Hello F,
RegNotifyChangeKeyValue ?
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/sysinfo/base/regnotifychangekeyvalue.asp
hope it helps.
–
Best regards,
Alex mailto:xxxxx@bitdefender.com
Thursday, August 25, 2005, 8:04:35 PM, you wrote:
On 8/25/05, Don Burn wrote:
>> There is almost no reason to hook anything, but this is got to be one of the
>> stupidest reasons ever. At least if the guy is going to do this, point him
>> to the CmRegisterCallback routines of current OS’es.
>>
> This seems to be usable only in the kernel mode, is there an extension
> of this into user mode too? Is hooking the only way to go in the user
> mode?
>> Hooking as has been stated in so many discussions on this group, is just a
>> good way to crash. Fortunately, Microsoft is making it harder and harder to
>> hook.
>>
>>
> I have not used hooking before although I have read about it. Can you
> elaborate on Microsoft making hooking harder? They still seem to have
> Detours around, so I am wondering what is Microsoft making harder.
> Also, you mention hooking is a good way to crash, but if it turns out
> I do have to use hooking, I would appreciate knowing tips to carefully
> write hooks.
> Thanks
> ~fl
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
> –
> This message was scanned for spam and viruses by BitDefender.
> For more information please visit http://www.bitdefender.com/
–
This message was scanned for spam and viruses by BitDefender.
For more information please visit http://www.bitdefender.com/