Dear all,
Is There way to prevent CreateProcess As System?
regrad,
Is There way to prevent CreateProcess As System?
regrad,
Hello,
what do you mean under "CreateProcess as SYSTEM"?
A forum for reverse engineering, OS internals and malware analysis
Ring0 - the source of inspiration
Dear ep_xoff
Thx for fast reply. Yes createprocess as system. For xp in win 7 windows environment already protect. But in xp some virus createprocess as system.
In taskmanager ctrl alt del prosess shown SYSTEM. Not user name.
Regard
Thx for fast reply. Yes createprocess as system. For xp in win 7 windows environment already protect. But in xp some virus createprocess as system.
In taskmanager ctrl alt del prosess shown SYSTEM. Not user name.
Regard
Hello,
so your question is how to prevent (malicious) applications from creating a new process under SYSTEM account?
so your question is how to prevent (malicious) applications from creating a new process under SYSTEM account?
Keep OS patched and don't run anything with administrator rights? Don't know if it really needed as Windows XP EOL is in two months.
Ring0 - the source of inspiration
Vrtule wrote:Hello,dear Vrtule
so your question is how to prevent (malicious) applications from creating a new process under SYSTEM account?
yes that right.
@EP_XOFF
i will try to uptodate my xp