Forum posts for services.exe

Hooking Protected Processes

I know that protected process are all about protection and entirely made for blocking me doing so, but I've got a problem.

My problem is as follows:

I'm building a security tool that should, between other stuff, block some services from being launched/stopped etc.

The way I've did so is to hooking 'services.exe' and detouring RStartService function. It worked perfectly on windows XP SP3.

But of course, It doesn't work on my windows 7 machine. I'm assuming the problem is the 'protected processes' mechanism.

Is there a way to bypass this protection? (sign my application or something?)

View complete forum thread with replies

Other posts related to services.exe

See Related Forum Messages: Follow the Links Below to View Complete Thread

how to change the way explorer.exe and service.exe is started up to edit process affinity?
Why is services.exe changing the Event Log retention policy?
difference between process explorer and task manager [closed]
In windows programming, is there any way we can find out which module (Thread ID & DLL) is c…
CeSetUserNotificationEx with named event and CNT_TIME fails under services.exe
How to read a REG Value into an Environment Variable
Hooking Protected Processes