Sign in to follow this  
Followers 0
PartyPooper

Hidden Processes

8 posts in this topic

I wanted to use the function ProcessExists("process") in my FastGaming proggy but found that one of the games (WarRock) hides its process (well, I can't find it in the tasklist) so I can't detect when it's running and when it stops. Anyone got a solution other than using WinExists('title")?

Thanks

Share this post


Link to post
Share on other sites



I wanted to use the function ProcessExists("process") in my FastGaming proggy but found that one of the games (WarRock) hides its process (well, I can't find it in the tasklist) so I can't detect when it's running and when it stops. Anyone got a solution other than using WinExists('title")?

Thanks

I would suggest looking a bit deeper, than just the Task Manager. I use ProcExp.exe by systernals: Then look at where the .exe are being processed from... You'll find alot of times it's not a hidden exe, but renamed. Otherwise it's basically using the RootKit method of hiding and your AntiVirus software should find it (If not you could try ProcessGuard).

Another route may be looking in the registry if there is a unique string that is given when the .exe is running.

Look forward to seeing how you actually get around this :lmao: .


[center]Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.[/center]

Share this post


Link to post
Share on other sites

Yeah, I have the sysinternals tool but it's hidden from that too. I did think it may be a rootkit thing but am hoping it's not. I'll dig around some more like you suggested.

Share this post


Link to post
Share on other sites

Yeah, the f'king thing is a rootkit - both RootKit Revealer and Blacklight picked it up as such. How retarded is that - writing a game that uses rootkit technology.

BTW, my virus detector (Avast) was OK with it.

Share this post


Link to post
Share on other sites

Yeah, the f'king thing is a rootkit - both RootKit Revealer and Blacklight picked it up as such. How retarded is that - writing a game that uses rootkit technology.

BTW, my virus detector (Avast) was OK with it.

Ha, is that anger at it being one, or frustration on not knowing how to create one :lmao: .


[center]Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.[/center]

Share this post


Link to post
Share on other sites

Means I can't easily detect it using the common methods I use with other processes so I will have to use the windows functions.

Share this post


Link to post
Share on other sites

What do you get when you try this type of option? : http://www.autoitscript.com/forum/index.ph...ndpost&p=139586


[center]Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.[/center]

Share this post


Link to post
Share on other sites

Nothing. It detects the window OK, but process is not found.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0