文件名称:HookDll
- 所属分类：
- 钩子与API截获
- 资源属性：
- [Windows] [Visual C] [源码]
- 上传时间：
- 2012-11-26
- 文件大小：
- 63kb
- 下载次数：
- 0次
- 提 供 者：
- su***
- 相关连接：
- 无
- 下载说明：
- 别用迅雷下载，失败请重下，重下不扣分！
介绍说明－－下载内容均来自于网络，请自行研究使用
PE文件是windows(95/98/NT)目前采用的可执行文件格式。流行的CIH病毒就是通过改变PE文件的内容，并且保持文件大小不变，从而实现自己的功能。本程序通过分析PE文件格式，将可执行文件的文件定位表重新定位，指向用户编写的DLL，然后指令指针返回正常调用位置。在DLL中通过系统挂钩，实现了后台各种级别密码的截获功能。 -PE file is windows (95/98/NT) is currently used in the executable file format. CIH virus is prevalent PE by changing the contents of the file, and keep the file size unchanged, and thus realize their functions. This procedure by analyzing the PE file format, the executable file to re-positioning table positioning, pointing users to the preparation of the DLL, and then return to normal call instruction pointer location. Adopted in the DLL system linking all levels realize the background of the intercepted password function.
(系统自动生成,下载前可以参看下载内容)
下载文件列表
HookDll
.......\decode
.......\......\decode.001
.......\......\decode.clw
.......\......\decode.cpp
.......\......\decode.dsp
.......\......\decode.dsw
.......\......\decode.h
.......\......\decode.rc
.......\......\decodeDlg.cpp
.......\......\decodeDlg.h
.......\......\Loadlib.cpp
.......\......\loadlib.h
.......\......\res
.......\......\...\decode.rc2
.......\......\resource.h
.......\......\StdAfx.cpp
.......\......\StdAfx.h
.......\fordebug
.......\........\fordebug.001
.......\........\fordebug.clw
.......\........\fordebug.cpp
.......\........\fordebug.dsp
.......\........\fordebug.h
.......\........\fordebug.rc
.......\........\fordebugDlg.cpp
.......\........\fordebugDlg.h
.......\........\HookDll.dll
.......\........\res
.......\........\...\fordebug.rc2
.......\........\resource.h
.......\........\StdAfx.cpp
.......\........\StdAfx.h
.......\HLP
.......\...\CRACKUP.RTF
.......\HookDll.001
.......\HookDll.clw
.......\HookDll.cpp
.......\HookDll.def
.......\HookDll.dll
.......\HookDll.dsp
.......\HookDll.dsw
.......\HookDll.h
.......\HookDll.ncb
.......\HookDll.opt
.......\HookDll.plg
.......\HookDll.rc
.......\Release
.......\res
.......\...\HookDll.rc2
.......\Resource.h
.......\StdAfx.cpp
.......\StdAfx.h
.......\decode
.......\......\decode.001
.......\......\decode.clw
.......\......\decode.cpp
.......\......\decode.dsp
.......\......\decode.dsw
.......\......\decode.h
.......\......\decode.rc
.......\......\decodeDlg.cpp
.......\......\decodeDlg.h
.......\......\Loadlib.cpp
.......\......\loadlib.h
.......\......\res
.......\......\...\decode.rc2
.......\......\resource.h
.......\......\StdAfx.cpp
.......\......\StdAfx.h
.......\fordebug
.......\........\fordebug.001
.......\........\fordebug.clw
.......\........\fordebug.cpp
.......\........\fordebug.dsp
.......\........\fordebug.h
.......\........\fordebug.rc
.......\........\fordebugDlg.cpp
.......\........\fordebugDlg.h
.......\........\HookDll.dll
.......\........\res
.......\........\...\fordebug.rc2
.......\........\resource.h
.......\........\StdAfx.cpp
.......\........\StdAfx.h
.......\HLP
.......\...\CRACKUP.RTF
.......\HookDll.001
.......\HookDll.clw
.......\HookDll.cpp
.......\HookDll.def
.......\HookDll.dll
.......\HookDll.dsp
.......\HookDll.dsw
.......\HookDll.h
.......\HookDll.ncb
.......\HookDll.opt
.......\HookDll.plg
.......\HookDll.rc
.......\Release
.......\res
.......\...\HookDll.rc2
.......\Resource.h
.......\StdAfx.cpp
.......\StdAfx.h