![]() This callback routine checks a filename of a loaded image. When IMF's driver IMFDownProtect.sys is loaded, it registers a load-image callback routine via PsSetLoadImageNotifyRoutine. IObit Malware Fighter (= IMF) 5 is installed.Finally I found out a real scenario how the failure of GetIATThunksForModule("ntdll.dll"), one of the top launcher failures, happens.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |