info.txt

来自「Cracker终结者——提供最优秀的软件保护技术」· 文本 代码 · 共 9 行

ProcLog
-------
logs process creation in Win9x. 1 hard-9xglobal hook of two
possible ones is used.
This hook intercepts any call to any Win32 function that can spawn
process (CreateProcessA, WinExec, LoadModule and all wrappers
like ShellExecute). ProcLog is very similar to ASM\CapCon example.
Creation of console procesess (like START.exe) from COMMAND.com IS logged!
The only event that is not logged is creating DOS process from DOS process.