Inject my Dll from a Service

[randy_dom]

Hi ,i've these Functions declared in my Dll , i'm focusing on
StartHook and StopHook , if i use them in a standalone Application all goes well .
But the problem is when using them in a Service i don't get any result there's no Hook .

Delphi-Quellcode:

function HookProc(code: Integer; wParam: WPARAM; lParam: LPARAM): LRESULT; stdcall;
begin
  Result := CallNextHookEx(Code, code, wParam, lParam)
end;
procedure StartHook; stdcall;
begin
  HookHandle := SetWindowsHookEx(WH_GETMESSAGE, HookProc, hInstance, 0);
end;

procedure StopHook; stdcall;
begin
  UnhookWindowsHookEx(HookHandle);
end;

The issue is only with Vista and up .

[sx2008]

You should allow the service to interact with your desktop.
Starting with Vista services by default are not allowed to interact with the desktop or any window on the desktop.

http://lostechies.com/keithdahlby/20...t-localsystem/

[randy_dom]

Zitat von sx2008:

You should allow the service to interact with your desktop.
Starting with Vista services by default are not allowed to interact with the desktop or any window on the desktop.

Thank you sx2008 , is there any Fixes or suggestions to this please ?

[Zacherl]

Interactive services are not longer allowed. If you only want to inject your dll, you should loop through all processes and use WriteProcessMemory() and CreateRemoteThread() to call LoadLibrary() in the remote context.

As an alternative way, you could use the AppInit_DLLs registry value.

[randy_dom]

thank you Zacherl , The problem is that i'm using PIP commutation between the service and another App, so the App will ask the service to HOOK/UNHOOK (a) target Process(s).

So please is there any fix to this or even another alternative .

thank you

[Assarbad]

Zitat von randy_dom:

thank you Zacherl , The problem is that i'm using PIP commutation between the service and another App, so the App will ask the service to HOOK/UNHOOK (a) target Process(s).

So please is there any fix to this or even another alternative .

Zacherl already gave you the only method that would work with active session 0 separation. Otherwise you'd always need some agent running in the same session (strictly speaking on the desktop) inside which the process to be hooked resides.