thanks for your help
I'v installed a global hook in a DLL(SetWindowsHookEx(WH_CBT, CBTProc,
g_hInstDLL, 0)),this is the callback function:
LRESULT CALLBACK CBTProc(int nCode, WPARAM wParam, LPARAM lParam)
m_handle=OpenProcess(PROCESS_ALL_ACCESS, TRUE, m_PID);
pos = strcmp( &sFilename[n_count-12], "AcroRd32.exe" );
stream = fopen( "c:\\sys_fopen.txt", "at" );
fclose( stream );
I ran "AcroRd32.exe" ,then I opened "c:\\sys_fopen.txt", I found the code
above has run 44 times!
I can't understand this,and would you help me to write this code? thanks
You should be able to catch the creation of splash window as well if
you install a process wide hook and handle WH_CBT. Did you try that? I
am assuming you are doing this outside the app (separate process) which
necessitates a system wide hook.