Click here to Skip to main content
15,905,414 members
Home / Discussions / C / C++ / MFC
   

C / C++ / MFC

 
GeneralRe: question about macro define Pin
S. Senthil Kumar4-Jul-05 5:01
S. Senthil Kumar4-Jul-05 5:01 
QuestionHow to detect the dll or exe from the address(memory) of its function? Pin
saravananvv4-Jul-05 2:32
saravananvv4-Jul-05 2:32 
Hi,
I need to know how i can detect a keylogger.
I've found some basic technique in doing the same.
The technique is
1.Get the image of the user32.dll
2.Disassemble the dll( traverse the user32.dll ie find the memory location of all the api in the user32.dll)
3.If the api is hooked means it will be having a jump instruction when the original api is called.
4.If this jump instruction points to a memory location outside the image of the user32.dll then the api is hooked otherwise it is not.
5.I've found the memory address of the hooked function.

My question how can i detect the dll or exe from the function pointer address which i got from the discrepancies i found when the api is hooked.

Pls provide a solution to that.



Regards
saravanan
GeneralDebugging VC++ 7 Code Pin
manjums2002@yahoo.com4-Jul-05 2:28
manjums2002@yahoo.com4-Jul-05 2:28 
GeneralRe: Debugging VC++ 7 Code Pin
Cedric Moonen4-Jul-05 2:34
Cedric Moonen4-Jul-05 2:34 
GeneralNon-blocking reading of input Pin
Cedric Moonen4-Jul-05 2:25
Cedric Moonen4-Jul-05 2:25 
GeneralRe: Non-blocking reading of input Pin
M.Mehrdad.M4-Jul-05 6:12
M.Mehrdad.M4-Jul-05 6:12 
GeneralRe: Non-blocking reading of input Pin
badal_akr4-Jul-05 21:20
badal_akr4-Jul-05 21:20 
GeneralPrint-Layout View implementation Pin
Maverick4-Jul-05 2:08
Maverick4-Jul-05 2:08 
GeneralRe: Print-Layout View implementation Pin
Jack Puppy4-Jul-05 2:31
Jack Puppy4-Jul-05 2:31 
GeneralRe: Print-Layout View implementation Pin
Maverick4-Jul-05 15:49
Maverick4-Jul-05 15:49 
GeneralRe: Print-Layout View implementation Pin
Maverick5-Jul-05 3:05
Maverick5-Jul-05 3:05 
GeneralRe: Print-Layout View implementation Pin
Jack Puppy5-Jul-05 4:25
Jack Puppy5-Jul-05 4:25 
GeneralLOGON Problem Pin
M.Mehrdad.M4-Jul-05 1:18
M.Mehrdad.M4-Jul-05 1:18 
GeneralRe: LOGON Problem Pin
2249174-Jul-05 1:36
2249174-Jul-05 1:36 
GeneralRe: LOGON Problem Pin
M.Mehrdad.M4-Jul-05 2:21
M.Mehrdad.M4-Jul-05 2:21 
GeneralRe: LOGON Problem Pin
2249174-Jul-05 4:53
2249174-Jul-05 4:53 
GeneralRe: LOGON Problem Pin
David Crow4-Jul-05 11:24
David Crow4-Jul-05 11:24 
GeneralNeed Help in Menus ( VC 6 ) Pin
m_amin834-Jul-05 1:15
m_amin834-Jul-05 1:15 
GeneralRe: Need Help in Menus ( VC 6 ) Pin
Jose Lamas Rios4-Jul-05 3:19
Jose Lamas Rios4-Jul-05 3:19 
Generalvs.net c++ to mysql4.1 Pin
__horus__4-Jul-05 0:24
__horus__4-Jul-05 0:24 
GeneralRe: vs.net c++ to mysql4.1 Pin
Bruno Miguel Ribeiro Fernandes4-Jul-05 1:19
Bruno Miguel Ribeiro Fernandes4-Jul-05 1:19 
General1KB/S problem Pin
a_du4-Jul-05 0:18
a_du4-Jul-05 0:18 
GeneralRemove LAN-Adapter Pin
chrisigo4-Jul-05 0:09
chrisigo4-Jul-05 0:09 
GeneralRe: Remove LAN-Adapter Pin
munawar19684-Jul-05 0:38
munawar19684-Jul-05 0:38 
GeneralRe: Remove LAN-Adapter Pin
chrisigo4-Jul-05 1:31
chrisigo4-Jul-05 1:31 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.