Application Detector

[xenoix]

Greetings fellow coders,

Yet again I'm in call of your assistance...

Basically I'm trying to create an application which detects when an application runs, and instantly kill it. For example: FireFox.

Now I've come up with something which sort of works (Just looping through processes and check the process name being the executable ie: firefox.exe)

This works, however if someone renames the application to: "asdf.exe" and then runs it, it works fine. Is there some way we can check to make sure it is the same program, even if its renamed?

Kinda like Virus detectors.

[Plater]

If you wanted to examine the .exe file run by opening it like a file and looking at the binary contents maybe.
Otherwise you could check what the main window title is? OR look at what DLLs its using?