Thread: Detecting CreateRemoteThread

  1. #1
    Registered User
    Join Date
    Aug 2001
    Posts
    100

    Detecting CreateRemoteThread

    I've been wondering if there's any simple way to detect if any of the running processes are calling CreateRemoteThread().
    Thanks in advance
    Sauron a few seconds before his defeat:
    "What? A 'division by 0' error?!?"

  2. #2
    Registered User
    Join Date
    Aug 2001
    Posts
    100
    hmm... and VirtualAllocEx() as well, even though I think that the detection process should probably be very similar for both of them.
    Sauron a few seconds before his defeat:
    "What? A 'division by 0' error?!?"

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. Accurately detecting function calls
    By Mole42 in forum C Programming
    Replies: 5
    Last Post: 05-17-2009, 04:01 AM
  2. createremotethread and writeprocessmemory problems
    By cloudy in forum C++ Programming
    Replies: 1
    Last Post: 07-03-2005, 05:06 PM
  3. CreateRemoteThread() for subclassing
    By bennyandthejets in forum Windows Programming
    Replies: 24
    Last Post: 07-26-2003, 09:23 AM
  4. Detecting CD drive letters in the Win32 API...
    By SyntaxBubble in forum Windows Programming
    Replies: 1
    Last Post: 10-07-2002, 02:20 AM
  5. Detecting two consecutive spaces in string
    By bob2509 in forum C++ Programming
    Replies: 20
    Last Post: 04-22-2002, 01:48 PM