PhaseX Posted November 14, 2010 Share Posted November 14, 2010 Hi, I'm quite new with autoit, but have some programming experience (a little bit of java, python c). I'm trying to get into some windows automation, so I'd like to be working with the windows API's eventually. My question is if some process has been hooked and modified one of the api's in user32.dll lets say some malware changes one the functions. Is it still possible for my autoit program to use that function? If so would I need a separate copy of user32.dll in the folder where my autoit program is? Thanks for your help. Link to comment Share on other sites More sharing options...
Developers Jos Posted November 14, 2010 Developers Share Posted November 14, 2010 This is a vague question for a first timer to say the least. What exactly do you want to do with Autoit3? Jos SciTE4AutoIt3 Full installer Download page - Beta files Read before posting How to post scriptsource Forum etiquette Forum Rules Live for the present, Dream of the future, Learn from the past. Link to comment Share on other sites More sharing options...
PhaseX Posted November 14, 2010 Author Share Posted November 14, 2010 Well I've been playing around with AHK, but it is not as robust as autoit. This is more of a learning project for me.For my program to be:I'd like to specifically know when a program is loaded if a specific api or set of api's has been hooked and modifiedFind out which process did the hooking.Now in some extreme cases (this is much later), Let's say we have a trojan/malware that has infected us and is hidden. I'd like to be able to still find it. I know this may be a little out there for a beginner, but most malware/trojans would usually hook certain api's to return false values to task manager and or other programs. I'm wondering if its possible to check for these API's since they've already been hooked and modified? Link to comment Share on other sites More sharing options...
PhaseX Posted November 17, 2010 Author Share Posted November 17, 2010 bump? Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now