Arno Garrels wrote: > Wilfried Mestdagh wrote: >> Hello Arno, >> >>> procedure PatchINT3; >> >> This procedure works great. But something is strange. If I run this >> in a separate application then it does not work. However as far as I >> know a DLL is loaded only once in memory. >> So then it should work also >> if I run this in a separate app > > I don't think so, each process uses its private, virtual address space > and WriteProcessMemory() writes to the virtual memory of the process > specified by parameter hProcess.
You could change it to take a process handle, PatchINT3(hProc: THandle). The entry points should be the same in all processes, AFAIR (it's a long time ago when I wrote my last virus ;-). -- Arno Garrels > > -- > Arno Garrels > > > >> and let the other applicaiton run >> like this: >> >> eg a console app: >> begin >> PatchInt3; >> ReadLn(); >> end. > > > > > >> >> --- >> Rgds, Wilfried [TeamICS] >> http://www.overbyte.be/eng/overbyte/teamics.html >> http://www.mestdagh.biz -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
