Call Functions from ntoskrnl.exe ?

[LVAC]

I want to call "ZwterminateProcess" function in C:\WINDOWS\system32\ntoskrnl.exe, but I cannot call it by dllcall. Can you give me some code to do it?

[Richard Robertson]

That function is intended for driver use. Not user mode applications.

[LVAC]

Cannot call that function?

[Richard Robertson]

Yes and no. Yes, it can be called if done correctly. No you shouldn't call it. Use ProcessClose() in AutoIt instead. Or TerminateProcess() in the WinApi if not using AutoIt.

[electrico]

Richard Robertson, I am enjoying your answers >_

[Richard Robertson]

Richard Robertson, I am enjoying your answers >_<

May I ask in what way?

[LVAC]

I want to write a new program for security, ProcessClose() in AutoIt cannot kill some strong program of virus. So I want to call some function like that >_< How to call it?

[Jos]

I want to write a new program for security, ProcessClose() in AutoIt cannot kill some strong program of virus. So I want to call some function like that >_< How to call it?

Use a good AV packages and lets not good in much more details here since that could be used by other with less good intentions.

Jos

[Richard Robertson]

I want to write a new program for security, ProcessClose() in AutoIt cannot kill some strong program of virus. So I want to call some function like that >_< How to call it?

Like I said the first time. That function is intended for DRIVERS.