汇编写的驱动和界面程序 作用是读取系统hook chain 并显示出来-compilation write drive and interface procedures role of the reader system hook chain and displayed

检测进程的代码,可以查出当前Rootkit进程。推荐!(使用挂钩线程调度链表) -detection process code, we find the current Rootkit process. Recommended! (Using thread scheduling chain link)