注入DLL时启动时Explorer.exe死锁

Question

I use the registry "run" key to automatically execute my program each time a user logs on to Windows (using HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run registry path).
My application starts by injecting a DLL into explorer.exe process, using Command Line DLL-Injector .

The effect should be: Each time after user logs in (after restarting Windows) - My application is executed, and my DLL is injected to explorer.exe

In some cases it works, but in few cases (a matter of timing, rarely reproduces), both the injector and the explorer.exe processes are deadlocked and aren't responding.
I'm not sure, but I believe it happens because the injector is trying to inject a DLL to the process (and suspend it while doing so), while the process is already loading a different DLL (so it's locked). That way both of the processes are locked ==> deadlock.

I know that the deadlock is achieved before the DLL was actually injected to the process.

Does anyone have any idea how to avoid it? Maybe querying the state of explorer.exe before injecting into it? Maybe wait for the explorer to be stabilized? If so - how can I do that?

Thanks

Answer 1

您总是可以通过重新注入可执行文件的.reloc节来避免使用DLL并避免挂起目标进程。