[programmer.cpp1986]

I wanna create a thread for a user mode process through kernel mode driver, how do i implement this?

[EP_X0FF]

Native thread?

[programmer.cpp1986]

no I wanna inject my code to a process through kernel driver.

[EP_X0FF]

This sounds like malicious behaviour. Check the TDL3 source code. It uses dll injection from kernel mode via APC. http://www.kernelmode.info/forum/viewto ... 5518#p5518

[frank_boldewin]

also check out twisters keusermodecallback implementation and article.

http://wasm.ru/article.php?article=keumc

http://wasm.ru/pub/21/files/ke_user_mode_callback.rar

[R00tKit]

another sample for user mode callback
Inject DLL в процесс из kernel-mode
http://forum.antichat.ru/showthread.php?t=108515