Windows Process Manager faults

It is not a bug and may be useful to some people. The following content can be found in Win2000 sp0-SP4.

1. Processes that cannot be terminated:

There are many ways to prevent a process from being terminated. Here we only describe the simplest method, which is to be executed soon.ProgramReplace the file name with the name of the system core process.

For example, services.exe, the system prompts that the process is the core process of the system and cannot be ended.

2. A process that disappears

There are very few methods to hide a process, and there are no methods that can be truly hidden, such as: hiding in other processes, switch to the service

Here is a very fake but convenient method, and sometimes you can cheat the experts.

A test.exe program runs for the first time, ends, and is renamed. For example, aa.exe. When it is run, you will find that there is no aa.exe in the Process Manager, and test.exe exists.

Using this method, combined with 1. If the process cannot be terminated, you can disappear it out of thin air and the program runs twice in a row.

If you have some unknown methods, you can post them and share them together.