The MASM Forum Archive 2004 to 2012

General Forums => The Workshop => Topic started by: dacid on August 12, 2008, 08:50:15 PM

Title: Help on SetWindowsHookEx under Windows Vista
Post by: dacid on August 12, 2008, 08:50:15 PM
A few days ago i realized that under Windows Vista my little program that works without problem under Win9x/2000/XP/... fails on this:

invoke SetWindowsHookExA,WH_JOURNALRECORD,ADDR JournalHook,hInst,NULL

eax = 0
GetLastError = 5 (Access Denied)

I run the program with Administrator privileges but fails anyways.

After a little search i found various documents on MSDN about "User Interface Privilege Isolation (UIPI)" & User Account Control (UAC) :


Quote
A lower privilege process cannot:

-Perform a window handle validation of higher process privilege.
-SendMessage or PostMessage to higher privilege application windows. These Application Programming Interfaces (APIs) return success but silently drop the window message.
-Use thread hooks to attach to a higher privilege process.
-Use Journal hooks to monitor a higher privilege process.
-Perform DLL injection to a higher privilege process 

Later i red something about "manifest files", so i tried this program:

http://www.securityxploded.com/vistauacmaker.php

But the same "Access Denied" result...

Any ideas?