Hooking Create Process

**evansjahja** · 11-20-2009, 11:22 AM

Hi all, I want to ask, how do I hook CreateProcess? I want to write an antivirus program with Real Time Protector. Thanks.

**gibra** · 11-20-2009, 05:55 PM

Antivirus in VB6.0 ???

**evansjahja** · 11-21-2009, 10:12 PM

Originally Posted by gibra

Antivirus in VB6.0 ???

well yes. So far I already able to check whether it is a virus or not by using (custom/modified and more collision proof) CRC32, and "heuristic" for vbs and bat.

**evansjahja** · 12-19-2009, 11:26 AM

bump

**gibra** · 12-20-2009, 08:40 AM

A true and efficient antivirus must run as system service.

Well known that VB6 can't create services.

**vb5prgrmr** · 12-20-2009, 10:08 AM

Ahhh... errrr... Ahhemm...

Gibra, sir/madam,

It is well know that VB6 can create services BUT it is also well know that it is not recommended to create services with VB6.

http://www.freevbcode.com/ShowCode.asp?ID=4317

http://www.smsoft.ru/en/ntservice.htm

http://montgomerysoftware.com/Creati...S/Default.aspx

http://www.tek-tips.com/viewthread.cfm?qid=1471648

**evansjahja** · 12-20-2009, 10:45 AM

Originally Posted by gibra

A true and efficient antivirus must run as system service.

Well known that VB6 can't create services.

I agree with you, however I want to make a portable antivirus.

I've tried googling around for hooking "createprocess" thingy, but still no luck with VB. Any ideas?

**Hack** · 12-29-2009, 02:43 PM

Switch to VB.NET or even better C#

**evansjahja** · 12-30-2009, 12:08 PM

Originally Posted by Hack

Switch to VB.NET or even better C#

Hmm, I don't think I'll choose either. If I can't hook process using vb, maybe I'll move to C, or maybe C++, but not C#.

**vb5prgrmr** · 12-31-2009, 03:29 AM

You can hook a process with VB, and you can create threads with VB (but you cannot debug threads with VB). There are a couple of hooking tutorials out there and if you use your friends (yahoo, google, ask, answers, bing) you should be able to find them...

Good Luck

**evansjahja** · 12-31-2009, 01:13 PM

Originally Posted by vb5prgrmr

You can hook a process with VB, and you can create threads with VB (but you cannot debug threads with VB). There are a couple of hooking tutorials out there and if you use your friends (yahoo, google, ask, answers, bing) you should be able to find them...

Good Luck

Thanks for the tip, but I've tried googling since before I create this thread. Perhaps you could give me some link or at least some keyword for those search engine. I've tried "vb hook process" but still no luck with the code.

**Hack** · 12-31-2009, 01:36 PM

I found these two...

http://www.vbforums.com/showthread.php?t=357051

http://www.vbforums.com/showthread.php?t=358405

**evansjahja** · 12-31-2009, 01:53 PM

@Hack
Thank you so much.
Anyway, Happy New Year! (according to my time zone, I'm 53 minutes late)
errr this thread is closed : )

**Hack** · 12-31-2009, 01:56 PM

Happy New Year to you as well, and I have another 11 hours to go!

**vb5prgrmr** · 01-01-2010, 12:16 AM

Tick... Tick... Tick... 45 minutes to go here....

a few results here...

http://search.yahoo.com/search?p=vb6...8&fr=yfp-t-701

Good Luck

Thread: Hooking Create Process

Thread Tools

Display

Hooking Create Process

Similar Threads

How to create a waiting screen while the current form process a task?

best way to create background process

Create process from NT server

Create process from NT server

0x8001010e RPC_E_WRONG_THREAD when making out of process call from MTS component

Posting Permissions