rk_files.h

来自「能够在windows 2000以上操作系统下隐藏特定的进程」· C头文件 代码 · 共 15 行

#ifndef __FILESH__
#define __FILESH__

/* HOOK STUPH for Drives */
typedef struct {
   PDEVICE_OBJECT   FileSystem;
   unsigned         LogicalDrive;
} HOOK_EXTENSION, *PHOOK_EXTENSION;  

void cmdHookAllDrives();
BOOLEAN cmdHookDrive( IN char Drive, IN PDRIVER_OBJECT DriverObject );

#endif