Description: the search process, directories/files, the registry, such as the operating system will eventually call ZwQueryDirectoryFile, ZwQuerySystemInformation, ZwXXXvalueKey functions. To achieve these functions interception hidden purpose, the need to achieve over his first function, and modifying the system to maintain a SYSCALL table to make it at their pre-defined function. SYSCALL table for the user-visible, write DRIVE at RING 0 under any amendment.
- [hiddenprocess.Rar] - in 2000 and xp, hidden process, VC6.0 th
- [WinSpy_src] - Winspy source. Remote replication code t
- [ProducerConsumer] - VC consumers, the producer, the process
- [wdf_filter0] - domestic paper-driven programming eminen
- [DriveRescue] - restoration of the document resides Delp
- [dvKrnlData] - The code for the kernel, I am learning w
- [fixHidden] - repair Windows system does not show that
- [jc] - In 2000 and xp, the hidden process, VC6.
- [CloseSFCScr] - WINDOWS is a closed CloseSFC documents t
- [RegDriver] - Ring0 registry class operation! At drive
File list (Check if you may need any files):
Download