🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: borland.public.cppbuilder.nativeapi
Article #13928

Re: HOOKS

#13928
From: Remy Lebeau (TeamB)
Date: Tue, 09 Sep 2003 06:46
28 lines
1941 bytes
"Brent" <nospam@nospam.com> wrote in message
news:3f5d6b58$1@newsgroups.borland.com...

> Does anyone know how to determine if any
> hooks have been registered with the OS?

There is no function or technique for determining that specifically, no.
About the closest you can get is to instal a WH_DEBUG hook, which is used to
intercept and debug other hooks.

> Or failing that, does anyone know how to determine
> if a hook dll has attached itself to your program?

Again, not specifically, no.  However, the WH_DEBUG hook will provide you
with the ThreadID for both the thread containing the destination hook
function as well as the ThreadID that installed the hook.  With those, you
can probably resolve the source ThreadID to its process and determine
whether that is the same process as your application.


Gambit


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.515 / Virus Database: 313 - Release Date: 9/1/03
Technical Details
Message-ID: <3f5d779a$1@newsgroups.borland.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-06!sn-xit-09!supernews.com!newshosting.com!news-xfer1.atl.newshosting.com!newsfeed.wirehub.nl!news.kweb.on.ca!KWeb!newsgroups.borland.com!not-for-mail
References: <3f5d6b58$1@newsgroups.borland.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10cc67,14c2304c6be58107
X-Google-Attributes: gid10cc67,public
X-Google-ArrivalTime: 2003-09-08 23:57:05 PST
From: "Remy Lebeau \(TeamB\)" <gambit47@yahoo.com>
Newsgroups: borland.public.cppbuilder.nativeapi
References: <3f5d6b58$1@newsgroups.borland.com>
Subject: Re: HOOKS
Date: Mon, 8 Sep 2003 23:46:30 -0700
Lines: 30
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
NNTP-Posting-Host: 207.175.226.26
Message-ID: <3f5d779a$1@newsgroups.borland.com>
X-Trace: newsgroups.borland.com 1063090074 207.175.226.26 (8 Sep 2003 23:47:54 -0700)
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-06!sn-xit-09!supernews.com!newshosting.com!news-xfer1.atl.newshosting.com!newsfeed.wirehub.nl!news.kweb.on.ca!KWeb!newsgroups.borland.com!not-for-mail