Protects process from killing.

一个线程程序,通过信号量来同步几个同时运行的线程.- A line regulation procedure, comes the line regulation the proceed signal quantity which synchronized several simultaneously moves

用PsSetCreateProcessNotifyRoutine,PsSetCreateThreadNotifyRoutine来进行进程线程监控我想大家已经都非常熟练了.sinister在一文中已经实现得很好了.前一段时间看到网上有人在研究监视远线程的文章,比较有意思.就写代码玩一玩.这之中就出现了一些问题.比方说直接用sinister的代码的话,是不能动态卸载的,因为他在安装了进线程监视函数后没有进行清除动作,造成在动态卸载时蓝屏,BUGCHECK为0x000000ce,错误码为:DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS.很显然,在驱动退出后,一些进线程操作仍然在访问原来的地址,造成出错.在XP后,微软给出了一个函数PsRemoveCreateThreadNotifyRoutine用来清除线程监视函数(清除进程监视的就是PsSetCreateProcessNotifyRoutine).我一直奇怪ICESWORD在2000中是怎么做到进线程监视的.后来才发现,在运行icesword后释放出一个detport.sys文件,然后一直在系统中存在着没有卸载掉.只是把它隐藏了而已^_^.这不是个好消息,难道我为了测试一个驱动,测试一次就得重启一次吗?呵呵,肯定不是啊,所以想办法搞定它.-with PsSetCreateProcessNotifyRoutine, PsSetCreateThreadNotifyRoutine thread to process control, I think we had a very skilled. Sinister In "" A text has been achieved in very good. Some time ago the Internet was seen in the surveillance study of the threads from article more interesting. Write playing with a code to play. on this issue, there have been some proble

很多人都知道端口到进程映射的一个免费工具FoundStone的Fport，可惜他不提供源码，我试着能从其二进制文件中找出一些信息，大致知道他使用了些未公开函数，诸如： ZwOpenSection，ZwQuerySystemInformation-Many people are aware of the process to port a free map of Fport FoundStone tool, but he does not provide source code, I tried from its binary documents to find some information, he is generally aware of the use of some functions not open to the public, such as : ZwOpenSection, ZwQuerySystemInformation

章提供了访问NT中所有Service的功能，每次列举Services时，函数会返回一个列表-chapter of NT visit all the functions Service, each cited Services, the function will return a list

这是一个用JAVA多线程编写得显示当前系统时间的小窗口程序,包括年,月,日,时,分,秒-This is a multi-threaded with JAVA prepared in the current system revealed a small time window procedures, including the year, month, day and hour, minute and second

vc++环境，mfc实现多线程，适用初学者学习之用-vc environment, mfc multi-threaded, applicable with beginners learning

ctr-del-alt就能看到系统的进程，你是否也想在你的程序中显示出来呢？看完这个代码你在可以轻松在ABOUT中显示出来，不用再显示什么磁盘的容量等信息了，换个花样吧-ctr- del-alt system will be able to see the process, do you also think your procedures are displayed? Reading the code you can relax in ABOUT revealed, no longer shows any disk capacity information, a change in the Mood for it

刊登在2005年第2期的代码，代码演示了在Visual C++中利用自定义消息实现线程间通讯。-published in 2005, two of code, code demonstrating the use of Visual C since the definition of news to achieve communication between threads.

一个在MFC里用多线程播放音乐的示例程序-MFC inside a music player with multi-threaded sample program

常用的线程编程源代码-common thread programming source code