Search found 14 matches

by evisoft
Fri Aug 10, 2007 2:15 pm
Forum: madShell
Topic: GetSpecialFolder and CoUninitialize bug
Replies: 1
Views: 13498

GetSpecialFolder and CoUninitialize bug

Hi, madshi I think i found a bug in unit madShell. My dll plug-in for outlook stop response when I do OleUninitialize, basically Virtual Tree do this. After debuging several days i found that problem caused by function GetSpecialFolder It using TIShellObj.Create that call CoInitialize(nil); but neve...
by evisoft
Thu Mar 22, 2007 1:43 pm
Forum: madExcept
Topic: madExcept crash Outlook
Replies: 3
Views: 4798

I can't test with madTraceProcess because it not show Outlook 2007 as available. I notice that madTraceProcess detect: 1. Outlook 2007 + Delphi Plug-in with madExcept enabled ->not detect 2. Outlook 2003 + Delphi Plug-in with madExcept enabled ->detect 3. Outlook Express 6 + Delphi Plug-in with madE...
by evisoft
Fri Mar 16, 2007 7:22 am
Forum: madExcept
Topic: madExcept crash Outlook
Replies: 3
Views: 4798

madExcept crash Outlook

Hi, madshi I developed Outlook plug-in, using madExcept, it works fine but only on Outlook 2007 under Vista (for XP works fine) it crash Outlook when exit. It happens only time to time .. 1 time in 5-10 runs. I am sure that caused by madExcept because i removed and keep only empty plugin +MadExcept....
by evisoft
Mon Mar 12, 2007 7:46 pm
Forum: madCodeHook
Topic: Hook CreateProcess under Vista
Replies: 3
Views: 4188

Hi, madshi Seams was my fault, when I tried to build a simplified version of procedure I found that work, so after investingate my code, i found that using AnsiLowerCase... i not work when run program that req admin rights, so I read more your docs again about system wide hooking. I understand that ...
by evisoft
Sat Mar 10, 2007 9:33 am
Forum: madCodeHook
Topic: Hook CreateProcess under Vista
Replies: 3
Views: 4188

Hook CreateProcess under Vista

Hi, guys Recently i ported my program to Vista. I build service that inject my dll into (ALL_SESSIONS or SYSTEM_PROCESSES) and (not CURRENT_PROCESS). Injected dll hook CreateProcess and when winmail run, i inject other my dll into winmail. So i notice a problem, in UAC mode when i try to double clic...
by evisoft
Tue Dec 19, 2006 8:51 am
Forum: madExcept
Topic: madTraceProcess.exe don't detect injected dlls
Replies: 5
Views: 7536

Yes, i confirm that MAD section exists in dll file, also i can get madExcept for own exceptions... Steps to reproduce 1. Make an exe without madExcept (or get any exe). 2. Make a dll with madExcept 3. Inject dll into Exe file with InjectLibrary() 4. Run MadTraceTool. 5. MadTraceTool don't detect exe...
by evisoft
Sun Dec 17, 2006 12:06 pm
Forum: madExcept
Topic: madTraceProcess.exe don't detect injected dlls
Replies: 5
Views: 7536

MadTraceTool works fine to detect other applications that use MadExcept, even Outlook Plug-in, but applications where i using injected dlls not detect.

I use madExcept 3, OS WinXP, last version of madComponents
by evisoft
Fri Dec 15, 2006 1:28 pm
Forum: madExcept
Topic: madTraceProcess.exe don't detect injected dlls
Replies: 5
Views: 7536

madTraceProcess.exe don't detect injected dlls

Hi,

madTraceProcess.exe don't detect applications that have injected dlls with madExcept.

Any ideas to fix?

Thanks.
by evisoft
Tue Sep 06, 2005 9:05 am
Forum: madCodeHook
Topic: madCodeHook exception
Replies: 2
Views: 3947

madCodeHook exception

Hi, after i upgraded to last version of madCollection i start to get error in my program that start systemwide hooking. it happend only on Win9x, bff8abe5 KERNEL32.DLL DeleteCriticalSection 0046284b MYPRG.EXE madCodeHook FinalizeMadCHook 0046286d MYPRG.EXE madCodeHook Finalization 00404131 MYPRG.EXE...
by evisoft
Tue Jun 21, 2005 1:45 pm
Forum: madCodeHook
Topic: Call CreateProcessEx from CreateProcessACallback
Replies: 9
Views: 8378

SYSTEM_WIDE_9X

After removing SYSTEM_WIDE_9X.. logs come to normal.

Thanks madshi for point me in right direction.
Your library it's cool.
by evisoft
Tue Jun 21, 2005 1:34 pm
Forum: madCodeHook
Topic: Call CreateProcessEx from CreateProcessACallback
Replies: 9
Views: 8378

More details..

I have one E.exe that InjectLibraryA(CURRENT_USER and (not CURRENT_PROCESS), MYDLLSYSTEMWIDE.DLL, 0) inside MYDLLSYSTEMWIDE.DLL i hook create process function HookAPI('kernel32.dll', 'CreateProcessA', @CreateProcessACallback, @CreateProcessANext, SYSTEM_WIDE_9X); HookAPI('kernel32.dll', 'CreateProce...
by evisoft
Tue Jun 21, 2005 1:24 pm
Forum: madCodeHook
Topic: Call CreateProcessEx from CreateProcessACallback
Replies: 9
Views: 8378

Logs from procedure

Here are log from my call back procedure that was executed on win98 4:19:51 PM: Create suspended process. "C:\Program Files\Outlook Express\msimn.exe" 4:19:51 PM: Create suspended process. "C:\Program Files\Outlook Express\msimn.exe" 4:19:51 PM: Create suspended process. "C:...
by evisoft
Tue Jun 21, 2005 1:08 pm
Forum: madCodeHook
Topic: Call CreateProcessEx from CreateProcessACallback
Replies: 9
Views: 8378

My call back function

function CreateProcessACallback(appName, cmdLine: pchar; processAttr, threadAttr: PSecurityAttributes; inheritHandles: bool; creationFlags: dword; environment: pointer; currentDir: pchar; const startupInfo: TStartupInfo; var processInfo: TProcessInformation) : bool; stdcall; var AlreadySuspended:Bo...
by evisoft
Tue Jun 21, 2005 12:56 pm
Forum: madCodeHook
Topic: Call CreateProcessEx from CreateProcessACallback
Replies: 9
Views: 8378

Call CreateProcessEx from CreateProcessACallback

I want to inject my library from CreateProcessACallback function so i tried to CreateProcess in suspended mode.. then injectlibrary and resume and it works well for XP.. but for Win9x i saw that my CreateProcessACallback call many times.. don't understand why.. how to avoid this.. also i tried to ca...