检查文件是否正在使用（EXE，DLL）的例子

Sometimes, we run into a situation when we badly need to hook some kernel function, but are unable to do it via conventional PE-based hooking. This article explains how kernel functions can be directly hooked. As a sample project, we are going to present a removable USB storage device as a basic disk to the system, so that we can create and manage multiple partitions on it (for this or that reason, Windows does not either allow or recognize multiple partitions on removable storage devices, so we are going to cheat the system). On this particular occasion, we will hook only one function, but the approach described in this article can be extended to handle multiple functions (for example, one of my projects required direct hooking of quite a few functions from the NDIS library). You should clearly realize that this article is about direct hooking and not about dealing with USB storage, so please don t tell me that the sample problem may have been solved differently.

通过读取MSStorageDriver_ATAPISmartData获得硬盘温度和使用时间-MSStorageDriver_ATAPISmartData access to the hard disk by reading the temperature and time

用VC写的监控win9x下文件的读写(251KB)-Written by VC under win9x monitoring the read and write files (251KB)

可以实现自动关机的程序，还送ICON900多个，很不错的。可以-can achieve automatic shutdown procedures, gave ICON900 many very good. Look at

显示器设置-monitor settings

对一帧YUV为4:2:0的图象进行DCT变化和量化以及进行反变换和反量化，并在dos下显示出一个4*4矩阵的变化和量化过程-Of a YUV to 4:2:0 image and quantify changes to DCT, as well as anti-transform and Inverse Quantization, and under dos shows a 4* 4 matrix of the process of change and to quantify

本人在网上搜罗过一些与关机有的代码，发现关机的代码差不多都一样，而对关机前的特效的代码几科没有，只有一个WIN2000的，其方法如：制造一个刷子，用灰色刷屏幕！以下这部分为网上的一个老版本的关机效果代码，不是很好-I look at some on-line and off some code, the code found off almost the same, and right before turning off the effects of several branches no code, only a WIN2000, and its methods as : manufacturing a brush. Brush with gray screen! Following this into an online version of the old code shutdown effect is not good

Com接口示例，Com本质论内涵的源代码，适用于初学者-Com interface Example, Com essence of the connotation of the source code for beginners

一个很好的反rootkit例子，终止其运用或替换 重要system dlls.-A good example of anti-rootkit, to terminate the use or replacement of important system dlls.

在很多实用的程序里都要求用到一些系统的参数，准确了解系统参数，你的程序将会更COOL！-in many practical procedures and have asked to see some system parameters and accurate understanding of the system parameters, your program will be more COOL!