|
The reason is that these processes are using hooks into very low level functions of the OS - things like virus scanners, CD copy protection, etc often do this because they need to intercept calls to hardware functions or file access functions. The OS will not allow you to kill these processes because as I understand it, the protections around functions that run at this level are much less robust, therefore there is greater danger of causing damage if a function terminates unexpectedly.
Why do you want to kill these processes - or is this just something that interests you?
|
|
|
|
|
Just because your an admin on the machine doesn't mean you have "God" rights to everything. These processes cannot be killed because they're running in a system security context, basically in Ring 0 in the kernel space. Even as an Admin, you have no rights to kill a Ring 0 process.
sharma sanjeev wrote: Wouldn't it be possible to have a program that would act like a virus, it would just tell the hdd to overwrite those particular clusters, period.
No, because those blocks will be locked by the filesystem.
sharma sanjeev wrote: Is there a service that protects files / processes?
No, it's built into the NTFS and Security subsystems. They are not services that you see in the Service Manager.
sharma sanjeev wrote: can't I set the 'permissions' (or whatever they are called) to allow me to kill any process?
No. You can't kill, or even get permissions to kill, a process that's above your own security level.
sharma sanjeev wrote: 1. delete the process from memory, like a virus.
Can't be done. Did you think the Security Manager was just there for looks?
sharma sanjeev wrote: 2. reset the permissions for the process, so that I can kill it myself.
You cannot grant yourself permissions higher than your own account. Again, security is there for a reason.
|
|
|
|
|
So very true. Your Pentium or Pentium compatible processor has different modes that it can run in. Two of the most common are Real Mode and Protected Mode. Real Mode is a 16bit mode where one application can access and manipulate virtually everything in memory. DOS and early versions of Windows ran in Real Mode. Current operating systems run in Protected Mode. Protected Mode has 4 'rings' of protection, where Real Mode has no rings. 'Ring 0' is the ring that has access to everything. As you get into higher rings you get more and more restricted. Computer users generally have ring 2 or 3 permissions or something. That ring level does not have the rights to change its ring level. Access denied. You have to hack into the OS to do that. At that stage, whatever code you're running is a part of the 'OS' now. A screw up in coding can crash your computer or possibly even fry some hardware. This whole reply is off of memory, so if anyone notices any inaccurate information, I will not be offended by a correction.
|
|
|
|
|
Hi sanjeev,
Try SysInternal's pskill. You need to be an Administrator on the Local machine. If you have Debug Rights on the machine, you can get that group.
Jeff
|
|
|
|
|
I found my Cookies Folder missing in my Administrator Directory even after I choose "Show hidden files and folders" in Folder options.
I tried creating a Cookies folder in that Directory but it is saying that the folder already exist.
How can I make it to Cookies folder.
Help me.....
Thank u
Chandu
Thank u
Chandu
|
|
|
|
|
Uncheck Hide protected operating system files and check if you can see the folder.
Wout Louwers
|
|
|
|
|
Thank u for u r reply.
Its working.
Thank u
Chandu
|
|
|
|
|
I reinstalled my WinXP a week ago, basically erasing over the old OS, but leaving the rest of the files on the drive intact. Now I've got a hard drive full of junk that's not useable--the old Program Files directory has like 40 folders of programs that are no longer registered.
The biggest problem I have though is that when I go to open up folders from the old My Documents folder, it says access is denied. I want to delete some crap out of there to free up hard drive space, but it's not letting me. Is there any way you can access these protected folders, or do I have to reformat the whole drive again and spend a day reinstalling everything all over?
Your help is appreciated.
"Go to, I’ll no more on’t; it hath made me mad." - Hamlet
|
|
|
|
|
All of this is happening because you did not erase over your old Windows files when reinstalling. You're basically permanently locked out of your My Documents directory because it doesn't recognize your OS as being the same.
Reinstall again, but this time backup your files (to a CD or Hard Drive), then format your entire hard drive before reinstalling. Once your finished, copy everything back. This is the only way you are going to get everything back to normal.
Trinity: Neo... nobody has ever done this before.
Neo: That's why it's going to work.
|
|
|
|
|
MatrixCoder wrote: This is the only way you are going to get everything back to normal.
It very much is not.
|
|
|
|
|
You're accessing the files with a different SID, even if the account name's the same. You should be able to access the security tab on the folder, select advanced, then the 'owner' tab, and take ownership of the folder structure. That should give you the rights to do whatever you need.
|
|
|
|
|
|
Hi, I need to setup and configure ISA 2004 on windows server 2003. Does anyone know any web resource or an article about setup ISA step by step and configure internet access for user?
Thank in advance!!!
|
|
|
|
|
from sometime my system is getting hanged after half or one of browsing and continously after that.
its not like the hanging due to non respondence of any program..
its just that suddenly windows gets jam, and no control works not even cntrl+Alt+Del.
this problem is coming specially after i have installed new modem in my system.
i think this might be the reason.
i have no idea what to do.
please help.
thanks
|
|
|
|
|
I had this problem once and beleive it or not
a simple disk cleanup and defrag did the trick
---Although I think i also had spyware, but symantec
no detect
"Shorter of breath,
and one day closer to death." ~Pink Floyd
|
|
|
|
|
i accidentally deleted a C# project file and i don't use source safe so is it possible to recover the deleted project as the system was not rebooted.
|
|
|
|
|
Don't cross post in multiple forums.
|
|
|
|
|
Try any third party softwares like file recovery, etc....
If U Get Errors U Will Learn
If U Don't Get Errors U Have Learnt
|
|
|
|
|
I'd recommend setting up a source control repository, such as subversion so that this is easier in the future.
regards,
|
|
|
|
|
I have Sharepoint Services installed on my IIS 6.0 Windows 2003 machine. I have this machine hosting multiple web domains. I can only get the web sharepoint administration pages to work with the computers domain.
My computers domain is mysite.com. I am hosting mysite.com, website.com, and sites.com. I can only use the administration pages for the mysite.com domain.
Any ideas why?
This machine is not a domain controller.
The best way to accelerate a Macintosh is at 9.8m/sec² - Marcus Dolengo
|
|
|
|
|
I have my application running on windows and linux, but the problem is I must write separate scripts for updating my application and system stuff (.bat for windows, .sh for linux)
I had an idea to use cygwin to use .sh on windows, but I need something more compact.
What would you suggest to use for this purpose?
Thanks in advance
www.ip-sustavi.hr
|
|
|
|
|
Perl[^]and Python[^] are pretty good cross platform scripting languages. They both come standard with most Linux distros, but you'll have to install them on any Windows box you're using.
|
|
|
|
|
Are there any projects/articles that could help me?
|
|
|
|
|
not here - this is a .Net site. The Perl Monks[^] can teach you everything you need to know about Perl; Python I'm not very familiar with - Google would be your best friend for that one.
|
|
|
|
|
How would this WHERE caluse return no results?
WHERE UniqueID = 'C7B411C6-E17D-454a-9B7B-1A170F33A072'
OR UniqueID != 'C7B411C6-E17D-454a-9B7B-1A170F33A072'
There are items in the IS catalog, if i remove the WHERE clause they are returned. If I do a similar query using Contains() then its fine too.
WHERE Contains(UniqueID,'C7B411C6-E17D-454a-9B7B-1A170F33A072')
Now I don't want to jump the gun and suggest there is something fundimentally wrong here without fully understanding IS and its Sql Query language but equality is pretty basic, it's either equal to or not equal to.
Is this a case where FILE_NOT_FOUND might come in?
(WTF FTW  )
Any insight into this wierd behaviour would be great.
Andy
EDIT: Forgot to mention this is on Windows Xp Pro, where UniqueID is a cached VT_LPSTR, 40 length.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
