文件名称:Detect_EAT_HOOK
- 所属分类：
- 驱动编程
- 资源属性：
- [Windows] [Visual C] [Basic/ASP] [源码]
- 上传时间：
- 2012-11-26
- 文件大小：
- 103kb
- 下载次数：
- 0次
- 提 供 者：
- 王*
- 相关连接：
- 无
- 下载说明：
- 别用迅雷下载，失败请重下，重下不扣分！
介绍说明－－下载内容均来自于网络，请自行研究使用
检查内核中是否存在EAT挂钩。在应用层通过VB获得内核模块的导出函数名及真实地址，然后与内存地址相比较。若不同，则恢复。-EAT check whether there is linked to the kernel. VB obtained at the application layer through the kernel module exported function names and real addresses, and then compared with the memory address. If different, then restored.
相关搜索： 驱动
(系统自动生成,下载前可以参看下载内容)
下载文件列表
检测内核EAT HOOK\EATCHECK.sys
................\exe\ADE32.bas
................\...\cls_Driver.cls
................\...\EATCHECK.exe
................\...\EATCHECK.vbp
................\...\EATCHECK.vbw
................\...\frm_Main.frm
................\...\GetSystemRoutineAddress.bas
................\...\HdKillMP.RES
................\...\mod_DrvFunc.bas
................\...\mod_PEInfo.bas
................\...\UnsignedOperation.bas
................\...\工程1.vbw
................\sys\buildfre_wxp_x86.log
................\...\LDasm.h
................\...\makefile
................\...\MyDriver.c
................\...\MyDriver.h
................\...\objfre_wxp_x86\i386\EATCHECK.pdb
................\...\..............\....\EATCHECK.sys
................\...\..............\....\mydriver.obj
................\...\..............\....\mydriver.obj.oacr.root.x86fre.pft.xml
................\...\..............\....\vc90.pdb
................\...\..............\....\_objects.mac
................\...\sources
................\...\objfre_wxp_x86\i386
................\...\objfre_wxp_x86
................\exe
................\sys
检测内核EAT HOOK
................\exe\ADE32.bas
................\...\cls_Driver.cls
................\...\EATCHECK.exe
................\...\EATCHECK.vbp
................\...\EATCHECK.vbw
................\...\frm_Main.frm
................\...\GetSystemRoutineAddress.bas
................\...\HdKillMP.RES
................\...\mod_DrvFunc.bas
................\...\mod_PEInfo.bas
................\...\UnsignedOperation.bas
................\...\工程1.vbw
................\sys\buildfre_wxp_x86.log
................\...\LDasm.h
................\...\makefile
................\...\MyDriver.c
................\...\MyDriver.h
................\...\objfre_wxp_x86\i386\EATCHECK.pdb
................\...\..............\....\EATCHECK.sys
................\...\..............\....\mydriver.obj
................\...\..............\....\mydriver.obj.oacr.root.x86fre.pft.xml
................\...\..............\....\vc90.pdb
................\...\..............\....\_objects.mac
................\...\sources
................\...\objfre_wxp_x86\i386
................\...\objfre_wxp_x86
................\exe
................\sys
检测内核EAT HOOK