Link to home
Start Free TrialLog in
Avatar of wfskmoney
wfskmoney

asked on

AppInit_dll from codeproject.com does not work on Windows 7 x64

Hi,

I am experimenting with AppInit_dll. I tried API hooking using this code sample: http://www.codeproject.com/Articles/49319/Easy-way-to-set-up-global-API-hooks

It is supposed to hide calc.exe from Task Manager. However it does not seem to work on Windows 7 64 bit.

I edited registry accordingly:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\AppInitHook.dll"
"LoadAppInit_DLLs"=dword:00000001
"RequireSignedAppInit_DLLs"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\AppInitHook.dll"
"LoadAppInit_DLLs"=dword:00000001
"RequireSignedAppInit_DLLs"=dword:00000000

It's still not loading...


thanks
ASKER CERTIFIED SOLUTION
Avatar of jkr
jkr
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of wfskmoney
wfskmoney

ASKER

I see. So the hooking .dll has to be compiled fo 64bit for attaching to 64bit processes?
Yup, that's pretty much the gist.