STATUS_PROCEDURE_NOT_FOUND IN x64 vista sp1??????

NTDEV
1

if (KeGetCurrentIrql() == PASSIVE_LEVEL)
{
ntStatus = PsSetCreateProcessNotifyRoutineEx(MyCallback, TRUE);
if (ntStatus == STATUS_SUCCESS)
{
Dbgprint(“success”);
} else {
Dbgprint(“failed with 0x%08x”, ntStatus);
}
}

code runs on 64bits-vista sp1, got 0xc000007a (STATUS_PROCEDURE_NOT_FOUND)

2

This system may be exceeded maximum number of allowed CreateProcess callbacks that is 64.

3

no, it means that CreateProcess callback was already removed

-pk

wrote in message news:xxxxx@ntdev…
> This system may be exceeded maximum number of allowed CreateProcess
> callbacks that is 64.
>