Introduction - If you have any usage issues, please Google them yourself
A Delphi+ DDK example, ZwCreateProcess function of the hook, this is only a Demo, in fact, can continue to expand in accordance with its principle ... not much to say.
Packet : 107215802uctrl.rar filelist
UCtrl\Bin\SinFix.dll
UCtrl\Bin\TSinjoy.sys
UCtrl\Bin\UCtrl.exe
UCtrl\Bin\取消自动运行.bat
UCtrl\Bin\启用U盘.bat
UCtrl\Bin\启用监控.bat
UCtrl\Bin\看我.txt
UCtrl\Bin\禁用U盘.bat
UCtrl\Bin\禁用监控.bat
UCtrl\Bin\系统修复.bat
UCtrl\Bin\设置自动运行.bat
UCtrl\Src\MainFace.dfm
UCtrl\Src\MainFace.pas
UCtrl\Src\SinFix.dpr
UCtrl\Src\SinFix.dproj
UCtrl\Src\UCtrl.dpr
UCtrl\Src\UCtrl.dproj
UCtrl\Src\UCtrl.groupproj
UCtrl\Src\UCtrl.res
UCtrl\SYS\Clear.bat
UCtrl\SYS\SinMin\DataType.h
UCtrl\SYS\SinMin\Inclu.c
UCtrl\SYS\SinMin\Ioctl.h
UCtrl\SYS\SinMin\makefile
UCtrl\SYS\SinMin\obj\_objects.mac
UCtrl\SYS\SinMin\objfre\i386\TSinjoy.sys
UCtrl\SYS\SinMin\process.c
UCtrl\SYS\SinMin\Process.h
UCtrl\SYS\SinMin\sources
UCtrl\SYS\SinMin\TSinjoy.c
UCtrl\SYS\SinMin\TSinjoy.dsp
UCtrl\SYS\SinMin\TSinjoy.dsw
UCtrl\SYS\SinMin\TSinjoy.h
UCtrl\SYS\SinMin\type.h
UCtrl\SYS\看我.txt
UCtrl\UCtrl.groupproj
UCtrl\Unit\AdjustProc.pas
UCtrl\Unit\Device.pas
UCtrl\Unit\DllUnit.pas
UCtrl\Unit\HideProcess.pas
UCtrl\Unit\RegDelKey.pas
UCtrl\Unit\SYSCtrl.pas
UCtrl\Unit\SYServer.pas
UCtrl\SYS\SinMin\objchk\i386
UCtrl\SYS\SinMin\objfre\i386
UCtrl\SYS\SinMin\obj
UCtrl\SYS\SinMin\objchk
UCtrl\SYS\SinMin\objfre
UCtrl\SYS\SinMin
UCtrl\Bin
UCtrl\Dcu
UCtrl\Src
UCtrl\SYS
UCtrl\Unit
UCtrl