Link to home
Start Free TrialLog in
Avatar of eriklee
eriklee

asked on

Identity of programs in the background (winxp)

I noticed i can rename almost any programs' name & run it. When i view the processes in TaskManager  i can see the program name on the list of processes running.

I can rename notepad.exe to svchost.exe. if i am writing anti-hacking software in vb or delphi - how can i know which program is which -- is there any unique handle i can use?
Avatar of YourReference
YourReference
Flag of Canada image

One way is to record the PID of the process running in a File or Registry.  If you rename norepad.exe to svchost.exe, when you launch it, record the PID of svchost.exe.

When you see PID 1111 (or whatever it ends up to be) you know it's your program
Avatar of eriklee
eriklee

ASKER

the PID changes everytime you start the machine or the program.

notepad.exe can be 112 this time but can be 345 the next. there is not fixed unique PID associated with notepad.exe.
Avatar of ThievingSix
Every time you rename it, re-record the PID.
ASKER CERTIFIED SOLUTION
Avatar of nffvrxqgrcfqvvc
nffvrxqgrcfqvvc

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of eriklee

ASKER

http://www.osix.net/modules/article/?id=6


found something abt mutex..