Skip to content

Latest commit

 

History

History
46 lines (25 loc) · 1.71 KB

File metadata and controls

46 lines (25 loc) · 1.71 KB

MakeProcCrit

A tool that can make a process into a critical process.

(If such process is later closed, or terminated, it will cause a Blue-Screen-of-Death.)

This is also a POC project for my blog post:

"Native Functions To The Rescue - Part 1"

It covers the technical details of how to give a running process (or a thread) a critical status, or to remove it.


Download

You can download the binary file to run the MakeProcCrit tool here.

Operation

Make sure to run the tool as an administrator. It should give you the list of available command line options:

Screenshot1

Then, if you want to make a process critical, say, all running Notepads, you would do:

MakeProcCrit.exe 1 notepad

or, you can do it by a PID:

MakeProcCrit.exe 1 1234

Screenshot2

If the operation succeeds, and you try to terminate it, say, with a Task Manager, you'd get this warning:

Screenshot3

Alternatively, if you close that instance of Notepad, you'd crash the operating system:

Screenshot3

Finally, to remove the critical status from the poor Notepad (or from any other process), do:

MakeProcCrit.exe 0 notepad

For more details, please read the blog post.