Detecting a kill process.

[news.microsoft.com]

How can a VB program detect a kill process which was used to close it down.
I have a routine that detects when a user exits the program and I can track
the session times. But how can I detect when a kill process was done on the
process either by the task manager or by Citrix for example?

Bill

 

[Michel Posseth [MCP]]

AFAIK

If a process is forcefully killed by the taskmanager you can not detect
this or cancell this
in all other shutdown situations you can handle the onshutdown event
handler


There was once a question here in the group , how someone could detect that
there program was forcefully shutdown
in my opinion this can only be done with a guardian program the main app c
watches the guardian and the guardian watches the main app
in this way you have a 100% sure event .

Programs that uses this aproach are MSSQL , Firebird database ( where it is
actually called guardian )

regards

regards
Michel Posseth [MCP]
http://www.vbdotnetcoder.com

 

[Ketchup]

What if you hide the process from the Task Manager instead? Even root kits
simply hide themselves from Task Manager.

http://www.delphifaq.com/faq/delphi_windows_API/f514.shtml
http://w-shadow.com/blog/2006/09/21/hiding-from-nt-taskmanager/