Disabling Memshell hooking for specific applications

2 users found this article helpful

To make a published application ignore any Memshell hooking, one should follow the steps below:

  1. Open registry editor on the  RDS host from which the application in question is published.

  2. Navigate to the following location:

    For 64-bit applications: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Parallels\
    For 32-bit applications: HKEY_LOCAL_MACHINE\SOFTWARE\Parallels\

  3. Create a new key called Memshell

  4. Within a created Memshell key create a String named IgnoreHookApplications

  5. IgnoreHookApplications value should match the exact name of executable file of application in question (*.exe file). Please refer to screenshot below:

    Ignorehookapplications

    To disable Memshell hook for several applications specify all executables separated by a semicolon:

    Ignorehookapplications_several

 

Note: Applications listed in this string will completely ignore any other hooking settings, thus please use it on a staging environment first to ensure it is not affecting critical functionality.

 

Was this article helpful?

Tell us how we can improve it.