搜索资源列表
NT下进程隐藏
- 在NT环境下隐藏进程，也就是说在用户不知情的条件下，执行自己的代码的方法有很多种，比如说使用注 册表插入DLL，使用Windows挂钩等等。其中比较有代表性的是Jeffrey Richer在《Windows核心编程》中 介绍的LoadLibrary方法和罗云彬在《Windows环境下32位汇编语言程序设计》中介绍的方法。两种方法的 共同特点是：都采用远程线程，让自己的代码作为宿主进程的线程在宿主进程的地址空间中执行，从而达 到隐藏的目的。相比较而言，Richer的方法由于可以使用c/c++等高级
NT环境下进程隐藏的实现
- NT环境下进程隐藏的实现 补充：把ThreadMain的代码给丢了，在这补上： DWORD ThreadMain(HINSTANCE hInst) { TCHAR szModule[256], szText[512], szFormat[256] LoadString(hInst, IDS_FORMAT, szFormat, sizeof(szFormat) / sizeof(TCHAR)) GetModuleFileName(NULL, szModule, 256) _stprintf(szT
HideFunc
- 直接调用该头文件中的 YHideProcess()就可以实现该进程在系统中的隐藏！而且此方法不是通过传统的线程注射方法，而是更改系统内存，经过在２K XP下的调试：）-called directly to the head of the paper YHideProcess () can be achieved in the process of hidden system! But this method is not through the traditional method of inj
hProcess
- 一个进程隐藏的例子-an example of the hidden proce
HideProc
- 在2000/xp中隐藏进程，采用挂接内核技术，可以躲过多种进程察看工具。-2000/XP hidden in the process, articulated core technology, can see the process survived multiple tools.
Drv_HideFile
- 在驱动层实现对文件的隐藏 开发环境:VC+WIN2000+DDK-achieve the driver layer of documents hidden development environment : VC WIN2000 DDK
FindHideTsk
- 通过对系统内核调度线程链表的查询 找出隐藏进程-through activation of the system kernel threads Chain inquiries identify hidden process
vbhideprocess
- 在VB中实现隐藏进程，XP+Visual Basic 6环境下测试通过。-in VB achieve hidden process, XP Visual Basic 6 environment test.
HideProcessFORXP2000
- 在2000和xp下，隐藏进程，VC6.0测试通过 在需要隐藏进程的时候#incoude\"HideProcess.h\",调用HideProcess()即可。-in 2000 and xp, hidden process, VC6.0 tested in the process need to hide when # incoude "HideProcess.h" Call HideProcess () can be.
hp
- Private Declare Function HideCurrentProcess Lib \"hideproc.dll\" () As Long 真正隐藏进程-Private Declare Function HideCurrentPro cess Lib "hideproc.dll" () As Long truly hidden process
Processless
- 通过这个程序隐藏进程 这样可以在用户状态下完成隐藏工作-through this process so the process can be hidden in a state of complete user hidden work
FindWnd
- 找线程句柄程序，运行程序后，自动枚举系统进程，通过右击，弹出菜单，可隐藏或显示或退出进程。-find a thread handle procedures, operating procedures, the system automatically enumeration process, right-click, pop-up menu, can be hidden or revealed or withdraw from the process.
xxysbyapplexx
- VC++6.0编写的Windows消息演示系统的源代码。 功能： 获取窗口handle 获取edit内容 隐藏窗口 可供学习的地方： 窗口前置 窗口置top capture window flat picture button 常用的message-VC 6.0 of the Windows news demo system's source code. Function : access window handle access
KProcCheck
- 查看Windows下所有进程，即使这个进程被隐藏-View Windows all process, even if the process was hidden! !
hidevc
- 通过远程线程注入的方法实现的隐藏进程，简单易懂，注释详细-Remote thread into the hidden process
HideDriver_source
- 隐藏进程驱动实现示例，在VC2003下实现，可供大家在功能和驱动上进行参考-Hidden process-driven implementation example, the VC2003 achieve, for all the functional and driver on the reference
hides
- Although I do not know what kind icesword enumerated services, it is estimated that by the end times calendar SCM internal ServiceRecordList to detect. Why? See below. The annex InjectDLL.exe put hideservice.dll injected into Ser vices.exe process af
hidden
- hides the process in task manager
Sh4DoVV-Find-Hidden-Process
- Finding Hidden Process In Simple Way
Windows-7-64-bit-process-hidden
- hidecon, utility rootkit for x64 requires patchguard disabled, if not disabled... use patch which you may find on my web site. usage: hidecon -l (display process list) hidecon -le display hidden processes (dbgprint) hidecon -ld