Location:
Search - PRMonit
Search list
Description: 这是一个非常好的内核级HOOK API的例子，想看看效果里面的bin文件夹可以有编译好的程序，其中内核监视没有实现，进程和注册表监视已经完成。这个代码绝对可以成功编译，因为hookzwcreateprocess里的代码是驱动设备程序的，所以编译环境的设置比较复杂，所以在这个压缩包里也包含了一个小教程，教你去搭建vc 6.0中开发驱动设备程序的环境，并且带了个样本。声明：这个程序运行XP下，在2000下会造成蓝屏-This is a very good kernel-level HOOK API examples, I would like to look at the effects inside the bin folder can be compiled procedures, which did not materialize to monitor the kernel, processes and registry monitoring has been completed. This code is absolutely able to successfully compile, because the code is hookzwcreateprocess in process-driven equipment, so the compiler set up the environment more complex, so in this compression bag also contains a small tutorial to teach you to build in vc 6.0 device driver development program environment, and带了个samples. Statement: This program runs under XP, in 2000 will cause a blue screen
Platform: |
Size: 81920 |
Author: zhenbiao |
Hits: