-
与pssetcreateprocessnotifyroutine,pssetcreatethreadnotifyroutine线程问题。
用PsSetCreateProcessNotifyRoutine,PsSetCreateThreadNotifyRoutine来进行进程线程监控我想大家已经都非常熟练了.sinister在一文中已经实现得很好了.前一段时间看到网上有人在研究监视远线程的文章,比较有意思.就写代码玩一玩.这之中就出现了一些问题.比方说直接用sinister的代码的话,是不能动态卸载的,因为他在安装了进线程监视函数后没有进行清除动作,造成在动态卸载时蓝屏,BUGCHECK为0x000000ce,错误码为:DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS.很显然,在驱动退出后,一些进线程操作仍然在访问原来的地址,造成出错.在XP后,微软给出了一个函数PsRemoveCreateThreadNotifyRoutine用来清除线程监视函数(清除进程监视的就是PsSetCreateProcessNotifyRoutine).我一直奇怪ICESWORD在2000中是怎么做到进线程监视的.后来才发现,在运行icesword后释放出一个detport.sys文件,然后一直在系统中存在着没有卸载掉.只是把它隐藏了而已^_^.这不是个好消息,难道我为了测试一个驱动,测试一次就得重启一次吗?呵呵,肯定不是啊,所以想办法搞定它.-with PsSetCreateProcessNotifyRoutine, PsSetCreateThreadNotifyRoutine thread to process control, I think we had a very skilled. Sinister In "" A text has been achieved in very good. Some time ago the Internet was seen in the surveillance study of the threads from article more interesting. Write playing with a code to play. on this issue, there have been some proble
- 2023-06-28 21:35:02下载
- 积分:1
-
进程调度算法
进程调度算法--动态优先权抢占式和时间片轮转算法的调度。-process scheduling algorithm-- Dynamic Preemptive priority and time-scheduling algorithm postings.
- 2022-02-16 09:49:48下载
- 积分:1
-
实现心血管功能无创监测及参数分析,包括了界面、通讯、数据管理、打印等功能!...
实现心血管功能无创监测及参数分析,包括了界面、通讯、数据管理、打印等功能!-To achieve non-invasive monitoring of cardiovascular function and parameter analysis, including the interface, communications, data management, printing and other functions!
- 2022-07-20 08:34:39下载
- 积分:1
-
c语言实现生产者消费者问题
c语言实现生产者消费者问题-producer consumer issues
- 2022-03-20 09:39:04下载
- 积分:1
-
threaded, realize the video capture and encoding process! Blackfin532 platform!
使用多线程,实现视频的捕获和编码过程!Blackfin532平台!
- 2022-08-18 15:23:43下载
- 积分:1
-
multithreading separate document, the document is divided into arbitrary size of...
多线程文件分割,把文件分割成任意大小的可连接大文件-multithreading separate document, the document is divided into arbitrary size of large files can be linked
- 2022-04-07 14:19:11下载
- 积分:1
-
The process of implementation method, this procedure describes how to create a p...
进程的实现方法,此程序介绍如何创建一个进程的方法-The process of implementation method, this procedure describes how to create a process approach
- 2022-04-11 00:12:25下载
- 积分:1
-
在ActiveX控件中如何动态调用DLL函数,有实用价值
在ActiveX控件中如何动态调用DLL函数,有实用价值-in how ActiveX DLL function call dynamic, practical value
- 2022-03-02 08:35:37下载
- 积分:1
-
是一个钩子利用的实例,使用函数
setwindowshookexw
获取全局键盘信息...
是一个钩子利用的实例,使用函数
setwindowshookexw
获取全局键盘信息-Is an example of the use of hook, use the function global keyboard access to information setwindowshookexw
- 2022-11-06 04:00:04下载
- 积分:1
-
将通讯内容发到另外一个程序中从而实现跟踪进程通讯内容的一个程序...
将通讯内容发到另外一个程序中从而实现跟踪进程通讯内容的一个程序- Sends to in other procedure the communication content thus a
realization track advancement communication content procedure
- 2023-07-22 20:35:03下载
- 积分:1