Process.GetProcesses from x86 process on x64 system 1

[serializer]

I can't seem to get processes from x64 system in my x86 process. My main goal is just to retrieve names and kill processes - I don't need any further control.

Is it possible to accomplish this?

 

[MJB3K]

what code have you come up with so far?

Regards,

Martin

Computing Design And Services:

http://www.webrevolt.biz

 

[serializer]

Process[] processes = Process.GetProcesses();

This returns only x86 processes when x86 application runs on x64 machine.

thanks.

 

[whosrdaddy]

AFAIK, Process.GetProcesses() will return all processes.
to see the difference between x86 and x64 processes you must use the IsWow64Process API.

are you writing a service? this could be an ACL issue.

/daddy


-----------------------------------------------------
What You See Is What You Get
Never underestimate tha powah of tha google!

 

[serializer]

yes, this is running from a windows service - running as SYSTEM. What kind of permission is needed?

 

[whosrdaddy]

since your end goal is to kill processes,
your best option is to NOT use the system account, but a local admin account for example. I'm not sure if the "interact with desktop" flag on the service needs to enabled or not for this purpose.

/Daddy

-----------------------------------------------------
What You See Is What You Get
Never underestimate tha powah of tha google!

 

[serializer]

The SYSTEM account works for my needs and I use impersonation when needed. However, this came as a surprise.

 

[serializer]

I did test changing the user to a Administrator instead of system. Same problem, user cannot see x64 processes from x86 process on x64 system.

 

[whosrdaddy]

duh, didn't read the subject of your thread.
you can't see x64 processes from a x86 process.

rebuild your service for x64 target.

/Daddy

-----------------------------------------------------
What You See Is What You Get
Never underestimate tha powah of tha google!

 

[serializer]

So that is the only way? There is no x86 api for this or?

 

[whosrdaddy]

32-bit code is unaware of the 64-bit environment it is running in...

/Daddy

-----------------------------------------------------
What You See Is What You Get
Never underestimate tha powah of tha google!

 

[serializer]

ok, thanks!