-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi.
Is there a way, from NtQuerySystemInformation to know if a module/process is
a win32 service ?
More specifically, is there a clean/dirty way to interact with SCM and its
database from kernel ? My problem is, i need to check if a specific
service is active on the system. I can’t use any usermode code, i must do
everything from my driver…
Thanks,
Valerio
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0
iQA/AwUBQCEF62Gxr2U3nc5EEQJj/QCg0oI35yEM/eHPeIU4IHTQMLE4BZkAn1Ie
gICXYrDEkFJZY93nCr5OKg1N
=vLHm
-----END PGP SIGNATURE-----