CreateRemoteThread() Dumping

Hey Guys!

I have a injector, It injects a DLL into a said process using the CreateRemoteThread() method, I was wondering if I could somehow dump the dll being injected?

I have set a breakpoint on the function address but can't seem to dump the DLL.

Any help would be appreciated.

Cheers, Dylanger

Attach a debugger like OllyDBG and use the OllyDump plugin. Also try Task Explorer from the Explorer Suite, it can dump modules/DLLs too.

/msg deleted
answered