** Random Thought **
What about a method that involves forcing the process to shutdown but when it restarts it is forced to restart in a sandboxed environment rendering it useless to the system. As for the pop-up messages what about a monitor refresh triggered by the pop-up. This would blank the screen for a moment giving the pop-up time to fade. Although the screen blanking out would be an indicator many users would just think it was a minor glitch.
*Extremely Crude* Alternatively use an auto-it script to hide the cursor, take a screen shot, hide the taskbar and replace the background with the screenshot and to be switched back to original settings after payload runs.
I'll begin the research to see if this is possible but wanted to get some thoughts on this.
