About LogOff/LogOn issue during driver is loaded.

c++ / delphi package - dll injection and api hooking

About LogOff/LogOn issue during driver is loaded.

Postby power888 » Thu Dec 10, 2015 11:34 am


I have some question.

I used one driver file (namely, MyDriver.Sys/MyDriver64.Sys) and 2 hooking dlls.
But Always, I have problem for LogOff/LogOn.. if problem happen, then Black screen is displayed.
(I tested with 3.1.8 and 3.1.10, and OS is Win7-64)

1. on PC, created 2 user account (user-A, and user-B)
2. Reboot PC, and logon by user-A
3. load driver. (driver name is MyDriver.Sys/MyDriver64.Sys)
4. laod 1st-hooking library. (for example, TerminationHook(64).Dll)
5. laod 2nd-hooking library. (for example, PrintHook(64).Dll)
6. Now click LogOff
7. Now, OS display logon screen, in this screen select user-B
8. ** sometimes, at this point, Black screen is displayed.. (namlely, dont display user-B desktop)
9. if user-B logon is successfully,
10. then in this time, 1st, 2nd hook-dlls are alived.
11. now logoff user-B
12. on logon screen, select user-A
13. ** Then, always display Black screen....
(if you click shift+Alt+Del, and execute Explorer.exe, then Desktop is displayed)
14. *** If I exclude explorer.exe in Load-Library(), then everything is worked well.

**** If I loaded one Hooking DLL, then, worked well...

Is it known issues?
Posts: 50
Joined: Sat May 23, 2009 8:55 am

Re: About LogOff/LogOn issue during driver is loaded.

Postby madshi » Thu Dec 10, 2015 11:56 am

No, it's not a known issue.

My suggestion would be to comment out all the HookAPI() calls in both hook dlls. Then check if the problem is still there. If not, put the HookAPI calls back in step by step. Maybe this way you can figure out which HookAPI calls makes problems?
Site Admin
Posts: 10266
Joined: Sun Mar 21, 2004 5:25 pm

Return to madCodeHook

Who is online

Users browsing this forum: Google [Bot] and 23 guests