Can we make our processor as child processor of another processor ?

[pramod kumar]

Hi
How to hide app form processor viewer ?

Can we make our processor as child processor of another processor ? i.e explorer.exe is always executing, when my app. will execute it will created like a sub processor or child processor or thread of explorer, so no one can catch my app from any processor viewr like application.
or is there any method to hide my app. from processor viewer like application.We can hide our app. from windows task list manager by making it as a service.

plz, help me

[agent]

If i'm not mistaken, DLLs always run in an EXEs process space. If you can get another app to call a Function (c/c++) or a Method (VB) in your DLL, then it will not be shown. The trick is to get the EXE to call a Function/Method in your DLL.

Try making it a plugin of something. Winamp and Photoshop plugins run in the process space of Winamp and Photoshop, respectivly.

To my knowledge, making it a DLL is the only way to make it a "child process" of another process.

[pramod kumar]

How to create this type of DLL ?
Can we create a dll that will run ?
ha, it is interesting !!!
plz, help me

[amitabh]

You cannot make a dll that can run independently. It's always an inprocess server. Even the Dll's being used can be known. Infact the list of all files open can be known somehow. I don't know the way to do it, but I certainly have app whihc shows all these.

[pramod kumar]

Hi Amitabh,
plz, tell me which app doing this ?

plz, help me

[amitabh]

Mail me at [email protected] and I will send the file. it is too big to include it as an attachment in VBWorld

[pramod kumar]

amitabh
plz, tell the name

[amitabh]

It's PSView Plus 1.0

[agent]

for those types of programs (including the Windows Memory Browser that comes with SpyWorks 6) that can show all loaded modules, a person would really have to know what to look for to find the mysterious dll. The end user is less likely to realize the file is new if it appears to be part of a program (Explorer for example).

[Nirces]

You can just merge the process with another and only 1 will show up, but it will create odd behavior. Another way to hide it is just give it a blank application name. and it set to a non formed application.

but you still have the thread avaible for viewing if your running it on 2k

[pramod kumar]

>Another way to hide it is just give it a blank application name. and it set to a non formed application.

Hi Nirces
be more clear, it is interesting,
how can we merge the process
i can't understand 'just give it a blank application name' ?

[amitabh]

Originally posted by Nirces

but you still have the thread avaible for viewing if your running it on 2k

You can even view it in Win 9X using the process viewwer supplied with VC

[pramod kumar]

Tell me how to merge the processor ?