他逃离的DLL

在NT环境下隐藏进程，也就是说在用户不知情的条件下，执行自己的代码的方法有很多种，比如说使用注 册表插入DLL，使用Windows挂钩等等。其中比较有代表性的是Jeffrey Richer在《Windows核心编程》中 介绍的LoadLibrary方法和罗云彬在《Windows环境下32位汇编语言程序设计》中介绍的方法。两种方法的 共同特点是：都采用远程线程，让自己的代码作为宿主进程的线程在宿主进程的地址空间中执行，从而达 到隐藏的目的。相比较而言，Richer的方法由于可以使用c/c++等高级语言完成，理解和实现都比较容易 ，但他让宿主进程使用LoadLibrary来装入新的DLL，所以难免留下蛛丝马迹，隐藏效果并不十分完美。罗 云彬的方法在隐藏效果上绝对一流，不过，由于他使用的是汇编语言，实现起来比较难（起码我写不了汇 编程序:)）。笔者下面介绍的方法可以说是对上述两种方法的综合：采用c/c++编码，实现完全隐藏。并 且，笔者的方法极大的简化了远程线程代码的编写，使其编写难度与普通程序基本一致。-the NT environment hidden process, the user is unaware of the conditions, the implementation of their code There are various ways, for instance, the use of the registry into DLL, etc. linked to the use of Windows. The more representative Jeffrey Richer is the "core Windows programming" introduced by the LoadLibrary method and the Luo Bin, "under Windows 32 assembly language programming" introduced by the method. Two methods are common features are : remote threads are used to keep the code as host process threads in t

演示了如何让程序仅仅只能运行一个进程，如果程序已经运行，再点exe就会激活原来已经运行的那个进程。-demonstration of how the procedure can only run one process, if the procedures are already running, then points exe will activate the original operation of that process.

读者和写者,有关操作系统课程设计的 进程和线程,我急需生产者和消费者-readers and writing, the operating system of curriculum design process and thread, I hasten to producers and consumers

一个较为复杂的数据同步程序，涉及到sql和oracal数据库的访问，多线程，MFC网络编程，消息队列等内容-A more complex data synchronization process, and oracal related to sql database access, multi-threaded, MFC network programming, message queues, etc.

通过本例可以实现多线程多任务编程(转载)-passage of the legislation will be multi-threaded multi-task programming (reproduced)

很好的学习进程和线程的好资料，是专业人士的必备资料，也是处学者的好东东，一定会得到你想要的知识-good learning process and the good threads, the information professional"s essential information, as well as a good scholar Department Dongdong, will be the knowledge that you want

关于windows的开发,用于实现时钟开发-windows on the development, the clock used to achieve development

用C#实现的一个进程管理器，能显示出系统中所有进程，及对其进行终止等操作，值得一看。-C# a process manager, will show all system processes, and its termination of operations overseas.

真正是的VB多线程实例，稳定高效-real multitherad example

操作系统的课程报告，关于内存的分区，分配，回收，以及分页置换功能！-The operating system programs report on the memory partition, distribution, recycling, and the replacement paging features!