Introduction - If you have any usage issues, please Google them yourself
NT environment to achieve the hidden process added : ThreadMain put in the code to be thrown in this supplement : DWORD ThreadMain (HINSTANCE hInst) (TCHAR szModule [256], szText [512], [256] szFormat LoadString (hInst, IDS_FORMAT, szFormat, sizeof (szFormat)/sizeof (TCHAR)) GetModuleFileName (NULL, szModule, 256) _stprintf (szText, szFormat, szModule) MessageBox (NULL, szText, found ( "Remote threads"), MB_OK MB_ICONINFORMATION) return 0 )
Packet : 176986nt环境下进程隐藏的实现.rar filelist
hidesrc
hidesrc\Dll
hidesrc\Dll\Dll.cpp
hidesrc\Dll\Dll.def
hidesrc\Dll\Dll.rc
hidesrc\Dll\Dll.vcproj
hidesrc\Dll\Main.cpp
hidesrc\Dll\resource.h
hidesrc\Dll\stdafx.cpp
hidesrc\Dll\stdafx.h
hidesrc\Inject.sln
hidesrc\Loader
hidesrc\Loader\Dll.dll
hidesrc\Loader\ll.cpp
hidesrc\Loader\Loader.cpp
hidesrc\Loader\Loader.rc
hidesrc\Loader\Loader.vcproj
hidesrc\Loader\stdafx.cpp
hidesrc\Loader\stdafx.h
hidesrc\ThreadParam.h
hidesrc\补充.txt