H
H
Hint2013-03-28 19:09:23
Programming
Hint, 2013-03-28 19:09:23

Does LoadLibrary support alternative ntfs file streams?

Is it possible to load a DLL from an alternate thread?
LoadLibrary('test.dll:hidden')

Answer the question

In order to leave comments, you need to log in

3 answer(s)
A
alexf2000, 2013-03-28
@Hint

Seems Yes. I created a text file xx.xx, then type nul > xx.xx:hidden, type shell32.dll > xx.xx:hidden, RunDll32.exe xx.xx:hidden,Options_RunDLL 1 - everything works. :)

R
rPman, 2013-03-28
@rPman

In winXP, I calmly launched the application, saving its exe in the attributes to a text file, it runs even from batch bat files.
a.txt:b.exe
ps Now I checked it in win7x64, I couldn't read any stream at all (although the data is being written and various utilities show its presence).

A
alexf2000, 2013-03-28
@alexf2000

Checked win7x64, writes and reads normally.
echo "this is test">xx.xx:hidden
more < xx.xx:hidden

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question