Reputation: 21
My application is service-based which is installed into Virtual machine(VM) . This service(SYSTEM a/c) creates another process(SYSTEM a/c) which is used to handle mouse operations for multi-monitor support of VM guest.
Installed Kaspersky Anti-virus tool into VM. Kaspersky service(SYSTEM a/c) creates process(to handle UI) with logged-on user and 'Medium' integrity level.
When I do mouse hovers on kaspersky tool, no mouse operation(mouse move, mouse click) works. Initially thought it could be UIPI issue and checked integrity levels of both processes.
Don't understand why SendInput Windows API fails even my application has higher integrity level than Kaspersky tool?
Upvotes: 0
Views: 478
Reputation: 3234
I think this kind of software block this functions from kernel mode, for example hook NtUserSendInput function. But this is only my opinion. :-)
Upvotes: 1