thanks. We already saw it but it was necessary to verify if it isn’t caused by interaction with WinDbg and desktop switch. Now we can be sure. I’ll try to prepare a DLL which’d report more info and we should see if problem is caused by MEW or an external condition.
I slightly examined how hooks work and I’m affaid they’re a bit fragile and can be broken by other app.
BTW, do you have installed anything unusual on your system? Some kind of system monitor, development tools, antivirus or anything from Symantec?