Re: How to detect dll injection and hook installers on a Windows system

Article View: borland.public.cppbuilder.nativeapi

Article #1908

Back to borland.public.cppbuilder.nativeapi Previous Next

#1908

From: Mark Jacobs
Date: Fri, 01 Jun 2007 23:10

13 lines
1730 bytes

"Mike Collins" <its@TheBottomOfThePost> wrote in message 
news:46601737@newsgroups.borland.com...
> DLL injection is not an intentional design feature - it's a hack and as 
> such is open to problems.  Hence, most serious developers either i) go 
> with madshi ii) go lower down the chain i.e. below the win32 api's.
>
> If you need any particular help feel free to e-mail me - i've done a huge 
> amoutn of work with injection and hooking

I do not seem to be able to ascertain your email address.
-- 
Mark Jacobs
http://jacobsm.com

Technical Details

Message-ID: <4660a772$1@newsgroups.borland.com>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!news.glorb.com!newsfeed0.kamp.net!newsfeed.kamp.net!newsfeed.freenet.de!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail

References:

<465b45cb$1@newsgroups.borland.com> <465d98ef$1@newsgroups.borland.com> <465ff1e9@newsgroups.borland.com> <46601737@newsgroups.borland.com>

Show Full Headers

Complete Article Headers

X-Google-Thread: 10cc67,1b1d8084f8b63121
X-Google-Attributes: gid10cc67,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Reply-To: "Mark Jacobs" <www.jacobsm.com/mjmsg.htm?Borland Newsgroup>
From: "Mark Jacobs" <www.jacobsm.com/mjmsg.htm?Borland Newsgroup>
Newsgroups: borland.public.cppbuilder.nativeapi
References: <465b45cb$1@newsgroups.borland.com> <465d98ef$1@newsgroups.borland.com> <465ff1e9@newsgroups.borland.com> <46601737@newsgroups.borland.com>
Subject: Re: How to detect dll injection and hook installers on a Windows system
Date: Sat, 2 Jun 2007 00:10:46 +0100
Lines: 15
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
X-RFC2646: Format=Flowed; Response
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
NNTP-Posting-Host: 195.137.123.182
Message-ID: <4660a772$1@newsgroups.borland.com>
X-Trace: newsgroups.borland.com 1180739442 195.137.123.182 (1 Jun 2007 16:10:42 -0700)
Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!news.glorb.com!newsfeed0.kamp.net!newsfeed.kamp.net!newsfeed.freenet.de!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail

Reply to Parent Message