I'm not sure I understand. I would be against any
shutting down of other apps, and of course such
a thing would not make a product popular with the
market. And if SoftIce crashes other apps, who
can the user blame except himself, for loading
SoftIce? And sure there is such a thing as
suspicious behaviour -- INT 3 while your program
is resident, for example.
i can think of one way of stopping screen capture, but i'm not sure of the exact way. using windows hooks, we can capture and block all windows messages. so if there is any WM for screen capture we could block it.
Clark
Well i do not intend anymore to kill the suspiciouse process ...
instead i will clear the image/window of the protected program and place a nice messahe instead:
"Please close App XXX" :D if you want to see the picture ;)
i guess user will understand...