Multiple injections conflict on Win 7 64-bit

c++ / delphi package - dll injection and api hooking
Post Reply
manutai
Posts: 85
Joined: Sun Aug 03, 2008 1:40 am

Multiple injections conflict on Win 7 64-bit

Post by manutai »

Hello,
We are facing an issue where 2 of our components perform injection using 2 different MadCHook drivers in the same process. On Windows 7 64-bit machine, the said process hangs on startup because of some conflict/deadlock in injection by both the components. We feel so because if we stop the injection of 1 component, the other works fine.

Also, this issue occurs only on Win7 64-bit for 64-bit processes. 32-bit processes on Win7 64-bit machine work fine! This is strange.
Any idea why this could occur or if we could be doing something wrong here? Please help us solve this issue.

P.S: We are using MadCHook version 3.0.2.
madshi
Site Admin
Posts: 10754
Joined: Sun Mar 21, 2004 5:25 pm

Re: Multiple injections conflict on Win 7 64-bit

Post by madshi »

Are both of your components using the same driver version? In any case, 3.0.2 is *very* old, it's from the year 2011! Might make sense to update to the latest build. I'm going to release a new official build soon, though, so you could just as well wait for that.
manutai
Posts: 85
Joined: Sun Aug 03, 2008 1:40 am

Re: Multiple injections conflict on Win 7 64-bit

Post by manutai »

Thanks for your help.
Yes, both the components use the same Madshi version.
And the issue got solved! Symantec anti-virus was blocking our components from getting injected in the target application.

The issue got solved by adding both our components in exception list of Symantec. Which is still not fully clear because all binaries were digitally signed and a single component was allowed to be injected, the hang occurred only when both our components were present. Any ideas?
madshi
Site Admin
Posts: 10754
Joined: Sun Mar 21, 2004 5:25 pm

Re: Multiple injections conflict on Win 7 64-bit

Post by madshi »

No idea. Anti-Virus software can be a bitch sometimes.
Post Reply