October 01, 2003
Spy: A Windows CE API Interceptor
->HookCreateProcessW(95f52:\Windows\Start Menu\MissingDllApp.exe,95fa0:) HookCreateFileW(a095f52:\Windows\Start Menu\MissingDllApp.exe,80000000,1,0) ret 81bfa896 err 183 Process a1bee51a #13 started HookCreateFileW(215f530:\HckMap.txt,c0000000,0,80000080) ret ffffffff err 32 HookCreateFileW(81072d9c:\Windows\Start Menu\MissingDll.dll,80000000,1,0) ret ffffffff err 2 HookCreateFileW(81072b88:\Windows\MissingDll.dll,80000000,1,0) ret ffffffff err 2 HookCreateFileW(81072b88:\MissingDll.dll,80000000,1,0) ret ffffffff err 2 HookCreateFileW(81072d9c:\Windows\Start Menu\MissingDll.dll.dll,80000000,1,0) ret ffffffff err 2 HookCreateFileW(81072b88:\Windows\MissingDll.dll.dll,80000000,1,0) ret ffffffff err 2 HookCreateFileW(81072b88:\MissingDll.dll.dll,80000000,1,0) ret ffffffff err 2 <-HookCreateProcessW(95f52:\Windows\Start Menu\MissingDllApp.exe,95fa0:)ret 0 err 126 Figure 4: Failure to load a DLL (excerpt from a trace).
|
|
||||||||||||||||||||||||||||
|
|