code_junkie

stopping MSI from launching an EXE in the SYSTEM context

Nov 10th, 2011
110
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.46 KB | None | 0 0
  1. On Error Resume Next
  2. strComputer = "."
  3. Set objWMIService = GetObject("winmgmts:" _
  4. & "{impersonationLevel=impersonate}!\" & strComputer & "rootcimv2")
  5. Set colProcessList = objWMIService.ExecQuery _
  6. ("Select * from Win32_Process Where Name = 'BackgroundProcess.exe'")
  7. For Each objProcess in colProcessList
  8. colProperties = objProcess.GetOwner(strNameOfUser,strUserDomain)
  9. If strNameOfUser = "SYSTEM" Then
  10. objProcess.Terminate()
  11. End If
  12. Next
Add Comment
Please, Sign In to add comment