Process Scanning

[TheNoobie]

I'm looking into doing a search on all running processes, then doing a signature search of each process on a specific address to see if it matches the signature I provide. How do I go about doing this?

[webJose]

If this is Windows, then use CreateToolhelp32Snapshot() to create a snapshot of the running processes (http://msdn.microsoft.com/en-us/library/ms682489%28VS.85%29.aspx). Then you can use Process32First() (http://msdn.microsoft.com/en-us/library/ms684834%28VS.85%29.aspx) and Process32Next() (http://msdn.microsoft.com/en-us/library/ms684836%28VS.85%29.aspx) to enumerate the running processes.

The signatures part I don't really know about. I hope that you do once you get the processes enumerated. :D

[TheNoobie]

Yes, it would be for Windows XP/Vista. I appreciate the link, I'll look at it right now. Oh and I found my old signature class, so that's not a problem. :P