How do you properly unload a DLL from all processes when the system-wide hook that loaded them gets unloaded?
From MSDN:
You can release a gl
In general you should use global windows hooking if FreeLibrary
is not a required be called. If you do want to do this you can use DLL injection (see for example http://www.codeproject.com/KB/threads/winspy.aspx and http://www.codeproject.com/KB/system/hooksys.aspx) with respect of CreateRemoteThread
and LoadLibrary
technique. In the case you can do what you want in the remote process. You can combine both techniques.
If you want call FreeLibrary
only to do an update of the DLL you can do this in another way. Every DLL which is loaded could be renamed (in cmd.exe for example) to a temporary name and you can call MoveFileEx
with MOVEFILE_DELAY_UNTIL_REBOOT
flag. Then you can already copy and use new version of the DLL. The old one DLL will be deleted at the next reboot of computer.