Remote Thread Execution in System Process using NtCreateThreadEx for Vista & Windows7 - www.SecurityXploded.comWindows provides API function called, CreateRemoteThread [Reference 2] which allows any process to execute thread in the context of remote process. This method has been mainly used to inject DLL into remote process, the technique popularly known as 'DLL Injection'. Especially malware programs exploited this mechanism to evade their detection by injecting their DLL into legitimate process's such as
http://www.uninformed.org/?v=2&a=4&t=txt.
{{#tags}}- {{label}}
{{/tags}}