Sign in to follow this  
Followers 0
badzox

Need Help: Free/Unload Dll of Remote Process

1 post in this topic

Hi there,

hopefully someone could help to solve this problem:

- There is an Application with is attached via AppInit_Dlls Regkey unter HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows to every started process

- I want to unload this Dlls from any process, so i can delete it. Otherwise i have to remove this regkey and reboot to to delete this dll.

As far as I unterstood the problem this is possible:

- I must create a remote thread in every target process that loaded this Dll

- An then attempt to call FreeLibrary() in order to unload the target dll.

I´ve searched in this forum, but could not find a solution for this. _Injectdll etc... does Load a Libary, but not an unload of an Dll ..

I am a newbie wirting with autoit, so an help is welcome..

Greets

Badzox

Share this post


Link to post
Share on other sites



Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0