搜索资源列表
gouzi
- 对进程的保护,用vc编写的,不错的,别错过呀-process right to the protection, use vc prepared, yes, ah ascending
APIHOOK
- API HOOK实现进程保护 钩住进程API函数.在IS下可以结束进程!
HookAPI
- HookAPIProcessGuard是一个使用API函数实现进程保护的简单例子,我们Hook了OpenProcess函数,就能够实现保护了!
HookSSDT.rar
- HOOK NtOpenProcess 保护指定进程,HOOK NtOpenProcess the protection of designated process
hook-process
- hook openprocess免杀 保护进程-hook openprocess
Hook_ZwDuplicateObject_Protect
- Hook_ZwDuplicateObject_Protect 钩子技术用于进程保护-Hook_ZwDuplicateObject_Protect hook technology for process protection
ProcessProtecter
- VC编程实现API拦截保护目标进程不被杀死,可以用作软件安全模块-VC programming API to intercept the process of being killed by conservation objectives, can be used as software security modules, etc.
HookProtect
- 360都无法结束其保护的进程,运用到底层函数的HOOK-360 can not be the end of the process of their protection, apply to the underlying function HOOK
inlineKiInsertQueueApc
- 内核hook KiInsertQueueApc apc级保护进程-Kernel-level hook KiInsertQueueApc apc protection process
HookAPI
- 进程保护,hookAPI钩子函数的不足点评。-APIHOOK
arktool
- 1、息钩子监视:列举系统上的消息钩子。 2、块加载监视:列举系统上加载的所有内核模块 3、SSDT监视:通过得到原始的SSDT地址来得到被恶意程序HOOK的API以及恢复SSDT 4、注册表保护:对一些重要的注册表项进行保护,防止恶意程序对其进行修改。 5、隐藏进程检测:检测出系统中隐藏的进程。 6、隐藏端口检测:检测出系统中隐藏的端口。 7、进程强杀:能够杀死系统中的对自身保护的恶意进程。-1, the interest rate hook monitor
HOOK-class
- HOOK技术的Ring0级进程保护组件设计与实现-HOOK-class process technology Ring0 component design and implementation of protection
HookOdROBH
- Hook内核API-ObReferenceObjectByHandle,实现进程保护,防止被保护的进程被kill掉(360杀不掉它)。-Hook the kernel API-ObReferenceObjectByHandle, in order to protect process so that the protected process can not be killed by others.
Source-protection-process
- 无驱动 无hook 纯API编写的保护自身进程源码 防止自身进程,防止被恶意关闭,此源码进程保护强度一般、-No drive no hook pure API code written to protect its own process to prevent its own process, to prevent malicious closed, the source protection process, general strength,
Ring0levelprocessprotection
- HOOK技术的Ring0级进程保护组件设计与实现-HOOK technology Ring0 protection component level design and implementation process
HookOpenProc
- 进程保护, 通过Hook系统的OpenProc, 达到保护进程的方法-Process protection, through Hook system OpenProc, to protect the process approach
e
- 易语言驱动全通信源码,驱动级进程隐藏、进程保护! -Easy language to drive the whole communication
HookDemo-hidden-process
- Hook 隐藏进程,保护进程,强力保护进程被关闭,C++源码-Hook the process to hide, protect the process, strong protection of the process is closed, C++ source
HookProtectProcessLib
- 防止进程被结束 任务管理器的“结束任务”实际上就是强制终止进程,它所使用的是一个叫做TerminateProcess()的Win32 API函数以下是此函数的定义(Prevent the process from being terminated The task manager's end task is actually a forced termination of the process. It uses a Win32 API function called Terminate
进程注册表保护
- 使用mhook库设置函数钩子,支持x86 x64系统,远程注入dl方式实现任务管理器进程防杀,注册表防修改。