Hello
@Kardo Kristal,
I've just written code for better process termination in C++, I was wondering if you'd like to use it in Crystal Security? Of course I'd show you how to use it, since Crystal Security is based in C#.NET.
It uses several methods to attempt to terminate the target process, you can use this for terminating malware before attempting to clean it off the system. I'm still working on it, to enhance it and make it more powerful, although I can show you what I've made so far if you'd like, you will still benefit from the current progress.
A more effective method would be via a kernel-mode driver, but Crystal Security does not need this yet at least. And it requires more money for code signing, so I shall leave this out of the equation. The C++ code I have made is for user-mode process termination, and unless you are dealing with malware which goes around setting hooks on functions to block termination or makes use of kernel-mode components, it should work fine.
In the future, if it's okay with you, I think I'll spend some time making you self defence for Crystal Security? (for example, blocking ZwTerminateProcess attempts to the process - if I have time, since of course I am busy with my product development also).
Cheers.