rootkit 大家都知道吧，这个资料是最新的，想研究rootkit 技术的看看吧，我敢说这是最新的...

Visual Basic 全局钩子 SetWindowsHookEx()-SetWindowsHookEx()

兄弟变速器核心代码 兄弟变速器核心代码兄弟变速器核心代码 -Core code transmission brothers brothers brothers transmission transmission core of the core code code

第一：乐感天赋。就是能识别并欣赏什么是佳作的能力。 实例：一千多年前一个叫伯牙的人在山中弹琴，心中想着表现高山，一个叫钟子期的打柴人听到后就说:"巍巍乎若太山"；伯牙想着表现流水，钟子期马上领悟说"汤汤乎若流水"。后来钟子期故去，就再也没人听得出伯牙弹琴表现的是什么了。 分析：音乐，不是谁都能听懂的，每个佳作所表现的内涵只有少数人能瞬间理解而已，这些人就是天才。经过十个小时的练习，我终于能理解命运交响曲了，但是，这只是看过答案后对-first : natural sense of fun. It can identify and appreciate what an exceptional ability. Example : more than 1,000 years ago, a man named Ya is playing the piano in the mountains, alpine confidence in performance, the one called Zhongziji heard after firewood said : "The Towering between if too Mountain"; Ya is playing mind performance wasted Zhongziji immediately understood that "if the water Tang Tang Hu." Later Zhongziji departed, I never heard people out Ya is playing the piano performance of what it is. Analysis : music, who can not understand, each masterful performance by the connotation of only a few people can understand it moment, these people is genius. After 10 hours of practice, I finally understand the fate of the symphony, but that only

Hook导入表和导出表，导入表的HOOK只能对已加载的模块有效，要想使在HOOK后新加载的模块也有效就必须HOOK导出表-Hook import table and export table, import table HOOK only load modules that have been effective, in order to make the HOOK module is loaded after the new effective it must also export the table HOOK

Regmon著名的注册表监视软件，此为4.11版源码，是学习API钩子的很好材料-Regmon registry monitor the well-known software, version 4.11 This is the source code, API hooks are a good study material

Hook CreateFileA ，Ring3下的inline Hook-Hook CreateFileA, Ring3 under inline Hook

用钩子实现记录用户键盘、鼠标操作并重现。-hook used to achieve record keystrokes, mouse and regain the operation.

目录操作，浏览和更改-directory operations, and changes in View

键盘钩子，处女作，适合初学者-keyboard hook, maiden, for beginners

奇迹MG管理工具-Miracle MG management tools