Layered Service Providers (LSP)

[omidgl]

I've used this method . but not with layered services. I've used API spying techniques to catch Socket calls from the program and return it what it want.

You can use this link as a reference to APISpying techs
h--p://www.internals.com/articles/apispy/apispy.htm

There is a section named "Winsock Hooking" in the above article that will guide you as sure.

Regards
OMID

[Cobi]

I've seen another way to implement this approach yesterday, were a little tool called iWeb Server (its just a little exe and works without installation) was supplied with the programm,

(http://www.ashleybrown.co.uk/iweb/)

and a new entry was added to the Host file (C:\WINDOWS\SYSTEM32\DRIVERS\ETC) to relocate a specific Adress, for example www.thinstall.com, to localhost.
So you don't have to play around in Kernel Mode or other build dependent regions of Windows and to minimize the compatibility of your release.