Bugtraq mailing list archives

RE: W2k: Unkillable Applications


From: "Kaido Karner" <kaido () tradenet ee>
Date: Tue, 17 Jul 2001 09:32:44 +0200

Although these processes were and are still protected by their ACL (Access
Control List) Microsoft is now using case-insensitive string comparison to
determine whether a process belongs to the operating system.

did you try?

You can now call you favorite trojan winlogon.exe and task
manager will not only refuse to terminate it but will also incorrectly
state that it is a
critical system process.

did you try? I did ..  W2k pro task manager does not look the
application/executable name ..

kaido


Current thread: