Process Hacker Forums

Hi, dmex. Today you removed dll injection feature from PH. I think it was a very useful feature, and I used it a lot. So what's the matter? Is it a permanent deletion or you just want to move this code to some extra plugin?

So it's under the plausible pretext "And what if the evil Russian hackers break our toy?" VAC requires to remove absolutely everything from PH that makes them overheat thinking, because to prohibit daylight is easier than in the dark to look for a candle.

How about installable as a downloadable plugin?

For me this idea doesn't look like a full solution: I've already copied all deleted code into an extra plugin but it doesn't involve KProcessHacker. So it makes the feature much less powerful.

diversenok wrote: ↑12 Jan 2018 09:46

For me this idea doesn't look like a full solution: I've already copied all deleted code into an extra plugin but it doesn't involve KProcessHacker. So it makes the feature much less powerful.

Thanks! Hey, at least its possible still. I've written code to perform DLL injection, but its nice having the option to do so within a process manager like PH. I think PHv1 has it too; albeit dmex stated there is a CLR bug causing it to not run on win10 that he has a ticket with MS opened for.
I mainly have only used it when developing and testing dlls in other processes that do some actions like API hooking, but its been a while since working on the project. Useful to have around, so thanks for your work diversenok.

Wonder if dmex could implement driver support for such a plugin like that, that way its not in PH, but PH supports it (assuming that is ok for the reason it was removed... I assume DRM-ed games blocking runs when they have detected PH has once been loaded into memory, like the do for systinternals Procmon?)

Just putting a cool article here for fun due to related nature. I’m sure most of us know about these but I like the overview
https://www.endgame.com/blog/technical- ... ng-process

you need the dll on the path of your executable. Just place them where your exe is located.

Hi J-Fobos and welcome to the forums. You cannot do this currently. Maybe you could add this feature in your own custom version?

The topic was wrong