Process Hacker Forums

How does processhacker terminate processes that I can't as the SYSTEM account
https://gyazo.com/e7eb562a1954661ea20e2ca1a01dbdcd (Pic related)

Process Hacker has it's own driver that works in kernel mode and has more privileges than the SYSTEM account.

Your process is probably being manipulated by a driver or it's got this: https://msdn.microsoft.com/en-us/librar ... s.85).aspx

diversenok wrote: ↑19 Dec 2017 19:19

Process Hacker has it's own driver that works in kernel mode and has more privileges than the SYSTEM account.

More like, in driver, there are no permission checks performed

Kinda necro-post, but I would first disable the kernel driver. If it can still terminate, then it's NOT a driver thingie. Who knows, maybe some hook... If it deosn't work either, then others are right, it's the driver