I'm write a program to supervise all window application

like Task Manager in NT with hooking the message

WH_SHELL(HSHELL_WINDOWCREATED).

But, I have two problems.

1. 16bit application in NT

* first 16bit program run on a NT machine
 => HSHELL_WINDOWACTIVATED message occurs. (made by ntvdm.exe)

* second 16bit program run on a NT machine
 => No message occurs.

2. non-based window application.

How can I detect a 16bit(or none based window) application

start and finish?

Any your advice would be my big pleasure.

sekim.