Hey guys, The JOB is waiting for you!

Originally posted by GamingMasteR PH acts well on infected boxed than PE does !!

Agree.


Edited by Meriadoc - 07 June 2009 at 10:02am

Hello, wj32.

Do you really think the only process viewer there should be is Process Explorer?

Though you addressed this question to dsolomon, let me give my point view on it: dsolomon did not suggest that there should be Process Explorer only. He just asked how Process Hacker differs from Process Explorer.
Well, you explained the differences in your reply.

Is there really no point in creating a process viewer since Process Explorer already exists?

My point of view: if the answer to this question were "there is none", then we would all still be using e.g. Norton Commander for DOS, because all the NC clones would never have been written. We all know they have been developped and a few of them grew more powerful than the original NC ever was. So as long as you think there is a point in developping Process Hacker, there is a point in doing so. Moreover, competition is good for business. 

Kind regards,
SvenBomwollen
 


Edited by SvenBomwollen - 07 June 2009 at 1:18am

Originally posted by dsolomon What's the point of this project? What are the key features that differ this from Process Explorer?   If there are some key things missing in Process Explorer, Mark wants to know about it - submit them in the forum in the usual place.

( Rant: )

Do you really think the only process viewer there should be is Process Explorer? Is there really no point in creating a process viewer since Process Explorer already exists?

For starters, Process Hacker is open source while Process Explorer is not. PH has advanced process termination while PE doesn't. PH highlights GUI threads. PH lets you enable/disable/remove privileges. PH lets you read/write memory. PH lets you unload modules. PH lets you change handle attributes. PH shows you all services and lets you modify them.

I don't think Mark is even looking at the Feature Requests topic. I'm not saying that Mark is obliged to update PE with new features, but your attitude is very frustrating (it's not just you though). You're saying I'm not allowed to create a new process viewer with the features I want in it - I need to use PE and post everything on a wishlist, even if the features I request will never be added.

Smart Kill is the best termination method i've seen till now .

Enumerate the process's threads .

Kill every thread by inserting APC that will call PspExitThread to the current thread .

Don't insert the APC using normal KeInsertQueueApc routine because it could be hooked, use your own apc insertion method or use the unexported api KiInsertQueueApc .

There're more spices 

Edited by GamingMasteR - 08 May 2009 at 9:45am

Do not apply if you will be too busy to work on Process Hacker.

Sounds fun, and while I certainly understand the reason for it the possibility of the above prevents me from getting involved.