apihanshujiaocheng

Rootkits技术在信息安全领域越来越受到重视，各种Anti-rootkits新技术不断出现。在各种Anti-root- kits工具的围剿下，常规的Rootkits隐藏技术难以遁形。在系统分析和深入研究传统内核级Rootkits隐藏技术的基 础上，提出了一个集驱动模块整体移位、内核线程注入、IRP深度内联Hook 3种技术为一体的Rootkits隐藏技术体 系。(Rootkits technology in the field of information security more and more attention, all kinds of Anti-rootkits new technologies continue to emerge. In a variety of Anti-root-kits Tools of the siege, the conventional Rootkits hide the technology is difficult to hide. In traditional systems analysis and in-depth study of kernel-level Rootkits hiding technique is proposed based on a set of drive module as a whole shift, into the kernel thread, IRP depth inline Hook 3 kinds of technology as one of the Rootkits hide the technical system.)

N种内核注入DLL的思路及实现,很好的参考资料(Kernel inject DLL N kinds of ideas and implementation, good reference)

优化算法中直接搜索法，Hooke-Jeeves算法(Direct search optimization method, Hooke-Jeeves Algorithm)

注册表钩子，可防止非法修改电脑注册表，请站长审核开通帐号．(Hook registry, computer registry to prevent illegal modifications, please head audited accounts opened.)

说明：  使用全局键盘钩子，监听所有键盘消息，内有详细注释(Use global keyboard hook, monitor all keyboard messages, with detailed notes)

钩子程序，非常适合初学者,个人感觉还是相当不错的(so good，you can learn many things form it)

vc 鼠标位置追踪TrailMousePos的程序源码,值得一看！(Mouse location tracking vc TrailMousePos the program source code, worth a visit!)

这个计划听起来一个警报当用户试图移动鼠标。伟大的史努比同事和大鼻子的家庭成员。闹钟可以解除武装,只要按F8键同时转移。(This plan sounds an alert when the user tries to move the mouse. Family members, the great Snoopy colleagues and the big nose. The alarm can be disarmed, press the F8 key at the same time transfer.)

解除鼠标屏蔽的快捷键为:F10，用到了一个鼠标钩子函数MouseHook.cs，勾选窗口的对应复选框，里面有三个选项，屏蔽左键、右键和鼠标滚轮，点击操作栏内的“确定”按钮，功能即可启动，以前发过实现类似功能的C#代码，有兴趣的找一找，比较二者的异同。 ，作者拥有版权，仅供学习与参考。(Remove shortcut key mouse shield: F10, used a mouse hook function MouseHook.cs, the corresponding check check window frame, there are three options, shielding the left key, the right key and the mouse, click the column "set" button, function can be activated, before the hair to achieve a similar function of C# code, are interested in finding the similarities and differences between the two. The author, copyright, learning and reference purposes only.)

ACM，杭电1698，屠夫的钩子，区间求和问题，经典的线段树问题(ACM, Hangzhou Xinhua 1698, butcher' s hook, interval summation problem, the classic problem of segment tree)