Some Hooks Missed on Windows 7

May 23, 2010 at 11:22 AM

All,

Is anybody aware of anything "special" about hooking the registry on Windows 7?

I have code which hooks

RegQueryValueExW
and works brilliantly on XP/Vista (both 32-bit) and in debug I can see a long list of hooks dumped to the console, but the same code only sees a fraction of the calls to the API function when run on Windows 7 (also 32-bit, although the behaviour is the same on 64-bit).

If I have SysInternal's ProcMon running at the same time I can see ALL the calls. That's what leads me to believe it's a Win7 peculiarity.

Any ideas anybody?