文件名称:隐藏
介绍说明--下载内容来自于网络,使用问题请自行百度
查找进程,目录/文件,注册表等操作系统将最终调用
ZwQueryDirectoryFile,ZwQuerySystemInformation,ZwXXXvalueKey
等函数。要想拦截这些函数达到隐藏目的,需先自己实现以上函数,
并修改系统维护的一个 SYSCALL 表使之指向自己预先定义的函数。
因 SYSCALL 表在用户层不可见,所以要写 DRIVE 在 RING 0 下 才
可修改。-the search process, directories / files, the registry, such as the operating system will eventually call ZwQueryDirectoryFile, ZwQuerySystemInformation, ZwXXXvalueKey functions. To achieve these functions interception hidden purpose, the need to achieve over his first function, and modifying the system to maintain a SYSCALL table to make it at their pre-defined function. SYSCALL table for the user-visible, write DRIVE at RING 0 under any amendment.
ZwQueryDirectoryFile,ZwQuerySystemInformation,ZwXXXvalueKey
等函数。要想拦截这些函数达到隐藏目的,需先自己实现以上函数,
并修改系统维护的一个 SYSCALL 表使之指向自己预先定义的函数。
因 SYSCALL 表在用户层不可见,所以要写 DRIVE 在 RING 0 下 才
可修改。-the search process, directories / files, the registry, such as the operating system will eventually call ZwQueryDirectoryFile, ZwQuerySystemInformation, ZwXXXvalueKey functions. To achieve these functions interception hidden purpose, the need to achieve over his first function, and modifying the system to maintain a SYSCALL table to make it at their pre-defined function. SYSCALL table for the user-visible, write DRIVE at RING 0 under any amendment.
(系统自动生成,下载前可以参看下载内容)
下载文件列表
隐藏.c
www.dssz.com.txt
www.dssz.com.txt
1999-2046 搜珍网 All Rights Reserved.
本站作为网络服务提供者,仅为网络服务对象提供信息存储空间,仅对用户上载内容的表现方式做保护处理,对上载内容本身不做任何修改或编辑。
