Appint_DLL is a REG-SZ value that stores a space delimited list of DLL with fully qualified path. This registry entry is stored under
HKLM\Software\Miscrosoft\Windows NT\CurrentVersion\Windows
This feature is enabled by setting the LoadAppInit_DLLs (REG_DWORD) to 0x00000001.
When user32.dll is loaded by a new process (DLL_PROCESS_ATTACH event), user32.dll will call LoadLibrary() to load all DLL specified in Appinit_DLL user32.dll is included in most applications.
No comments:
Post a Comment