Description: A hidden windows-driven development process and procedures, including procedures for the analysis of sys_build is compiled with the DDK BUILD environment sys_VC6.0 is compiled with VC++6.0
To Search:
- [SSDTHIDE] - Drive hidden processes, hidden to protec
- [HidProcess] - Can automatically hide the process in Ta
- [SYS] - dfasdfasdf
File list (Check if you may need any files):
一份进程隐藏驱动源码分析报告\用户程序\ReadMe.txt
............................\........\StdAfx.cpp
............................\........\StdAfx.h
............................\........\test5.dsp
............................\........\test5.dsw
............................\........\test5.ncb
............................\........\test5.plg
............................\........\test5.cpp
............................\........\test5.opt
............................\........\Debug\test5.exe
............................\........\.....\test5.ilk
............................\........\.....\test5.pdb
............................\........\.....\vc60.idb
............................\........\.....\vc60.pdb
............................\........\.....\test5.pch
............................\........\.....\StdAfx.obj
............................\........\.....\test5.obj
............................\一份进程隐藏驱动源码分析报告.doc
............................\请先读我.txt
............................\sys_VC6.0\Driver.cpp
............................\.........\Driver.h
............................\.........\DriverDev.dsp
............................\.........\DriverDev.dsw
............................\.........\DriverDev.ncb
............................\.........\DriverDev.opt
............................\.........\DriverDev.plg
............................\.........\说明.txt
............................\.........\MyDriver_Check\Driver.obj
............................\.........\..............\msdirectx.map
............................\.........\..............\msdirectx.pdb
............................\.........\..............\msdirectx.sys
............................\.........\..............\vc90.idb
............................\test5.exe
............................\msdirectx.sys
............................\sys_build\buildchk.log
............................\.........\MAKEFILE
............................\.........\Rootkit.c
............................\.........\SOURCES
............................\.........\objchk\i386\processname.obj
............................\.........\......\....\rootkit.obj
............................\.........\...\_objects.mac
............................\.........\Rootkit.c.bak
............................\分析报告_by刘林.doc
............................\sys_build\objchk\i386
............................\用户程序\Debug
............................\sys_VC6.0\MyDriver_Check
............................\....build\objchk
............................\.........\obj
............................\用户程序
............................\sys_VC6.0
............................\sys_build
一份进程隐藏驱动源码分析报告
Download