Author Topic: Dll problem when inject in ntvdm.exe  (Read 7260 times)

Offline emilio

  • New
  • *
  • Posts: 4
Dll problem when inject in ntvdm.exe
« on: April 02, 2009, 10:49:43 AM »
I've used PeCompact ( parameter: /Cl:9 /Wl:Y /Dt:Fast /Cic:N /Ri:N /Cr=N ) to compress my dll ( activex + BHO made in Visual C++98 ). When I use SetWindowsHookEx to inject my dll in some process, if there is a 16 bit process in memory (loaded by ntvdm.exe) the process get crashed. My SO is Windows XP. Is there a solution for this problem ?

Best Regards
Emilio



Offline Jeremy Collake

  • Administrator
  • Member#
  • *****
  • Posts: 5281
  • Gender: Male
  • The Lasso
    • Bitsum
Re: Dll problem when inject in ntvdm.exe
« Reply #1 on: April 03, 2009, 09:26:29 AM »
Interesting, I've not heard of such a problem before. I assume that it does work when you don't compress with PECompact?
Software Engineer. Bitsum LLC.

Offline emilio

  • New
  • *
  • Posts: 4
Re: Dll problem when inject in ntvdm.exe
« Reply #2 on: April 03, 2009, 03:50:09 PM »
Yes, if I dont compress it works well. Before I try Pe Compact I used to compress my dll with other packer that works when is injected in ntvdm, but that packer does not work with DEP protection, and Pe Compact has a better compression.

Offline emilio

  • New
  • *
  • Posts: 4
Re: Dll problem when inject in ntvdm.exe
« Reply #3 on: April 06, 2009, 06:33:16 PM »
If I send you an example may you help me ?

Offline Jeremy Collake

  • Administrator
  • Member#
  • *****
  • Posts: 5281
  • Gender: Male
  • The Lasso
    • Bitsum
Re: Dll problem when inject in ntvdm.exe
« Reply #4 on: April 10, 2009, 02:37:25 PM »
If I send you an example may you help me ?

I am sorry, but you will need to purchase a commercial license for such assistance. You must also reveal the nature of your software, so that I can ensure it isn't malware of any type. I'm sorry for these restrictions, they are out of necessity.
Software Engineer. Bitsum LLC.

Offline emilio

  • New
  • *
  • Posts: 4
Re: Dll problem when inject in ntvdm.exe
« Reply #5 on: April 12, 2009, 07:22:18 PM »
Hi, the restrictions is ok. I have a commercial license, I will send you a private message about my software.