Description: 利用消息钩子在系统进程插入线程的改进版本-use of information systems in the process of improving the threaded insert version Platform: |
Size: 23649 |
Author:刘麻子 |
Hits:
Description: 利用消息钩子在系统进程插入线程的改进版本-use of information systems in the process of improving the threaded insert version Platform: |
Size: 23552 |
Author:刘麻子 |
Hits:
Description: Start.exe 安装 Insert.dll 中的 WH_GETMESSAGE 钩子. 当任何一个进程从
消息队列取消息时, Insert.dll 都将被装入其空间. Insert.dll在入口代码
中判断当前进入的进程模块名, 如果是 Explorer则建立一个线程, 并发消息
通知 Start.exe退出. 这个时候建立的新线程, 当然是属于Explorer进程的,
这就是关键之所在了. 另外, 该线程还建立了一个窗体, 可以设定IE首页. :~)-Start.exe installation of Insert.dll hook WH_GETMESSAGE. When any one process from the message queue check news, Insert.dll will be put into its space. Insert.dll at the entry code to enter the process to determine the current module name, if is the Explorer is the creation of a thread, and发消息Start.exe quit notice. this time the new thread, of course, is the Explorer process, and this is the key to a. In addition, the thread has also set up a form, can set the IE homepage.: ~) Platform: |
Size: 29696 |
Author:hss |
Hits:
Search - HookInsert