(Jan 21, 2015 03:37 PM)Corios Wrote: you can't stop hooking, they could stop injection doing something like destroying loadlibrary but even then you could just reenable it or use other functions.
Anyway, OP, always post code. No idea how you tried to go about this.
'destroy load library'
Yeah go ahead, destroy the function and rehabilitate the user mode experience by throwing exceptions everywhere.
Oh and don't forget to 're-enable' it.
Dumbest fucking idea i've ever heard.