If you wanna fucking a specified BHO node, hook *!EnumConnectionPointSinks or other COM virtual functions may be worked,here has an ancient picture ...
求助!按照楼上方法,hook了ole32的CoCreateInstance函数,在自己的MyCoCreateInstance中也能够拦截到该BHO的clsid,我是直接对clsid置零操作,然后调用原来的CoCreateInstance,结果IE还是加载起来了该BHO,i'm very doubt ,please who can tell me why??