Commit Graph

115 Commits

Author SHA1 Message Date
wj32 c977db697f modules tab now shows mapped files
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@753 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-27 23:33:26 +00:00
wj32 f331d3fbb4 * fixed insane memory usage on Windows XP
* added Re-analyze menu item

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@733 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-26 10:09:21 +00:00
wj32 cbc297e0d7 * added sc.exe use for unelevated PH
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@728 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-26 08:04:00 +00:00
wj32 1be7ac1cef * "fixed" VistaMenu GDI+ handle leak
* added ProcessNode finalizer
* removed unused code from HackerWindow
* fixed token handle leaks
* minor GUI fixes

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@726 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-26 06:17:40 +00:00
wj32 f3547ad0ad * added GetHandleInformation and SetHandleInformation
* fixed CPU usage icon invoking
* fixed HandleProvider

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@691 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-21 04:51:57 +00:00
wj32 7f24cab371 * added "Run" menu item
* added Run As Administrator...
* added Show Details for All Processes

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@668 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-20 08:22:47 +00:00
wj32 bc593b4064 fixed bug #2617880 - "Killing ProcessHacker within ProcessHacker and Terminator"
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@660 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-20 06:06:36 +00:00
wj32 b57b6df3a0 #2608801 - "Add Shutdown options"
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@656 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-19 07:31:22 +00:00
wj32 9ccb056adf updated the Windows functions
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@648 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-18 10:26:36 +00:00
wj32 5d09200e20 * added code by Uday Shanbhag
* changed About box

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@643 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-17 02:09:36 +00:00
wj32 41e2dbceb9 * fixed .NET detection (for real this time)
* no longer deletes the KPH service if it's already running
* PH no longer requires UAC elevation

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@628 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-15 00:25:27 +00:00
wj32 9eeac62fd9 * removed hooks from KPH - this means that it can now support multiple clients
* added Restart and Set Token menu items
* KphOpenTokenEx now creates an access state - limited user accounts now have complete admin access to processes and tokens
* fixed problem where if a process image file can't be accessed because of permissions PH says it's packed
* fixed problem with .NET executables not being recognized

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@627 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-14 23:52:04 +00:00
wj32 74df64961c * PH now uses KPH even under a limited user account, giving it full admin access (to processes) anyway
* eliminated most usages of Process.Modules because it doesn't use KPH

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@626 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-14 21:46:28 +00:00
wj32 466c0719e7 fixed SymbolProvider and ThreadProvider so that it is possible to view symbolic start addresses of System (PID 4) after it is unprotected
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@625 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-14 10:56:31 +00:00
wj32 bd52ea4ad8 made a GetModules function for ProcessHandle - this means that we can now take advantage of KphOpenProcess
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@621 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-14 09:44:18 +00:00
wj32 399de14431 Process termination now uses KProcessHacker
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@617 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-13 05:27:47 +00:00
wj32 2a064484b7 * fixed thread window handle leak
* fixed GetHandleInfo handle leak

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@614 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-08 08:39:12 +00:00
wj32 111a99f704 added GDI and USER handle counts
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@612 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-08 00:38:22 +00:00
wj32 1c5351e7e0 slightly different notification icon
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@611 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-07 10:46:06 +00:00
wj32 4007f30db6 file verification is now async!
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@610 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-07 07:17:21 +00:00
wj32 3fe0992ff7 * finally refactored the token privileges code
* removed icon in options tooltips

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@609 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-02-06 05:38:49 +00:00
wj32 54381e753e fixed some typos
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@602 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-31 01:16:32 +00:00
wj32 e130f43ee1 use Win32Handle instead of closing handles manually
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@601 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-30 23:54:19 +00:00
wj32 cbc0b5b2cd * fixed KProcessHacker not working on XP
* finished CSRProcesses

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@599 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-30 08:54:33 +00:00
wj32 f5bf13a0ef Suspend and Resume functions for processes now use KProcessHacker
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@596 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-29 09:29:38 +00:00
wj32 62a47f102f added user apc code
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@590 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-27 10:17:34 +00:00
wj32 2b560d67c6 implemented KphOpenProcessTokenEx
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@586 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-26 02:28:27 +00:00
wj32 e339410c75 KphOpenProcess and KphOpenThread work perfectly on Vista
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@578 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-25 10:15:43 +00:00
wj32 cec7a95128 * doesn't use KphOpenProcess (too risky with BSODs)
* can protect and unprotect processes!

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@577 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-25 06:09:08 +00:00
wj32 e4fe153f83 new capability for KProcessHacker: custom rewrite of NtOpenProcess, bypassing almost all types of hooks!
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@576 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-25 03:52:32 +00:00
wj32 e84c57df74 * fixed groupbox text - should be "File Cache"
* added some defs from ReactOS

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@575 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-24 03:51:46 +00:00
wj32 06ff604706 very tiny capitalization correction
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@573 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-23 22:04:25 +00:00
wj32 0c890e399a displays service descriptions, dependencies, and dependents
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@572 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-23 21:03:20 +00:00
wj32 e8cc443fa2 changed this.Handle to this in ThreadHandle.cs
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@562 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-21 23:27:30 +00:00
wj32 0e42672dab * fixed relative rundll32 targets
* DeviceFileNameToDos and RefreshDriveDevicePrefixes don't need locks

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@560 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-21 21:25:45 +00:00
wj32 5b8212a986 added protection against PEB file name spoofing
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@559 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-21 09:02:12 +00:00
wj32 06e5f1a575 * new WindowsException class
* ProcessSystemProvider should now have an average of 0 exceptions/sec

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@551 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-20 10:44:22 +00:00
wj32 b9a7aa7a2f fixed massive GDI+ icon handle leaks
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@548 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-20 01:53:54 +00:00
wj32 3a9c00bd23 configurable imposter names
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@545 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-20 00:33:18 +00:00
wj32 6b541a9d24 fixed display of HKCR registry names
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@544 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 22:54:32 +00:00
wj32 0a7d293120 fixed device handle names (not file names)
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@543 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 22:52:59 +00:00
wj32 82113faac4 now resolves handle file names into DOS format!
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@542 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-19 22:50:11 +00:00
wj32 e69b70caf4 fixed memory corruption issues with the client
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@530 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-18 07:56:22 +00:00
wj32 24f9427887 * ProcessHacker can now find and dump the original KiServiceTable
* PE reader reads relocations
* Added kernel-mode kill method to Terminator

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@515 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-17 06:32:30 +00:00
wj32 6c446c35dc 1.3.2.0
* NEW:
   * Network tab - shows current network connections
 * FIXED:
   * Now the process tree and service list update instantly after 
     starting Process Hacker instead of waiting

git-svn-id: svn://svn.code.sf.net/p/processhacker/code@513 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-16 22:57:11 +00:00
deanme 7f998e5a31 add process's Tcp/Ip tab,and need to clean up the codes
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@511 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-16 16:29:38 +00:00
wj32 97ad9a9b45 Better method for suspending/resuming processes
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@508 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-16 00:36:55 +00:00
wj32 7587160c6c KPH is half-working...
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@503 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-15 08:35:57 +00:00
wj32 844cb9dde2 add preliminary kernel driver code (it compiles!)
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@501 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-15 02:52:52 +00:00
wj32 07ab959d06 Verifies file signatures (and detects Windows components by checking the files' owners and ACLs)
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@497 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2009-01-15 00:06:36 +00:00