Hi @ all,
yes you are right

Its possible, use this code below :
strComputer = "."
strProcess = "notepad.exe"
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colMonitoredProcesses = objWMIService. _
ExecNotificationQuery("select * from __instancecreationevent " _
& " within 1 where TargetInstance isa 'Win32_Process'")
i = 0
Do While i = 0
Set objLatestProcess = colMonitoredProcesses.NextEvent
If objLatestProcess.TargetInstance.Name = strProcess Then
objLatestProcess.TargetInstance.Terminate
End If
Loop
..and every new instance of notepad.exe will be terminated immediately.