Answer the question
In order to leave comments, you need to log in
Does LoadLibrary support alternative ntfs file streams?
Is it possible to load a DLL from an alternate thread?
LoadLibrary('test.dll:hidden')
Answer the question
In order to leave comments, you need to log in
Seems Yes. I created a text file xx.xx, then type nul > xx.xx:hidden, type shell32.dll > xx.xx:hidden, RunDll32.exe xx.xx:hidden,Options_RunDLL 1 - everything works. :)
In winXP, I calmly launched the application, saving its exe in the attributes to a text file, it runs even from batch bat files.
a.txt:b.exe
ps Now I checked it in win7x64, I couldn't read any stream at all (although the data is being written and various utilities show its presence).
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question