A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #9455  by Niko
 Sun Oct 30, 2011 12:47 pm
Hi all! I don't know if this section is correct or not(in case it's not I apologize)
I'm developing a C++ application designed to avoid Dll Injection in process address space, especially DLLs loaded using the AppInit_DLLs RegKey.
I've studied how AppInit_Dlls work but I simply can't figure out how to avoid Dll Loading in my protected process address space!

Do you have any hints to suggest me?
Every help will be greatly appreciated!

P.S. I'm not interested in how to prevent an application from writing in the registry value AppInit_DLLs, I simply want to prevent DLL loading in the address space AFTER the AppInit value has been set!