一个使用匿名管道实现进程间通讯的程序

用PsSetCreateProcessNotifyRoutine,PsSetCreateThreadNotifyRoutine来进行进程线程监控我想大家已经都非常熟练了.sinister在一文中已经实现得很好了.前一段时间看到网上有人在研究监视远线程的文章,比较有意思.就写代码玩一玩.这之中就出现了一些问题.比方说直接用sinister的代码的话,是不能动态卸载的,因为他在安装了进线程监视函数后没有进行清除动作,造成在动态卸载时蓝屏,BUGCHECK为0x000000ce,错误码为:DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS.很显然,在驱动退出后,一些进线程操作仍然在访问原来的地址,造成出错.在XP后,微软给出了一个函数PsRemoveCreateThreadNotifyRoutine用来清除线程监视函数(清除进程监视的就是PsSetCreateProcessNotifyRoutine).我一直奇怪ICESWORD在2000中是怎么做到进线程监视的.后来才发现,在运行icesword后释放出一个detport.sys文件,然后一直在系统中存在着没有卸载掉.只是把它隐藏了而已^_^.这不是个好消息,难道我为了测试一个驱动,测试一次就得重启一次吗?呵呵,肯定不是啊,所以想办法搞定它.-with PsSetCreateProcessNotifyRoutine, PsSetCreateThreadNotifyRoutine thread to process control, I think we had a very skilled. Sinister In "" A text has been achieved in very good. Some time ago the Internet was seen in the surveillance study of the threads from article more interesting. Write playing with a code to play. on this issue, there have been some proble

通过消息机制实现Exe程序间的数据交换，实现进程间的通讯的有一个方法！-information through mechanisms Exe procedures between the exchange of information, to achieve inter-process communication in a way!

本例介绍了多线程之间的同步和运行，实现两个小球交替运动-This example describes the synchronization between multiple threads and run to achieve two ball alternating movement

关于进程管理的C++程序 实现描述进程管理的各种功能-With regard to process management in C++ program to achieve the various functions described in process management

vc多线程编程简单介绍，有个实例介绍的录像。-vc a brief multi-threaded programming, a video examples.

一个workhorsing线程的C++类封装，可以作为中间件方便地创建、启动、暂停、同步、释放一个线程。只需要在这个类上派生新的类，重载虚函数run()，这个函数包含需要被执行的代码-A workhorsing thread C++ Type of package can be used as middleware to easily create, start, pause, synchronized release of a thread. Only in this category on a new type of derivative, overloaded virtual function run (), this function contains the code needs to be implemented

一个保护多线程应用中共享资源的例子。作者： Xiangyang Liu -protect a multi-threaded application resource-sharing example. Author : Liu Xiangyang

查看当前正在运行的进程的相关信息，包括倒入的dll信息，加载地址等。-View is currently running processes related information, including information poured into the dll, loading address.

银行家算法 进程控制中用到的算吧 检测是是否死锁-bankers process control algorithms used in the counting detection is whether it Deadlock

该程序的作用是通过未公开函数在RING3下获得指定线程的入口地址，根据此地址可知道这个线程是由哪个模块创建的。-The role of the program is not open function in RING3 thread under the entrance of the designated address, in accordance with this address may be aware of this thread which module created.