进程管理和线程管理 进程管理和线程管理

在NT环境下隐藏进程，也就是说在用户不知情的条件下，执行自己的代码的方法有很多种，比如说使用注 册表插入DLL，使用Windows挂钩等等。其中比较有代表性的是Jeffrey Richer在《Windows核心编程》中 介绍的LoadLibrary方法和罗云彬在《Windows环境下32位汇编语言程序设计》中介绍的方法。两种方法的 共同特点是：都采用远程线程，让自己的代码作为宿主进程的线程在宿主进程的地址空间中执行，从而达 到隐藏的目的。相比较而言，Richer的方法由于可以使用c/c++等高级语言完成，理解和实现都比较容易 ，但他让宿主进程使用LoadLibrary来装入新的DLL，所以难免留下蛛丝马迹，隐藏效果并不十分完美。罗 云彬的方法在隐藏效果上绝对一流，不过，由于他使用的是汇编语言，实现起来比较难（起码我写不了汇 编程序:)）。笔者下面介绍的方法可以说是对上述两种方法的综合：采用c/c++编码，实现完全隐藏。并 且，笔者的方法极大的简化了远程线程代码的编写，使其编写难度与普通程序基本一致。-the NT environment hidden process, the user is unaware of the conditions, the implementation of their code There are various ways, for instance, the use of the registry into DLL, etc. linked to the use of Windows. The more representative Jeffrey Richer is the "core Windows programming" introduced by the LoadLibrary method and the Luo Bin, "under Windows 32 assembly language programming" introduced by the method. Two methods are common features are : remote threads are used to keep the code as host process threads in t

刊登在2005年第2期的代码，代码演示了在Visual C++中利用自定义消息实现线程间通讯。-published in 2005, two of code, code demonstrating the use of Visual C since the definition of news to achieve communication between threads.

Thread program example for beginer

单处理机调度包括时间片轮转法，短作业优先算法，动态优先算法。- The single processor dispatch rotates the law including the time piece, short work first algorithm, dynamic first algorithm.

用visual c++ 6.0开发的一个创建、关闭线程的例子，非常适合初学者学习利用API来创建线程-with visual c 6.0 creation of a closed-thread example, very suitable for beginners learning to use the API to create threads

操作系统的处理机调度算法：提供了FIFS、SFJ、HRN、时间片轮转算法的实现算法-operating system processor scheduling algorithms : a FIFS, SFJ, 010-001, time-rotate algorithm Algorithm

利用命名管道技术，在进程间进行通信的例程。希望和大家交流。-use named pipes, in the process of communication between the routines. And we hope that the exchanges.

本程序实现ProcControl类，提供了enumerate各进程的功能（进程信息包括：进程ID，进程名称，用户名，内存使用情况，CPU情况等） 还提供启动进程，按进程名杀死进程，按进程ID杀死进程的功能。-ProcControl the program category, providing enumerate the functions of the process (process information, including : process ID, process name, user name, memory usage, CPU, etc.), also provided to initiate the process by killing the process from the process, the process by killing the process ID function.

使用CriticalSection(临界区)和Mutex(互斥对象)实现的线程同步类。- Uses line regulation synchronization class which CriticalSection (critical zone) and Mutex (incompatible object) realizes.

Remote Run Library是一个为部分代码提供完整的远程（这里的远程指不同于本进程的其他进程空间）运行环境（包括在代码中使用隐式API调用、字符串常量、全局/静态变量、异常保护）的工具。它允许你在任意进程（只要你有足够的权限）运行一段代码甚至一个exe，从而可以让两个或多个可执行文件在同一个进程空间运行。-Remote Run Library is a part of the code provides a complete remote (remote here refers to the process is different from the other process space) runtime environment (including the use of code implicit API calls, string constants, global/static variables, abnormal protection) tool. It allows you to the arbitrary process (as long as you have sufficient authority) run a piece of code or exe, which allows two or more executable file in the same process space operations.