🚀 go-pugleaf

DLL injection is not an intentional design feature - it's a hack and as such 
is open to problems.  Hence, most serious developers either i) go with 
madshi ii) go lower down the chain i.e. below the win32 api's.

If you need any particular help feel free to e-mail me - i've done a huge 
amoutn of work with injection and hooking

HTH

Mike C

"Mark Jacobs" <http://www.jacobsm.com/mjmsg.htm?BorlandNG> wrote in message 
news:465ff1e9@newsgroups.borland.com...
> "Mike Collins" <its@TheBottomOfThePost> wrote in message 
> news:465d98ef$1@newsgroups.borland.com...
>> Are you looking for a global protection and alert system to inform on 
>> rouge injection or do you have a specific requirement.
>
> I am looking for something similar to KAV6.0's detection mechanism. In 
> fact, I just want to log something to a file if my app detects such 
> activities.
>
>> A particularly good text is "Rootkits - Subverting the Windows kernal" by 
>> Greg Hoglund and James Bulter.  Madshi's site is also a very good basis 
>> for practical information.
>
> Thanks. I have a lot of reading to do. It seems some injection techniques 
> do not even call Win API routines to achieve their purpose - they install 
> low-level drivers to do it! Yikes! I wonder if KAV6.0 detects those?!?
> -- 
> Mark Jacobs
> DK Computing
> http://www.dkcomputing.co.uk
>