show messagebox if any process in the ram

[hamooza99]

hi ,. i need a way to show messagebox if any new process in ram , thanks

 

[jmcilhinney]

You're going to have to provide a far more detailed explanation of what you want because what you've posted is far too vague.

 

[hamooza99]

Well ..
I want a program that shows Message Box if the user opens a new process
Example: When open mozilla Firefox I want to show a messagebox from my programme and thank you.

 

[inkedgfx]

would that be considered SubClassing...?

InkedGFX

 

[AceInfinity]

Well ..
I want a program that shows Message Box if the user opens a new process
Example: When open mozilla Firefox I want to show a messagebox from my programme and thank you.

Now this would either involve a timer to check at intervals, or a hook on NtQuerySystemProcess but I will not show you how to do that since that kind of information could result in malicious code even if I could come up with a method to do it. .NET may not be the choice either for things like that because it's not really a lower level language, so I wouldn't know how you'd do it, but either way, I'm not going to be held responsible for any rootkits out there. So we'll stick with a Timer.

Here's A way:
-Threading.Timer()
-Enumerate running processes from the System.Diagnostics namespace (Process class)
-Save a state of those running processes for future references to monitor any changes
-Enumerate again next interval, and check against the saved list of running processes for any changes
-If changes found, show the newly created process, otherwise keep on trucking...