3 ms·
https://stackoverflow.com/questions/869320/how-do-i-prevent-dll-injection https://stackoverflow.com/questions/869320/how-do-i-prevent-...
by nikbackm 9y ago
https://stackoverflow.com/questions/869320/how-do-i-prevent-dll-injection https://stackoverflow.com/questions/869320/how-do-i-prevent-...
- CyberShadow 9y agoHmm. I guess trashing your local LoadLibrary copy will stop 90% of software not specifically targeting Chrome... but that's still trivial to circumvent. I thought perhaps there is some Windows feature that could be taken advantage of, something like Internet Explorer's protected mode.
- therein 9y agoThere is also "Protected Processes". http://www.alex-ionescu.com/?p=34 http://www.alex-ionescu.com/?p=34
- Arnt 9y agoThe AV vendors need to ship the Chrome injection code to their customers, which includes the Chrome development team. And the Chrome announcement says explicitly that Google is willing to stop Chrome, so the AV vendors have to carry out the injection in such a way that it cannot even be detected after the fact. A real challenge.