文件列表:

dllhookapi\dllhookapi.cpp (688, 2006-05-29)
dllhookapi\dllhookapi.def (32, 2006-05-29)
dllhookapi\dllhookapi.sln (909, 2006-05-29)
dllhookapi\dllhookapi.vcproj (3952, 2006-05-29)
dllhookapi\Release\tunew20.dll (65536, 2006-05-29)
dllhookapi\stdafx.cpp (297, 2006-05-29)
dllhookapi\stdafx.h (378, 2006-05-29)
HookDemo\HookDemo.cpp (1702, 2006-05-29)
HookDemo\HookDemo.sln (905, 2006-05-29)
HookDemo\HookDemo.vcproj (3976, 2006-05-29)
HookDemo\Monitoring.cpp (3140, 2006-05-29)
HookDemo\Monitoring.h (882, 2006-05-29)
HookDemo\Release\HookDemo.exe (45056, 2006-05-31)
HookDemo\stdafx.cpp (295, 2006-05-29)
HookDemo\stdafx.h (293, 2006-05-29)
NTProcDrv\DrvUtils.c (3644, 2006-05-29)
NTProcDrv\DrvUtils.h (841, 2006-05-29)
NTProcDrv\NTProcDrv.c (16618, 2006-05-29)
NTProcDrv\NTProcDrv.dsp (5028, 2006-05-29)
NTProcDrv\NTProcDrv.dsw (541, 2006-05-29)
NTProcDrv\NTProcDrv.h (4053, 2006-05-29)
NTProcDrv\NTProcDrv.vcproj (4663, 2006-05-29)
NTProcDrv\Release\NTProcDrv.sys (7168, 2006-05-31)
NTProcDrv\Undocumented.h (1286, 2006-05-29)
dllhookapi\Release (0, 2006-05-29)
HookDemo\Release (0, 2006-05-31)
NTProcDrv\Release (0, 2006-05-31)
dllhookapi (0, 2006-05-29)
HookDemo (0, 2006-05-29)
NTProcDrv (0, 2006-05-29)

Here you can find source codes. Note: to compile NtProcDrv you need NTDDK to be installed on your computer. To run compiled sample, place tunew20.dll in any folder that is specified in PATH variable (windows/system32 for example). Then run HookDemo.exe. After it is has been started all process creation routines will be intercepted. Press "Enter" key and hook will be uninstalled. Note: you should have an administrator rights for properly running application. To verify if it works fine try to start any application after HookDemo has been run. You should see message box "Before starting process." on process startup and "Before ending." right before process will be ended. Andriy Oriekhov www.toleron.com

近期下载者：

相关文件：

评论：[我要评论] [举报此文件]

收藏者：