Description: check whether the kernel module dynamically injection procedures. The main idea : PE document is too static and dynamic than the right.
- [lgdonsrc] - The demonstration registers this machin
- [klister-0.4] - read the internal kernel data structures
- [UndocumentedWindows2000Secrets--theChinese] - Undocumented Windows 2000 Secrets and th
- [AFXRootkit2005] - used to develop an open-source code root
- [Nwpro] - a complete network protocols. Needless t
- [Nethief] - Network v6.5 source code is my money. Fi
- [processviewer] - their original process manager. Vc with
- [SSDT] - Linked to SSDT, through the hook-driven
- [1] - vc introduced to obtain the keyboard sta
- [pemaker1] - Inject Your Code to a Portable Executabl
File list (Check if you may need any files):