Dll problem when inject in ntvdm.exe

Started by emilio, April 02, 2009, 10:49:43 AM

Previous topic - Next topic

emilio

I've used PeCompact ( parameter: /Cl:9 /Wl:Y /Dt:Fast /Cic:N /Ri:N /Cr=N ) to compress my dll ( activex + BHO made in Visual C++98 ). When I use SetWindowsHookEx to inject my dll in some process, if there is a 16 bit process in memory (loaded by ntvdm.exe) the process get crashed. My SO is Windows XP. Is there a solution for this problem ?

Best Regards
Emilio

Jeremy Collake

Interesting, I've not heard of such a problem before. I assume that it does work when you don't compress with PECompact?
Software Engineer. Bitsum LLC.

emilio

Yes, if I dont compress it works well. Before I try Pe Compact I used to compress my dll with other packer that works when is injected in ntvdm, but that packer does not work with DEP protection, and Pe Compact has a better compression.

emilio

If I send you an example may you help me ?

Jeremy Collake

Quote from: emilio on April 06, 2009, 06:33:16 PM
If I send you an example may you help me ?

I am sorry, but you will need to purchase a commercial license for such assistance. You must also reveal the nature of your software, so that I can ensure it isn't malware of any type. I'm sorry for these restrictions, they are out of necessity.
Software Engineer. Bitsum LLC.

emilio

Hi, the restrictions is ok. I have a commercial license, I will send you a private message about my software.