Detecting DLL Loading
PostPosted:Sun Oct 30, 2011 12:47 pm
Hi all! I don't know if this section is correct or not(in case it's not I apologize)
I'm developing a C++ application designed to avoid Dll Injection in process address space, especially DLLs loaded using the AppInit_DLLs RegKey.
I've studied how AppInit_Dlls work but I simply can't figure out how to avoid Dll Loading in my protected process address space!
Do you have any hints to suggest me?
Every help will be greatly appreciated!
P.S. I'm not interested in how to prevent an application from writing in the registry value AppInit_DLLs, I simply want to prevent DLL loading in the address space AFTER the AppInit value has been set!
I'm developing a C++ application designed to avoid Dll Injection in process address space, especially DLLs loaded using the AppInit_DLLs RegKey.
I've studied how AppInit_Dlls work but I simply can't figure out how to avoid Dll Loading in my protected process address space!
Do you have any hints to suggest me?
Every help will be greatly appreciated!
P.S. I'm not interested in how to prevent an application from writing in the registry value AppInit_DLLs, I simply want to prevent DLL loading in the address space AFTER the AppInit value has been set!