invoke Process32First\Process32Next not show me news names !
My problem when i run my program.
And then run virus xmirg.exe my program not see xmirg.exe name !
But if i first run xmirg.exe virus and then run my program, then my program see name and terminate xmirg process. But name xmirg.exe stay (Process32First\Process32Next get me this name always) ! Why terminateprocess not destroy xmirg.exe name from process list ?
I use Process32First\Process32Next to get processes list of names.
My algorithm next:
2) Process32Next if eax=1 do 2)
3) if eax=0 do 1)
Last edited by Roman on 22 Nov 2017, 08:50; edited 1 time in total
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum