madshi.net

It works, thank you very much.

One more question about the uninject function:
Currently I'm using "UninjectAllLibrariesW" and pass it only the driver name.
Do I need to switch to "UninjectLibraryW" or can I keep use "UninjectAllLibrariesW"?

Thanks, I'll try and update you asap

I see, I tried it, but still get this error
Currently I'm checking at the beginning of the DllMain function if the current process is "c:\windows\System32\ClipUp.exe" and return true if so (if no continue with the hook process).

Is there other way to exclude the process?

I can reproduce it easily, It happened on 4 out of 4 different Win 10 X64 Pcs (didn't try on X86 yet).

I'm using madCodeHook 3.1.17 (I checked it with 3.1.16 too).

It happened with your PrintMonitor.zip too (see the attached image).

Windows 10 PRO X64 - 1709

Hi, I'm getting an error when the process "c:\windows\System32\ClipUp.exe" runs (the windows activation uses this process). My dll skipped the hook when this runs, but I still get this error. The error is ClipUp.exe error which refer to my hook dll (see the attached image). Please advise. ...

That'd be great. If the problem only occurs once every couple of days, it will be very hard to analyze in detail. I mean I know the crash callstack, but it actually crashes inside of OS code when calling NtAllocateVirtualMemory, which doesn't make a lot of sense to me. Sorry, but it seems that I ca...

It happened to me once (after few reboots) and I stopped to check it.
The customer reported that it happened to him randomly on his 25 PCs class.

I'll be next to it tomorrow and will be able to give you more detailed answer.

That's not a problem, the PC is next to me.
What would you like me to do?

Thanks

Hi, I get randomly BSOD (UNEXPECTED_KERNEL_MODE_TRAP) on windows 10 x64 PRO. For now this is happening on only one of our client's system. madCodeHook 3.1.16 Dump file: https://drive.google.com/file/d/0B1sLXlxS-wFnaWRrUUx6NnZra28/view Attached the BSOD screenshot. OS Name Microsoft Windows 10 Pro Ve...

iconic wrote:Windows Update Agent (WUA) APIs (COM Interfaces) should be what you need. See here https://stackoverflow.com/questions/597 ... n-my-syste

--Iconic

Thanks, but same results WUA.
The update not included in the list of updates.

madshi wrote:Maybe they just say that you can't use SHA1 for the EV signing itself? But I don't have a clue...

OK, thank you for your patience.

This is GlobalSign support answer:
"This is to inform you that in EV Codesigning, SHA 1 Algorithm is not possible as per the CAB guidelines."

I guess it means that is not possible to re-issue it as SHA1 (or am I wrong?)

Yes, I've asked GlobalSign to reissue my certificate as both SHA1 and SHA256 for best compatability. So it's more or less 2 different certificates (but only paying for one). When using madCodeHook 4, you don't have to include the dll files when calling madConfigDrv, anymore. The driver verifies if ...