![]() |
|
#6
|
|||
|
|||
|
I think the Registry is the best way to hide your DLL and also keep
it run (loaded) . if you put your dll in the following key (On Win NT) , ur dll would be loaded by Explorer during windows startup :-) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks Enjoy PS : u should register the dll and puts the CLSID in ShellExecuteHooks. |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Hiding processes using FROST (64bit) | typedef | x64 OS | 6 | 05-22-2014 23:21 |
| LordPE limited to 60 processes? | tbone | General Discussion | 0 | 07-01-2004 06:35 |
| IDA debugging sub processes | Bram Kate | General Discussion | 2 | 05-03-2004 18:28 |