There is an interesting thread in microsoft.public.win32.programmer.kernel

2006-02-17: After some update in this thread, the signing part seems to be wrong…

The question was: “Why is AppInit_DLLs not supported in Vista?”
And the answer is: “It is supported, but your DLL need to be signed!”
This leads me to my other post about required driver signing in Vista x64
But it seems that the signing for AppInit_DLLs are also for x86. Also injecting a DLL via this key after the process has started is not possible anymore.

The second point is: Global hooks will only work within a compatible desktop integrity level. I need to find out what this is…

This information is preliminary and based on the beta version of vista…

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！