Thread: block program from seeing process tree

I'm not sure if this is the right place to ask this, but does anyone know if it is possible to disable a program from seeing the process tree?

I have a program that I can only run one instance of. When I try to start it a second time, it doesn't do anything. I would like to create a script that loads the program in a way that I can run multiple instances. Since I assume the program checks the process tree on startup to see if an other instance is already running, I figure disabling access to the process tree could do the trick.

Any ideas anyone?

There is a hacky way to see if your process is already running...if it uses a window and it has a title. You look for the unique window title by calling the appropriate EnumWindows family of functions using P/invoke. If you find a window with the specified title then you know an instance of your process is already running. There are better ways to determine this but I thought I would offer it up.

Originally Posted by nvoigt

There is a way to have a user only see his own processes so you could start it as another user to achieve the desired effect, but checking the process tree is not actually the easiest way to force only one instance of your program, so it might not be as successfull as you think it will be. Try copying your program and running it from a different folder and different name of the executable. If that works, great. If not, your process list will not help either.

Good idea, but you were right; it didn't work. Any ideas of how I could bypass it anyway?

Originally Posted by VirtualAce

There is a hacky way to see if your process is already running...if it uses a window and it has a title. You look for the unique window title by calling the appropriate EnumWindows family of functions using P/invoke. If you find a window with the specified title then you know an instance of your process is already running. There are better ways to determine this but I thought I would offer it up.

I'm not really looking for ways to make sure only one instance of a program can be ran, rather than ways to bypass it.

Originally Posted by grumpy

There are many possible ways that a program can detect another instance of itself. Not all of them involve looking at a process tree.

A common way is actually using a mutex or a semaphore (these are objects managed by the system). There are ways and means of blocking such techniques but there are also countermeasures (for example, controlling access to the mutex).

Generally, these types of questions come from people who are trying to bypass licensing schemes, or something similar, so I am disinclined from offering solutions.

Well I'm trying to run 2 instances of the same multiplayer game. I can accomplish the same result by running each instance in a different virtualpc, but that seems like to much overhead.