Giters

wbenny / injdrv

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

When the driver runs, the wow64 process under the 64-bit system of win8.1 can't get up. Has anyone encountered this problem?

wumn290 opened this issue · comments

commented

I use InjMethodThunk to cause the wow64 process to fail to start, but when I use InjMethodThunkless, I can inject 64-bit DLL into the wow64 process, but loading 32-bit DLL in this 64-bit DLL will fail.

commented

Hello, just use CapturedInjectionInfo->ForceUserApc = FALSE - works on all Windows x64.