How to hook all runned processes ??

LeVuHoang · Post by **LeVuHoang** » Mon Nov 22, 2004 3:34 pm

hi Madshi,
I used madCodeHook to hook all process run after mine and It's OK. But how can i hook runned process ???
Thank you.
communty chihuahua-rescue Cialis child-care insurance-licensing public-transportation passport-office pain-killers low-income-housing community-colleges road-map provider day-cares food-stamps lumber-yards highways pediatricians rottweiler-breeders school-districts dept-of-transportation psychologists agricultural society-of-cpa airflights humane-societies prescriptions-online birth-certificates dept-of-ed dmv clinics engineer retailers emt-b law-firms travel-agent mortgage-quotes forensic-science government-jobs online-pharmacies chiro

Post by **madshi** » Tue Nov 23, 2004 8:03 am

madCodeHook hooks both currently running processes and newly created processes. You don't need to do anything special, madCodeHook does it automatically when using InjectLibrary(specialFlag).

Or what do you mean?

LeVuHoang · Post by **LeVuHoang** » Tue Nov 23, 2004 4:59 pm

if my program hooks SetWindowsHookEx, It can know what programs run after mine use SetWindowsHookEx function or what programs use SetWindowsHook again. Because, my program injected into SetWindowsHookEx before other programs use it.
now, If a program uses only one time SetWindowsHookEx (and still running) before my program injects into, can my program know which program used SetWindowsHookEx ???

Example :
If I wish to write an anti keylogger. The keylogger just uses SetWindowsHook one time to log keyboard message, and It has run before my program injects into SetWindowsHook, how to detect it ???

Thank you

Post by **madshi** » Tue Nov 23, 2004 5:11 pm

Well, madCodeHook can't look into the past. If you want to know whether a program called SetWindowsHookEx before your program started, you need to find a way to ask the OS about that. Don't know how that works. Or you have to make sure that your program is started first.

LeVuHoang · Post by **LeVuHoang** » Wed Nov 24, 2004 8:27 am

hi madshi,
can you give me an advice how does an anti keylogger work if the keylogger was started before ?
cost-of-living bmw-dealerships catholic-churches group-home [url=http://Valtrex.pharmaboard.us/]Valtrex[/url] law-firms stateof insurance-progressive home-inspector talent-agencies farmer-insurance driving-maps zip-code points-of-interest academy-of-family-physicians Lunesta nuring training-insurance permit-test adipex passport-application banking-commission ultrasound-technician criminal-lawyer real-estate landlord-laws office-manager commercial-lighting-insurance legal-secretary assistants interior-designing equine map-of-counties drug-stores veterns Ultram dental-assistant retailers home-care dermatologist

Post by **madshi** » Wed Nov 24, 2004 11:50 am

I don't know. Maybe it's possible somehow to ask the OS which SetWindowsHookEx hooks are installed. But I don't know how.

LeVuHoang · Post by **LeVuHoang** » Wed Nov 24, 2004 3:55 pm

ok, thanks madshi much