try entering acovado.com once there you'll find various information on the subject !!!!!!!!! (:

thank you for your quick answer -- however .... The string "setwindowshook"/"setwindowshookex" isn't nessecarely in the dll !! the function might have been called from an exe file (for a global hook!) and the only function in the dll is the callback function !! But thank you nevertheless .. I'll try thinking of a function which has to be in the dll ... (b.t.w. the callback function name is up to the programmer - therefor it's of no help!)

I've written a program that detects the presence of a keylogger on a process ... If I detect one - I wish to scan the process and find the location of the dll who's being using as a logger .. Michael Noam

I've written a program that detects the presence of a keylogger on a process ... If I detect one - I wish to scan the process and find the location of the dll who's being using as a logger .. Michael Noam

I've written a program that detects the presence of a keylogger on a process ... If I detect one - I wish to scan the process and find the location of the dll who's being using as a logger .. So far I've detected a logger - and have the list of dll's which are loaded in the process memory .. but how can I know which one is the hook dll ?? I haven't got a clue so far and whereever I look I find myself emtyhanded - can any1 please help me ?? michaelnoam@hotmail.com Michael Noam