DynamoRIO / DynamoRIO/dynamorio

svchost.exe can not be instrumented

Open
#315 1 comment 0 reactions 0 assignees View on GitHub
Migrated Priority-Medium Status-NeedInfo
Dominant language
C
Stars
3.2k
Forks
629
Avg merge
2d 15h
Merged PRs (30d)
31

Description

_From [shuhui...@gmail.com](https://code.google.com/u/118273431844340137221/) on June 02, 2010 00:48:53_

I want to use dynamorio to monitor the execution of svchost.exe in windows.
By When I register it in Dynamorio and restart the windows,I found that it
seemed the instrument is invalid. I know that the svchost.exe does not
import the user32.dll,by after i use a PE TOOL to add user32.dll import
entry to svchost.exe( remove file protection),the problem still exists.
What is wrong?

_Original issue: http://code.google.com/p/dynamorio/issues/detail?id=315_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.