Prevent DLL injection

[Igor Vartanov]

Ok what I mean was the application execution pointer is corrupt when this third party dll screws up. So the problem is the 3rd party dll is crashing and since it is sitting in our address space our application also crashes. Try a simple DLL inject program that hogs memory.

Normally you cannot prevent the dll injection, since it's done by regular OS mechanisms. The only way is to make the enemy unable to load itself.

• Intercept CreateProcess (installing KMD) and make it crash for enemy load attempts.
• Kill it on your app start along with all its files.

An alternative may be to refuse to run in system where it's present.
I belive, if your app is more valuable for customer, the latter will take care about cleaning the system up himself.