Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / Languages / Managed C++ / April 2006

Tip: Looking for answers? Try searching our database.

how to inject system process SERVICES.EXE as system restart?

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Vic.Dong - 26 Apr 2006 12:14 GMT
Hello. all:

I want to inject a DLL of my custome hook dll to system serice SERVICES.EXE
application as every OS restart?

B.R.

VIC
William DePalo [MVP VC++] - 26 Apr 2006 17:02 GMT
> I want to inject a DLL of my custome hook dll to system serice
> SERVICES.EXE application as every OS restart?

Why not take a step back an explain what you want to do and not how to do
it?

Regards,
Will
Vic.Dong - 27 Apr 2006 03:36 GMT
Hello:

Sorry.
I make a application that is about some file data security. I want to delete
my some important temp file as OS restart.
If I put it to registry "HKEY...\RUN" setting, but it maybe be deleted by
someone.

B.R.

VIC

"William DePalo [MVP VC++]" <willd.no.spam@mvps.org> дÈëÏûÏ¢ÐÂÎÅ:%23NelCrUaGHA.1220@TK2MSFTNGP02.phx.gbl...
>> I want to inject a DLL of my custome hook dll to system serice
>> SERVICES.EXE application as every OS restart?
[quoted text clipped - 4 lines]
> Regards,
> Will
William DePalo [MVP VC++] - 27 Apr 2006 04:08 GMT
> I make a application that is about some file data security. I want to
> delete my some important temp file as OS restart.
> If I put it to registry "HKEY...\RUN" setting, but it maybe be deleted by
> someone.

Can you open the file exclusive access and with the
FILE_FLAG_DELETE_ON_CLOSE option set. By the way, it is not enough to delete
the file. You should overwrite its sensitive data. There are published
algorithms and standards for this kind of thing, btw.

Regards,
Will
Scherbina Vladimir - 26 Apr 2006 22:34 GMT
Why exactly to services.exe? Try documented approach - winlogon notification
packages - it will allow you to create your own dll that will handle
winlogon.exe events and process them in the address space of winlogon
process.

Signature

Vladimir
manage content: http://www.infostoria.com/
blog: http://thespoke.net/blogs/vladimir_scherbina/

> Hello. all:
>
[quoted text clipped - 4 lines]
>
> VIC
Tim Roberts - 27 Apr 2006 07:35 GMT
>Why exactly to services.exe? Try documented approach - winlogon notification
>packages - it will allow you to create your own dll that will handle
>winlogon.exe events and process them in the address space of winlogon
>process.

The rumor is that this ability will be removed from Vista, because almost
the only users of winlogon add-ins have been spyware.
Signature

- Tim Roberts, timr@probo.com
 Providenza & Boekelheide, Inc.

Scherbina Vladimir - 27 Apr 2006 18:38 GMT
Yes, I remember this rumor. I hear it each time when the talk about winlogon
notification packages begin. Thanks for reminding once again.

Signature

Vladimir
manage content: http://www.infostoria.com/
blog: http://thespoke.net/blogs/vladimir_scherbina/

>>Why exactly to services.exe? Try documented approach - winlogon
>>notification
[quoted text clipped - 4 lines]
> The rumor is that this ability will be removed from Vista, because almost
> the only users of winlogon add-ins have been spyware.

Rate this thread:







Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.