-
the NT environment hidden process, the user is unaware of the conditions, the im...
在NT环境下隐藏进程,也就是说在用户不知情的条件下,执行自己的代码的方法有很多种,比如说使用注 册表插入DLL,使用Windows挂钩等等。其中比较有代表性的是Jeffrey Richer在《Windows核心编程》中 介绍的LoadLibrary方法和罗云彬在《Windows环境下32位汇编语言程序设计》中介绍的方法。两种方法的 共同特点是:都采用远程线程,让自己的代码作为宿主进程的线程在宿主进程的地址空间中执行,从而达 到隐藏的目的。相比较而言,Richer的方法由于可以使用c/c++等高级语言完成,理解和实现都比较容易 ,但他让宿主进程使用LoadLibrary来装入新的DLL,所以难免留下蛛丝马迹,隐藏效果并不十分完美。罗 云彬的方法在隐藏效果上绝对一流,不过,由于他使用的是汇编语言,实现起来比较难(起码我写不了汇 编程序:))。笔者下面介绍的方法可以说是对上述两种方法的综合:采用c/c++编码,实现完全隐藏。并 且,笔者的方法极大的简化了远程线程代码的编写,使其编写难度与普通程序基本一致。-the NT environment hidden process, the user is unaware of the conditions, the implementation of their code There are various ways, for instance, the use of the registry into DLL, etc. linked to the use of Windows. The more representative Jeffrey Richer is the "core Windows programming" introduced by the LoadLibrary method and the Luo Bin, "under Windows 32 assembly language programming" introduced by the method. Two methods are common features are : remote threads are used to keep the code as host process threads in t
- 2022-03-23 05:27:10下载
- 积分:1
-
进程已启动,杀死进程再启动程序
进程已启动,杀死进程再启动程序-process has been initiated, killing process restart procedures
- 2022-11-30 11:50:03下载
- 积分:1
-
Wrote it myself a desktop small ball program, every click of a button, there is...
自己写的一个桌面小球程序,每点击一次按钮,就有一个新的线程被建立,每个线程对应于一个运动的小球-Wrote it myself a desktop small ball program, every click of a button, there is a new thread is created, each thread corresponds to a movement of the small ball
- 2022-03-26 02:03:12下载
- 积分:1
-
获取系统进程的信息的DLL,包括进程列表,进程号,并可对进程进行操作...
获取系统进程的信息的DLL,包括进程列表,进程号,并可对进程进行操作-access to the information system DLL, including the list of process, process, the process can operate
- 2023-08-14 23:55:02下载
- 积分:1
-
一个关于进程管理的viasual C++源代码
一个关于进程管理的viasual C++源代码-On process management viasual C++ Source code
- 2022-06-27 01:55:59下载
- 积分:1
-
NT下未公开的多线程读,单线程写的函数, 了解它对多线程编程会起到非常大的作用....
NT下未公开的多线程读,单线程写的函数, 了解它对多线程编程会起到非常大的作用.-NT under undisclosed multi-thread reading, writing single-threaded function, to understand its multi-threaded programming will play a very large role.
- 2022-08-05 16:21:43下载
- 积分:1
-
MODBUS通信程序.可用于学习施耐得PLC通信、现在国产好多RTU都用MODBUS协议...
MODBUS通信程序.可用于学习施耐得PLC通信、现在国产好多RTU都用MODBUS协议-MODBUS communications procedures. Learning can be used Shi able to endure PLC communications, now many domestic MODBUS RTU using agreement
- 2022-03-17 11:17:56下载
- 积分:1
-
VB6.0编写一个多
一个基于vb6.0编写的多线程程序.以两个图片框背景色的同时改变来演示多线程-vb6.0 prepared for a multi-threaded process. Photo frame with two background color change at the same time to demonstrate the multithread
- 2023-04-11 07:30:03下载
- 积分:1
-
一个多线程串口程序,可以比较串口收到的数据
一个多线程串口程序,可以比较串口收到的数据-a multithreaded serial procedures can compare the data received Serial
- 2022-10-29 10:00:03下载
- 积分:1
-
采用jsp+servlet+Javabean,jsp负责少量的页面处理,以servlet为主
采用jsp+servlet+Javabean,jsp负责少量的页面处理,以servlet为主
-jsp servlet using JavaBeans, jsp responsible for a small number of pages, mainly to servlet
- 2022-02-03 18:00:14下载
- 积分:1