Dll Injector

The term mostly relates to usage of Microsoft Windows, but can be applied to any operating system supporting shared libraries. The dll injector has shown not to be as effective when a developer has direct access to the program’s source code. This technique is most often used by third-party programmers to manipulate the behavior of an application in a way not intended. The dll injector approach is easily detected by the target program. This is made possible by notifications distributed to every module loaded by the linker when a thread starts. Counting of threads also allows new threads to be detected. This means foreign codes may be injected, altering the technique’s memory so it identifies them as legitimate. Nearly every operating system can make great use of the dll injector technique, though it tends to be much easier on Windows. On a Linux platform, functions can be used to influence a target but cannot create new threads.