How to close EasyHook32Svc.exe after FileMon.exe closed?

Jun 25, 2012 at 9:44 AM

I run the FileMon.exe in the binaries directory.

After FileMon.exe closed, I find that there is a process named EasyHook32Svc.exe in the process list and CPU is almost 100%.

I wonder how to close EasyHook32Svc.exe after FileMon.exe closed.


Jun 27, 2012 at 11:37 AM

Could you let me know which version are you running?

Jun 28, 2012 at 2:50 AM

Version 2.7

Jun 28, 2012 at 10:48 AM

I've tried to reproduce but could not. Everything was working fine for me.

I've tried netfx3.5/4-release x86 and x64 both hooking a 32-bit process.

Is there any more information you can provide about the application you are hooking with filemon or the OS you are running?

Jun 28, 2012 at 2:15 PM

I'm hooking war-ftpd.exe(a free software). It is running as a service.

I'm using windows xp sp3.