Location:
Search - Hide process
Search list
Description: hide processes, elevate process privileges, fake out the Windows Event Viewer so that forensics is impossible, and even hide device drivers (NEW!) All this without any hooking.
Platform: |
Size: 143130 |
Author: ketty |
Hits:
Description: Rootkit，用来隐藏进程， 是从系统底层彻底隐藏哦（用process32frist等看不到）。
原本出自www.rootkit.com 我把他修改抽象出了一个hideme函数。 只要在程序中调用就可以了。 另外需要一个sys的支持，我放进来了。 但可能会被某些杀毒软件以为是病毒哦！-Rootkit, to hide the process from the system is completely hidden Oh bottom (using other process32frist see). Originally from www.rootkit.com I put him to revise the abstract hideme out of a function. As long as the procedure call on it. Also needs a sys support, I put up. It might be thought that some antivirus software is a virus!
Platform: |
Size: 6901 |
Author: 胡俊杰 |
Hits:
Description: 这是一个工具栏控件。你所做的就是在应用程序中创建按钮，用户可以用拖放方式制定工具栏，可以切换小按钮或大按钮，显示或隐藏标题-This is a toolbar controls. What you have done is in the application process to create buttons, users can drag and drop enacted toolbar, a small button switch or button to show or hide title
Platform: |
Size: 162433 |
Author: 王小刚 |
Hits:
Description: WindowsXP下隐藏自己的进程，使用非常方便，只需要在本进程内调用此函数！千万不要用来写“流氓软件”！-WindowsXP hide under the process is extremely easy to use, only in this process calling this function! Do not write to "rogue software."
Platform: |
Size: 2764 |
Author: 邓庭 |
Hits:
Description: This is an example how one could hide a process on Windows based
operation systems from task viewers like ProcDump (G-RoM, Lorian
& Stone) or ProcessExplorer (SysInternals).
It could e.g. be used as some kind of dump protection.
The way to get this done is very different on NT and 9x machines.
-This is an example how one could hide a Proce ss based on Windows operation systems from task viewers like ProcDump (G-RoM Lorian
Platform: |
Size: 38797 |
Author: gogo |
Hits:
Description: 随着NDK 1.0的成功，我决定扩展它的功能。NDK可以说是一个网络程序设计的开发包。它由一系列的类组成实现client/server结构。NDK隐藏了所有复杂的关于网络连接、数据的发送与接收等功能。你只需要使用三个类就可以了:CNDKServer, CNDKClient和CNDKMessage。只要重载几个方法，你就可以设计除功能强大的client/server程序。NDK是基于MFC的CSocket类，因此你可以为你的局域网或Internet设计程序-With the success, I decided to expand its functions. NDK can be said to be a network programming development package. It consists of a series of compositions to achieve client / server structure. NDK hide all the complexity of network connectivity, data transmission and reception capabilities. You only need to use it on three categories : CNDKServer, CNDKClient and CNDKMessage. As long as the heavy number of ways you can design in addition to the powerful client / server process. NDK is based on the MFC CSocket category, so you can get for your LAN or Internet design program
Platform: |
Size: 236496 |
Author: 王杰 |
Hits:
Description: 这是使用 Win32 API 编写的一个功能强大的程序。可谓无所不能。
1、编辑和修改任何活动程序的窗口、菜单、工具栏以及其它控制（各种按钮、编辑框、组合框等）。
2、对于某个运行中程序的窗口/控制，你可以：
——将它们Enable/Disable，Show/Hide，销毁（带自定义返回）；
——修改它们的图标、口令字符、字体、背景色、位置、大小和标题；
3、编辑某个窗口的菜单、工具栏（enable/disable，销毁，获取和设置其ID等）；
4、显示出所有运行的进程、线程、模块（dlls）和窗口清单，并可以kill进程。
5、用模块察看器可以加载和卸载库（dlls），可以注册和注销ocx/dll文件。
6、类似WM_COMMAND的消息可以被发送到某个窗口。
7、任何窗口都可以被拷贝成一幅位图图像（Bitmap），并将图像发到剪贴板。
8、Disable任务管理器（Task Manager）。
9、察看被各个窗口打开的所有文件。从而监视系统中文件的活动。
-This is the use of Win32 API prepared a powerful process. Is omnipotent. One, editing and revising procedures for any activity window, menu, toolbar, and other control (various buttons, edit box, frame composition etc.). 2 for a certain operation procedures window / control, you can : -- they Enable / Disable, Show / Hide destruction (with the custom to return); -- Amend their icon, password characters, fonts, background color, location, size and title ; 3, editing a window menu, toolbar (enable / disable, destroy, access and set up their ID, etc.); 4, showing all running processes, threads, modules (dlls) and the list window and can kill the process. 5, the modules can be inspected for loading and unloading libraries (dlls), it randomly registration and cancellation / dll file. 6, similar
Platform: |
Size: 190934 |
Author: 郑波 |
Hits:
Description: Many users have got used that Windows NT Task Manager shows all processes, and many consider that i s impossible to hide a process from Task Manager. Actually, process hiding is incredibly simple. There are lots of methods available for such a purpose and there are source codes available. It still amazes me that there are only a few trojans using these methods. Literally only 1 trojan from a 1000 is hidden. I think that trojan authors are lazy, since it requires extra work to hide the process and it is always easier to use ready-made sources and copy-paste them. Therefore we should expect hidden trojan processes in a near future.-Many users have got used that Windows NT Tas k Manager shows all processes, and many consider that i s impossible to hide a process from Task Manager. Actually, hiding process is incredibly simple. There are lots of methods available for such a purpose and there are source codes available. It still amaz es me that there are only a few trojans using thes e methods. Literally only a variant is from a 1000 hidden. I think that disables authors are lazy, since it requires extra work to hide the process and it is always easier to use ready-made source s and copy-paste them. Therefore we should Expe ct hidden variant processes in a near future.
Platform: |
Size: 15915 |
Author: inwing |
Hits:
Description: 进程隐藏，通过寄存于别的线程达到隐藏自己的目的-hidden process, Hosted by other threads to hide their purpose
Platform: |
Size: 34783 |
Author: wbb |
Hits:
Description: 在2000和xp下，隐藏进程，VC6.0测试通过
在需要隐藏进程的时候#incoude\"HideProcess.h\",调用HideProcess()即可。-in 2000 and xp, hidden process, VC6.0 tested in the process need to hide when # incoude "HideProcess.h" Call HideProcess () can be.
Platform: |
Size: 3250 |
Author: 力 |
Hits:
Description: 驱动类 另一种方法 隐藏进程 注意5个驱动编译需要的makefile 和 source 需要写-another way to hide the process of compiling five drivers need makefile and sour ce need to write
Platform: |
Size: 1589 |
Author: ll |
Hits:
Description: 远程反弹木马软件 主要功能：１、远程文件访问。包括文件上传、下载、文件。（夹）更名、文件删除、文件运行、文件查找、远程创建文件夹、远程清空文件夹等。 ２、远程关机、启动、注销、修改组织名、用户名。 ３、远程键盘记录、鼠标控制、锁定键盘鼠标、模拟特别键功能。 ４、远程注册表模拟器、快速注册表修改。 ５、远程消息发送、远程进程控制。 ６、远程查看剪贴板、当前活动窗体名、隐藏桌面图标、隐藏任务栏、隐藏开始按钮等。 ７、远程系统命令、远程ＤＯＳ命令。 ８、远程屏幕抓图（可保存为图片）。 ９、服务端自定义配置。可自行定义ＩＰ地址、连接端口、连接密码。 您可以根据自己的需要对该程序进行任意改 ＊ 注意：严禁用本软件进行非法使用，否则后果自行负责，作者概不对使用此软件造成的一切后果负责！！！ -Remote rebound Trojan software major functions : 1, remote file access. Including file upload and download documents. (SCH) renamed, deleted files, documents operation, document search, remote folder creation, distance to empty the folder, and so on. 2, remote shutdown, the launch, cancellation, change organizations, user name. 3, remote keyboard records, mouse control, lock keyboard and mouse to simulate the special function keys. 4, remote registry simulator, rapid changes registry. 5, remote messaging, remote process control. 6, remote View clipboard, current activities Form, and hide desktop icons, hide task bar, Start button, and other hidden. 7, remote system commands, remote DOS command. 8, remote screen From Wikipedia (saved as pictures). 9, since the definition of the server confi
Platform: |
Size: 606331 |
Author: 林封 |
Hits:
Description: 不错的后门代码，用了一些驱动技术来隐藏进程，隐藏注册表，希望对大家有所帮助-good backdoor code, used some technology-driven process to conceal, hide the registry, and I hope to help everyone
Platform: |
Size: 132085 |
Author: 李大叶 |
Hits:
Description: 虽然我不知道icesword是什么样列举服务的，但估计最终也是通过历遍SCM内部的ServiceRecordList来检测。
为什么呢？看下面。
用附件中的InjectDLL.exe把hideservice.dll注入到Services.exe进程后就会把Alerter服务隐藏掉。用icesword也检测不出Alerter服务了。
代码原理很简单，就是在Services.exe进程找到ServiceRecordList表,将需要隐藏的服务从链表上断开。
既然icesword也检测不出了，那就说明icesword最终也是通过历遍SCM内部的ServiceRecordList来检测-Although I do not know what kind icesword enumerated services, it is estimated that by the end times calendar SCM internal ServiceRecordList to detect. Why? See below. The annex InjectDLL.exe put hideservice.dll injected into Ser vices.exe process after Alerter service will be hidden swap. Detection also used icesword not Alerter service. Code principle is very simple. Services.exe is in the process of finding ServiceRecordList table Hide will need the services disconnected from the chain on. Since icesword also can not be detected. it shows icesword calendar through the end times within the SCM ServiceRecordL ist to detect
Platform: |
Size: 19964 |
Author: 79282853 |
Hits:
Description: 文件程序驱动 可以用来隐藏文件系统的有关细节-paper-driven process can be used to hide the file system on the details
Platform: |
Size: 569085 |
Author: 梁公子 |
Hits:
Description: 例子代码:如何修改MFC AppWizard向导生成的框架程序的外观和大小，修改图标、光标、背景的三种方法,增加和删除工具栏按钮，如何给应用程序增加工具栏，如何显示和隐藏工具栏。定制状态栏，在状态栏中添加时钟显示，CTime类及其用法。在状态栏中添加进度条,如何为应用程序添加启动画面 比较基础,给学习VC的朋友.-code examples : MFC AppWizard how to amend the framework Generation Wizard process and the appearance of size, change icon, cursor, background of the three methods, to increase and delete the toolbar button, how to increase application toolbars, how to display and hide the toolbar. Custom status bar, the status bar add clock, CTime category and usage. Add the state of progress of the column, how to add application startup screen basis for comparison, to study VC friends.
Platform: |
Size: 52944 |
Author: 王理 |
Hits:
Description: 进程隐藏.\"Phide\" (process hide) is the engine for the low level process
manipulating on kernel level, designed to be used by a userland
process.
Platform: |
Size: 32025 |
Author: shark03 |
Hits:
Description: Http Server 1.1 By Cooldiyer 一个简单的个人web服务器。适合于所有win32平台，能自动在进程表中隐藏。 可实现的功能是: 1.可自定义网页根目录。 2.主页默认为index.htm。 3.可自定义端口。 4.可自定义服务端每次发送数据包的大小。 5.为稳定期间，本服务器使用多线程的方法，可满足不同场合的使用。 6.运行时可以隐藏窗口。 用法:http rootdir port byte [-hide] 参数说明: rootdir -> 网页的根目录 port -> 服务器的端口 byte -> 服务器每次发送数据包的大小(字节)，建议设定为1024字节 -hide -> 程序隐藏窗口运行 例子1: http c:\\wwwroot\\ 80 1024 http服务器的网页的根目录为c:\\wwwroot\\, 端口为80, 传送数据包的大小为1024字节。 例子2: http c:\\wwwroot\\ 80 1024 -hide http服务器的网页的根目录为c:\\wwwroot\\, 端口为80, 传送数据包的大小为2048字节,隐藏运行。 注意: 1.由于本程序隐藏窗口,所以请小心使用，谢谢下载。-By Cooldiyer a simple personal web server. Suitable for all win32 platform, the process can be automatically hidden table. The function can be realized are : 1. The website can be obtained from the definition of the root directory. 2. Home default index.htm. 3. Self-defined ports. 4. Services available from the definition of each side to send the size of the packets. 5. For the stability period, the use of multi-threaded server approach to meet the use of different occasions. 6. Running window can be hidden. Usage : http rootdir port byte [-hide] parameters : rootdir - gt; Web root directory port-gt; The server port byte-gt; Each server to send data packets the size (in bytes), proposes to set a 1024 byte-hide-gt ; windows operating procedures hidden an example : http c : \\ wwwroot \\ 80 10
Platform: |
Size: 29636 |
Author: 逐云客 |
Hits:
Description: hde process whith langage vb 6.0
Platform: |
Size: 54272 |
Author: bilelmatrix |
Hits:
Description: 持WIN7 . WIN8 WIN10 全系统
1.关闭所有杀毒软件，包括防火墙（辅助报毒，自身没有任何病毒）
2.登录辅助，
3.登录隐藏进程，找到辅助名字，右键（隐藏进程+保护进程，隐藏文件+保护文件）四项
4.找到隐藏进程名字，右键（隐藏进程+保护进程，隐藏文件+保护文件）四项
5.隐藏好后，登录游戏
6.进入出生岛后，点击启动功能。
7.最重要的（关闭辅助时。需要先把进程四项取消了，在关闭辅助）
不要强制关闭，否则电脑下次打不开，需要重启即可(Holding WIN7. WIN8 WIN10 system
1. close all anti-virus software, including firewall (auxiliary poison, no virus).
2. login assistance.
3. Log in to hide the process, find the auxiliary name, right-click (hide the process + protect the process, hide the file + protect the file) four items
4. Find hidden process name, right-click (hide process + protect process, hide file + protect file) four items
5. hide it and log on.
6. after entering the birth Island, click start function.
7. most important (closing auxiliary). We need to cancel the four process first, while closing the helper.
Do not force to close, otherwise the computer will not open next time, you need to restart it.)
Platform: |
Size: 16996352 |
Author: 爱爱你 |
Hits:
«
1
2
3
4
5
6
78
9
10
11
12
...
16
»