Advanced Process Manipulation
     
Control from the inside


Advanced Process Manipulation

This program is FREEWARE.

DiamondCS Advanced Process Manipulation (APM) is an advanced process/module viewer and manipulation utility that allows unique control over target processes by literally becoming a part of them.

Take control of a process by becoming a part of it ...
Unlike conventional process viewers, DiamondCS APM doesn't control processes by remotely sending them instructions. Instead, APM safely attaches a part of itself to the target process, essentially becoming a part of that process. Once 'inside', APM is free to perform actions on behalf of the target process. For example, if it calls the ExitProcess API function, the target process terminates.

Control processes in ways that aren't conventionally possible ...
Because of this 'insider' nature, APM is able to do some remarkable things that aren't otherwise possible. For example, it can unload and load DLLs into the target process (allowing you to make plugins for virtually any program). It can even determine which ports the target process is using. APM has even proven its unique anti-trojan capabilities here in our lab by disinfecting an explorer.exe-infecting usermode-rootkit trojan from a test machine. It also serves as a useful way to see which modules are loaded in each process!

Screenshot:


More information about the main features is available here.

  DOWNLOAD - just 45kb! (Calculate)
     
Ready to run - no install required!
MD5: C9B4CE671F6BFCD5C1F9F78012711486

Supported Operating Systems:
Client   Windows NT, Windows 2000, Windows XP
Server   Windows NT Server, Windows 2000 Server, Windows Server 2003





Related websites:
 MSDN: DLLs, Processes and Threads
 MSDN: How to obtain a handle to any process with SeDebugPrivilege
 MSDN: LoadLibrary API
 MSDN: CreateRemoteThread API


Copyright © 1999 - 2010, Diamond Computer Systems Pty. Ltd.  All rights reserved.