Click here to Skip to main content
Rate this: bad
good
Please Sign up or sign in to vote.
See more: C++ DLL Driver API hooking
I need to stop processes which are trying to inject DLL. I know that CreateRemoteThread and SetWindowsHookEx are used by malwares to do so. What Functions in kernel mode, in my driver, do I have too hook,SSDT Hooking, in order to prevent these processes from injecting dlls?Is there any other way to do so besides SSDT hooking?
Thank you.
Posted 5-Jan-13 19:48pm
lilyNaz536

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

  Print Answers RSS
0 OriginalGriff 6,045
1 DamithSL 4,611
2 Maciej Los 4,087
3 Kornfeld Eliyahu Peter 3,480
4 Sergey Alexandrovich Kryukov 3,310


Advertise | Privacy | Mobile
Web04 | 2.8.141220.1 | Last Updated 6 Jan 2013
Copyright © CodeProject, 1999-2014
All Rights Reserved. Terms of Service
Layout: fixed | fluid

CodeProject, 503-250 Ferrand Drive Toronto Ontario, M3C 3G8 Canada +1 416-849-8900 x 100