469,954 Members | 1,793 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 469,954 developers. It's quick & easy.

how to inject system process SERVICES.EXE as system restart?

Hello. all:

I want to inject a DLL of my custome hook dll to system serice SERVICES.EXE
application as every OS restart?

B.R.

VIC
Apr 26 '06 #1
6 2422
"Vic.Dong" <do******@drm.net.cn> wrote in message
news:%2****************@TK2MSFTNGP05.phx.gbl...
I want to inject a DLL of my custome hook dll to system serice
SERVICES.EXE application as every OS restart?


Why not take a step back an explain what you want to do and not how to do
it?

Regards,
Will
Apr 26 '06 #2
Why exactly to services.exe? Try documented approach - winlogon notification
packages - it will allow you to create your own dll that will handle
winlogon.exe events and process them in the address space of winlogon
process.

--
Vladimir
manage content: http://www.infostoria.com/
blog: http://thespoke.net/blogs/vladimir_scherbina/

"Vic.Dong" <do******@drm.net.cn> wrote in message
news:%2****************@TK2MSFTNGP05.phx.gbl...
Hello. all:

I want to inject a DLL of my custome hook dll to system serice
SERVICES.EXE application as every OS restart?

B.R.

VIC

Apr 26 '06 #3
Hello:

Sorry.
I make a application that is about some file data security. I want to delete
my some important temp file as OS restart.
If I put it to registry "HKEY...\RUN" setting, but it maybe be deleted by
someone.
B.R.

VIC
"William DePalo [MVP VC++]" <wi***********@mvps.org> 写入消息新闻:%2****************@TK2MSFTNGP02.phx.g bl...
"Vic.Dong" <do******@drm.net.cn> wrote in message
news:%2****************@TK2MSFTNGP05.phx.gbl...
I want to inject a DLL of my custome hook dll to system serice
SERVICES.EXE application as every OS restart?


Why not take a step back an explain what you want to do and not how to do
it?

Regards,
Will

Apr 27 '06 #4
"Vic.Dong" <do******@drm.net.cn> wrote in message
news:%2****************@TK2MSFTNGP03.phx.gbl...
I make a application that is about some file data security. I want to
delete my some important temp file as OS restart.
If I put it to registry "HKEY...\RUN" setting, but it maybe be deleted by
someone.


Can you open the file exclusive access and with the
FILE_FLAG_DELETE_ON_CLOSE option set. By the way, it is not enough to delete
the file. You should overwrite its sensitive data. There are published
algorithms and standards for this kind of thing, btw.

Regards,
Will
Apr 27 '06 #5
"Scherbina Vladimir" <vl****************@gmail.com> wrote:

Why exactly to services.exe? Try documented approach - winlogon notification
packages - it will allow you to create your own dll that will handle
winlogon.exe events and process them in the address space of winlogon
process.


The rumor is that this ability will be removed from Vista, because almost
the only users of winlogon add-ins have been spyware.
--
- Tim Roberts, ti**@probo.com
Providenza & Boekelheide, Inc.
Apr 27 '06 #6
Yes, I remember this rumor. I hear it each time when the talk about winlogon
notification packages begin. Thanks for reminding once again.

--
Vladimir
manage content: http://www.infostoria.com/
blog: http://thespoke.net/blogs/vladimir_scherbina/

"Tim Roberts" <ti**@probo.com> wrote in message
news:ne********************************@4ax.com...
"Scherbina Vladimir" <vl****************@gmail.com> wrote:

Why exactly to services.exe? Try documented approach - winlogon
notification
packages - it will allow you to create your own dll that will handle
winlogon.exe events and process them in the address space of winlogon
process.


The rumor is that this ability will be removed from Vista, because almost
the only users of winlogon add-ins have been spyware.
--
- Tim Roberts, ti**@probo.com
Providenza & Boekelheide, Inc.

Apr 27 '06 #7

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

5 posts views Thread by Nim | last post: by
10 posts views Thread by Mark | last post: by
7 posts views Thread by Peter Afonin | last post: by
3 posts views Thread by mikeisgreat | last post: by
9 posts views Thread by Scott M | last post: by
5 posts views Thread by joel_dizon | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.