search

MahdiSafsafi / DDetours

Delphi Detours Library
Mozilla Public License 2.0
373 stars 157 forks source link

AV Error while hooking 'ZwQuerySystemInformation' #35

Closed schiva closed 8 years ago

schiva commented 8 years ago

There was no error when hook 'MessageBoxA'. But, There was problem while hook ZwQuerySystemInformation API (ntdll.dll).

I made dll and i inject dll into other target process. Hooking was working successfully. But , AV Error occured when target process terminating. I mean i close taget process window. But, there was no problem when i try to hooking MessageBoxA in the user32.dll.

schiva commented 8 years ago

I solved. I had a mistak. i call interceptRemove when dll_process_detach event. it was a mistake. Thanks.