

2

Without hooking system calls, you can not prevent this. What sort of
software is this? Why do you want to do so?

Egemen

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@yahoo.com
Sent: 12 Eyl?l 2006 Sal? 23:11
To: Windows System Software Devs Interest List
Subject: [ntdev] How to avoid process termination

I know about PsSetCreateProcessNotifyRoutine but it notify me only when the
process is terminated and I want to avoid that. Thanks in advance.

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

3

I am doing something like an antivirus program and want to notify to the user when a process is been killed and so on…

4

Mechanisms to create non-terminating processes are highly suspect.
Consider some other design solution.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@yahoo.com
Sent: Tuesday, September 12, 2006 11:32 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] How to avoid process termination

I am doing something like an antivirus program and want to notify to the
user when a process is been killed and so on…

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer