hook-kernel-tut-5

vc 鼠标位置追踪TrailMousePos的程序源码,值得一看！(Mouse location tracking vc TrailMousePos the program source code, worth a visit!)

获取与设置鼠标双击时间源码，程序调用API函数获取与设置鼠标双击时间。(Get and set the mouse double-click on the time source, the program calls the API function to get and set the mouse double-click the time .)

有一种按键，看起来是一幅完整的图片，当鼠标移到按键区域时，图片的一部分凸现，形成一个按键，当鼠标移走时又恢复原来状态。(There is a button looks like a complete picture when the mouse is moved to the key areas, the picture is part of the highlights, the formation of a button when the mouse is moved Shiyou restore the original state.)

可以实现内核钩子的检测，分为应用层和驱动层，带源码(Can detect the kernel hooks, into the application layer and the driver layer, with source code)

优化算法中直接搜索法，Hooke-Jeeves算法(Direct search optimization method, Hooke-Jeeves Algorithm)

Rootkits技术在信息安全领域越来越受到重视，各种Anti-rootkits新技术不断出现。在各种Anti-root- kits工具的围剿下，常规的Rootkits隐藏技术难以遁形。在系统分析和深入研究传统内核级Rootkits隐藏技术的基 础上，提出了一个集驱动模块整体移位、内核线程注入、IRP深度内联Hook 3种技术为一体的Rootkits隐藏技术体 系。(Rootkits technology in the field of information security more and more attention, all kinds of Anti-rootkits new technologies continue to emerge. In a variety of Anti-root-kits Tools of the siege, the conventional Rootkits hide the technology is difficult to hide. In traditional systems analysis and in-depth study of kernel-level Rootkits hiding technique is proposed based on a set of drive module as a whole shift, into the kernel thread, IRP depth inline Hook 3 kinds of technology as one of the Rootkits hide the technical system.)

钩子的应用程序，读取键盘和鼠标的状态，并且显示出来。(zi dong fan yi bu guan yong )

API教程 帮助文件可查询大部分API函数及其VB声明(API Tutorial help file can be found most of its API and VB statement)

一个简单的 钩子小程序 屏蔽了 鼠标键盘，(A simple hook applet shielding mouse, keyboard,)

基本上常用的API函数，都整合进了DLL中，就类似MFC，想必会VC的就知道了，与大家共享下，为大家提供方便 (Basically, common API functions are integrated into the DLL, on similar MFC, would have been a VC' s will know and share, the convenience for everyone)