Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 11-26-2005, 22:11
nulli nulli is offline
VIP
 
Join Date: Nov 2003
Posts: 172
Rept. Given: 41
Rept. Rcvd 22 Times in 12 Posts
Thanks Given: 53
Thanks Rcvd at 73 Times in 53 Posts
nulli Reputation: 22
Post Detection/Signature for Corba/Com/Dcom/Activex Modules

First i would like to thank you for taking the time to reading this message! What i would like to know is if anyone has a detection signature for com/com+/.net com/activex/ole/corba type of modules (dll's)? i guess i could for instance check for the presence of 'DllGetClassObject' export from a ole com module, but would like to know if anyone has any links or experience on this subject they would like to share. The reason for this is that im creating some code that doesnt support tracing into com and alike interfaces.

Thanks in advance...

-nulli-
Reply With Quote
  #2  
Old 11-27-2005, 17:45
just4urim
 
Posts: n/a
Quote:
Originally Posted by nulli
...What i would like to know is if anyone has a detection signature for com/com+/.net com/activex/ole/corba type of modules (dll's)?...-
Hi nulli,

I can't understand what you exactly mean by "Detection Signature" ? did you mean that you want to detect a file as it's a com/com+/.. file ?

Regards,
Just4Urim
Reply With Quote
  #3  
Old 11-27-2005, 18:41
nulli nulli is offline
VIP
 
Join Date: Nov 2003
Posts: 172
Rept. Given: 41
Rept. Rcvd 22 Times in 12 Posts
Thanks Given: 53
Thanks Rcvd at 73 Times in 53 Posts
nulli Reputation: 22
Sorry about that... my english is sometimes a little odd. What i would like to know is howto detect if a file is com/dcom/... file so that i may avoid it when my program is stepping through a programs code.. cause i dont want to support com and alike interfaces (atleast not yet)..

-nulli-

Last edited by nulli; 11-27-2005 at 18:50.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to disable VM detection? te$ter General Discussion 3 05-16-2015 17:06
Working with multiple modules when reversing maktm General Discussion 2 04-19-2015 06:46
Modules loaded by a exe loman General Discussion 15 05-18-2004 22:37


All times are GMT +8. The time now is 11:20.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )