C++ make an exe unkillble by taskkill /F or taskmanger endprocess

Question

I'm new to C++ and can somebody please provide me a full code to hide a certain exe? I know there's something to do with editing the ACL in windows but I'm not sure about the details.

THANKS!

Answer 1

You can't, at least not from user mode. You can hide your executable in other ways ranging from obfuscation to process hollowing, but you can't prevent it from being killed. The reason is because any other process, even in user mode, has access to open a handle to any other process at or lower than its permission level. What it sounds like you want is ObRegisterCallbacks from a kernel driver.