一个很好的反rootkit例子，终止其运用或替换 重要system dlls.

这是我在学习vc中图像的时候 编写的一个小程序 用来图片的百叶窗的效果-This is my vc in learning when the image in the preparation of a small program used to picture the effect of the blinds

ALLOC_PRAGMA #ifdef#pragma alloc_text （INIT，驱动入口）#pragma alloc_text SpyFilterUnload 页面）#pragma alloc_text SpyQueryTeardown 页面）#pragma alloc_text SpyConnect 页面）#pragma alloc_text SpyDisconnect 页面）#pragma alloc_text SpyMessage 页面）#endif#define SetFlagInterlocked(_ptrFlags,_flagToSet)（（作废） InterlockedOr （（（挥发性长 *)(_ptrFlags)),_flagToSet))//---------------------------------------------------------------------------例程//---------------------------------------------------------------------------NTSTATUS驱动入口 (俺们 PDRIVER_OBJECT DriverObject俺们 PUNICODE_STRING RegistryPath)/*++常规的描述：驱动程序首次加载时，将调用这个例程。其目的是初始化全局状态，然后注册 FltMgr 开始过滤。参数:DriverObject-指向驱动程序由系统创建的对象的指针代表此驱动程序。RegistryPath-标识在何处的 Unicode 字符串为此参数驱动程序位于在注册表中。返回值：

屏蔽windows的ctrl，shift，del键。-Shielding windows of the ctrl, shift, del key.

毫秒计时程序-millisecond time procedure

进程同步与互斥 该代码非常完善的展现的经典进程同步与互斥问题――生产者和消费者问题的同步与互斥过程！-Process synchronization and mutual exclusion of the code is very well exhibited the classic process of synchronization and mutual exclusion problem- the problem of producers and consumers the process of synchronization and mutual exclusion!

pbtowordandexcel目录：在PowerBuilder 9.0中通过OLE技术实现与WORD和Excel通信的例子；-pbtowordandexcel directory : PowerBuilder 9.0 in through OLE technology with Word and Excel Communications examples;

This device is an extension cable between USB device and host (computer) with embedded into connector “intelligent” integrated circuits on both sides of the-This device is an extension cable between USB device and host (computer) with embedded into connector " intelligent" integrated circuits on both sides of the

用vc编的查看内存使用情况的程序源码-Vc made with the view memory usage procedures source

由于程序的需要,我需要做一个使程序自动更新的小程序,找了找网上,介绍的都不够详细,这里我给出一个完整的自动更新的程序! 此程序为外部升级程序(需要主程序的调用),具体代码这里就不罗列了,还是自己看源代码吧.此程序主要的思路是通过读取服务器文件获得升级版本及升级地址,有新版本则下载 如果想做成内部升级程序(在主程序内部自动检测及自动升级),只需要在主程序启动时相关的代码即可,大家不仿试试,主要的思路与这个是差不多的,不同之处是怎么处理主程序的自动关闭与启动问题. -procedures needed, I need to do a procedure to enable automatic updating of small procedures, finding the Internet to find, introduced the detailed enough, and here I give a complete automatic update procedures! This procedure for external promotion procedures (need to call the main program), the specific code is not listed here , or your own source code to see it. The procedure is thinking through the server the document is read updates and upgrades address, the new version will have to download if they wish to create internal promotion procedures (in the main program of internal automatic detection and automatic updates), the main program needs only activated when the code can be we try not imitation, the main idea with this is similar to the dif

两个未公开函数的使用的例子-two undisclosed function of the use of the example