Project Detail

Description

I need to be able to hide a server process in the Processes tab of Task Manager. I do not want to shut down Task Manager or lock it out or anything of that nature. The computer users must have full access, otherwise, as this is a security computer. But the process that allows remote access must not be detectable by anyone that gets on the computer and tries to end the process. They should not be able to even be aware it is there so they cannot figure out the name of the process.


Ideally (ideally) I would be able to hide the folder that contains the process, as well. Since it is a service, it does run when the computer is restarted. But a disgruntled person can also go to Windows Explorer and find the folder and delete it. So ideally it would be hidden there, also, but still run as a service when the computer started. I know there are programs out there like Hide Expert but they create a folder in Windows Explorer which kind of defeats my purpose here!

The program is UltraVNC. We are using version 1.0.2 (others don't work as well for us).

If you go here: http://uvnc.com/download/index.html, you'll find the links you need, I believe. This will go on a Windows XP computer. I have the computer here at my office so when you are ready, let me know and I'll download it and test it.


1. The process has to be invisible in Task Manager. The process is a server process.
2. It would be GOOD if it was also invisible in the Add/Remove programs list.
3. It cannot be a rootkit as we have AVG on the workstation and don't want it popping up flags. (For everyone to know it's running defeats the purpose of hiding it.)
4. It should not appear under the /Program Files directory. If it is appears under the /Windows directory with some name that does not give it away we would probably be o.k. with that [nobody looks in the Windows directory]. I imagine I have control of where the program will show in Explorer or maybe it doesn't show at all! It would be good if your solution did not show up visible anywhere, either.

The service should disappear (or never appear) in the TM even though it seems to be among the last ones to load -- gathering from the fact that it seems that other things show up ahead of it. So just sending a hide command at reboot might cause it to be "missed" when it comes to hiding it.