Is it possible? Is there a process similar to RegisterServiceProcess that lets you hide a program from the task list?
Posted on 2001-10-21 15:40:55 by hasshaku
Some marginal viral approaches have solved this via explorer.exe on memory patching. This is not an elegant solution but it has been taken care of and a nice .inc can be found somewhere in the web.
Just go for '29a labs' and eventually you'll get it.

Latigo
Posted on 2001-10-21 15:56:05 by latigo
Thanks latigo. I found their site and am combing through it. They've moved to http://www.coderz.net/29a/, just for your reference.
Posted on 2001-10-21 23:38:18 by hasshaku
You're welcome.
Now that i remember i think it was kernel32.dll patching, but anyway :)

Lati
Posted on 2001-10-22 08:35:43 by latigo
latigo,

if you're talking about my hideproc.exe, it only work in w9x, becoz use vxdcall0 to unprotect the kernel32 memory.

isnt in 29a page, but in iczelion site or in my page (http://www.coderz.net/asm_infamy/infamy.htm), since i leave 29a very very long time ago...

ancev
Posted on 2001-10-22 12:35:02 by ancev
Hi ancev..
I guess it's yours the one i'm talking about..
:)


Latigo
Posted on 2001-10-22 14:16:09 by latigo