PsSetLoadImageNotifyRoutine

[James Gohl]

HELP! Could anyone please help me, I am trying to us the PsSetLoadImageNotifyRoutine process structure routine in Visual Basic 6 and I would like to be able to intercept process images and stop them from opening. Does anyone have a clue how to do this? and is it possible in Visual Basic? :confused:

[Dave Kreskowiak]

I seriously doubt anyone has used that in VB6, or any VB for that matter. Why would you want to stop executable code from loading? You do realize that when your callback is called, the image is already loaded but has not started execution yet. You can't use the callback to stop an image from being loaded or executed. It's just used to notify your code that an executable image was loaded and is about to start. What, exactly, are you looking at stopping? RageInTheMachine9532 "...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome

[James Gohl]

Is there any way to intercept an image and be able to stop it. I am writing a security application and I am using the registry to stop applications running. By adding a gate in the HKCR\exefile\shell\run\command key I have successfully been able to block applications but the main problem is when an application is not loaded using the ShellExecute API i.e. it is loaded using the Shell("") command in VB instead. Do you have any ideas? Or are you going to tell me it can't be done based from your own knowledge? TTFN! :D