(Jun 25, 2020 05:30 PM)sara_221540 Wrote:  How to prevent an app from being killed in task manager?
i want c# code to do that

(Jun 26, 2020 05:10 AM)HFDone Wrote:  https://hackforums.net/showthread.php?tid=6086548

(Jun 26, 2020 10:56 AM)namespace Wrote:  Google really is a magical tool.

Code

namespace MyNamespace
{
   public static class ProtectProccess
   {
       [DllImport("ntdll.dll", SetLastError = true)]
       private static extern void RtlSetProcessIsCritical(UInt32 v1, UInt32 v2, UInt32 v3);

       private static volatile bool s_isProtected = false;

       private static ReaderWriterLockSlim s_isProtectedLock = new ReaderWriterLockSlim();

       public static bool IsProtected
       {
           get
           {
               try
               {
                   s_isProtectedLock.EnterReadLock();

                   return s_isProtected;
               }
               finally
               {
                   s_isProtectedLock.ExitReadLock();
               }
           }
       }

       public static void Protect()
       {
           try
           {
               s_isProtectedLock.EnterWriteLock();

               if(!s_isProtected)
               {
                   System.Diagnostics.Process.EnterDebugMode();
                   RtlSetProcessIsCritical(1, 0, 0);
                   s_isProtected = true;
               }
           }
           finally
           {
               s_isProtectedLock.ExitWriteLock();
           }
       }

       public static void Unprotect()
       {
           try
           {
               s_isProtectedLock.EnterWriteLock();

               if(s_isProtected)
               {
                   RtlSetProcessIsCritical(0, 0, 0);
                   s_isProtected = false;
               }
           }
           finally
           {
               s_isProtectedLock.ExitWriteLock();
           }
       }
   }
}

(Jun 26, 2020 11:49 AM)VisualSoft Wrote:  this code need to be run as admin to make it work,
And it will crash the PC if the process is killed.

(Jun 26, 2020 12:54 PM)namespace Wrote:  Since it's really hard to just put:

Code

<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />

in app.manifest to request admin privileges?

And I don't get your point? The question is how to prevent the app from being killed in task manager. The only feasible way in my eyes is to mark it as a critical system process (other than just running a script in the background that kills task manager), and as with any other critical system process - it will crash the PC if killed. With sufficient permissions to kill system processes you can kill any process and cause a BSOD - like if I would just end task the csrss.exe.

(Jun 26, 2020 12:54 PM)namespace Wrote:  Since it's really hard to just put:

Code

<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />

in app.manifest to request admin privileges?

And I don't get your point? The question is how to prevent the app from being killed in task manager. The only feasible way in my eyes is to mark it as a critical system process (other than just running a script in the background that kills task manager), and as with any other critical system process - it will crash the PC if killed. With sufficient permissions to kill system processes you can kill any process and cause a BSOD - like if I would just end task the csrss.exe.

(Jun 26, 2020 02:06 PM)NulldB Wrote:  Do you think it would be cool to create a duplicate task manager that shows nothing but normal apps and Microsoft services I think that would be sick

(Jun 26, 2020 02:10 PM)__Digital__ Wrote:  Back on windows 7 and 8.1 you could throw a white box over process list so no one could see it to kill it when taskman was launched. i'm sure you could do similar on windows 10 but they changed taskman a little.

(Jun 26, 2020 02:12 PM)NulldB Wrote:  Yeah or just block it completely but that always gave away that you were infected tbh.

(Jun 27, 2020 02:57 AM)sara_221540 Wrote:  please help me
i tried all the above code , nothing  work