Once the application installs a system-wide hook, the operating system maps the DLL into the address space in each of its client processes. So choose dll the dll will not unload after application.
By The Way, Remember To Store The Handle Obtained By SetWindowsHookEx() in Shared Data Section,Because .. A System-Wide Hook Is Loaded By Multiple Precesses That Don't Share The Same Address Space.
看一下这个帖子,http://www.csdn.net/expert/topic/611/611265.xml?temp=.1606867,其中Neville(昨夜流星ms)的回复,那就是原因,但是,send无法hook,找不到原因,也没人合理解释。
www.oldworm.comhook api有很多实现,你们都把眼光盯在Jeffrey Richter的modify import table上,这种办法也只能解决一部分问题,并不是什么情况下都可以使用的。
但是忘了是怎么一回事了~
我在网吧~
没有源码~
我不改了哪里了~
忘了~
:)
http://www.csdn.net/expert/topic/712/712196.xml?temp=.4249994
A System-Wide Hook Is Loaded By Multiple Precesses
That Don't Share The Same Address Space.