anti dll-injection protection - anyone know any such software?

[tahoma]

?

[CrazyM]

Hi tahoma

If it is a stand alone application you after, you might want to look at System Safety Monitor (http://maxcomputing.narod.ru/ssme.html?lang=en).

Information also available at Wilders Free Tools (http://www.wilders.org/free_tools.htm) in the firewall add-ons section. Download available at the SSM site or the Wilders Download Page (http://www.wilders.org/downloads.htm).

Some firewalls are now starting to include this functionality as well.

Regards,

CrazyM

[tahoma]

thanks a lot, looks like a useful tool. didnt quite figure it out yet though :)

[Wayne - DiamondCS]

There are no anti-DLL-injection utilities that I'm aware of -- creating one would involve writing a kernel-level driver to intercept and filter calls to CreateRemoteThread. It's possible, but it's messy stuff - we've created a kernel-level driver for TDS4/Wormguard4's file execution interception hook, and although it's working superbly now, we had many hurdles to cross in developing that. I can't see any anti-DLL-injection programs on the horizon sorry!