文件名称:CSharpexe-lpk
- 所属分类：
- C#编程
- 资源属性：
- [Windows] [Visual.Net] [源码]
- 上传时间：
- 2012-11-26
- 文件大小：
- 643kb
- 下载次数：
- 0次
- 提 供 者：
- 猪*
- 相关连接：
- 无
- 下载说明：
- 别用迅雷下载，失败请重下，重下不扣分！
介绍说明－－下载内容均来自于网络，请自行研究使用
总体下来，能查杀exe文件夹病毒文件，但无法清除它在c:\F10S 目录下的 ctfmon.exe 与 svchost.exe 和它生成的启动组的快捷方式。
由于条件的限制，我也乏天回术。它将自己的句柄写入到 系统关键的进程 winlogon 中。
源码中有个UnLocker的类、本来想清掉它的句柄删除文件，但是发生个很无奈的 0xC0000005(STATUS_ACCESS_VIOLATION)错误。最后我很无耻的放弃了。
另外 附加 LPK查杀。基本上它创建的服务，打开的进程，注入的线程，文件都能查杀。
源码中有个SysService类。用来枚举系统服务的、测试过程中发生个未知的错误。
无奈之下也无耻的放弃了。最后使用了CMD的SC命令来卸载服务。-Overall down, killing exe folder virus file, but you can not clear it in the c: \ F10S directory, the ctfmon.exe and the svchost.exe and it generates the Startup group shortcut. Due to constraints, I also spent days back surgery. It write your own handle to the key process winlogon. A UnLocker class in the source code, originally wanted cleared its handle to delete files, but are helpless of 0xC0000005 (STATUS_ACCESS_VIOLATION) of errors occurred. Finally, I am shameless abandon. Addition additional LPK killing. Basically it created the service, open process, injected threads, files can be killing. Source in SysService class. Services used to enumerate the system, unknown error occurred during the test. In desperation shameless abandon. Finally, use the CMD SC command to uninstall the service.
由于条件的限制，我也乏天回术。它将自己的句柄写入到 系统关键的进程 winlogon 中。
源码中有个UnLocker的类、本来想清掉它的句柄删除文件，但是发生个很无奈的 0xC0000005(STATUS_ACCESS_VIOLATION)错误。最后我很无耻的放弃了。
另外 附加 LPK查杀。基本上它创建的服务，打开的进程，注入的线程，文件都能查杀。
源码中有个SysService类。用来枚举系统服务的、测试过程中发生个未知的错误。
无奈之下也无耻的放弃了。最后使用了CMD的SC命令来卸载服务。-Overall down, killing exe folder virus file, but you can not clear it in the c: \ F10S directory, the ctfmon.exe and the svchost.exe and it generates the Startup group shortcut. Due to constraints, I also spent days back surgery. It write your own handle to the key process winlogon. A UnLocker class in the source code, originally wanted cleared its handle to delete files, but are helpless of 0xC0000005 (STATUS_ACCESS_VIOLATION) of errors occurred. Finally, I am shameless abandon. Addition additional LPK killing. Basically it created the service, open process, injected threads, files can be killing. Source in SysService class. Services used to enumerate the system, unknown error occurred during the test. In desperation shameless abandon. Finally, use the CMD SC command to uninstall the service.
(系统自动生成,下载前可以参看下载内容)
下载文件列表
AntiRootKit\AntiRootkit\1.ico
...........\...........\1.jpg
...........\...........\11.jpg
...........\...........\AntiRootkit.csproj
...........\...........\bin\Debug\AntiRootkit.exe
...........\...........\...\.....\AntiRootkit.pdb
...........\...........\...\.....\AntiRootkit.vshost.exe
...........\...........\...\.....\AntiRootkit.vshost.exe.manifest
...........\...........\ErrorAddFunc.cs
...........\...........\FrmKillViru.cs
...........\...........\FrmKillViru.designer.cs
...........\...........\FrmKillViru.resx
...........\...........\FrmMain.cs
...........\...........\FrmMain.Designer.cs
...........\...........\FrmMain.resx
...........\...........\FrmModSearch.cs
...........\...........\FrmModSearch.Designer.cs
...........\...........\FrmModSearch.resx
...........\...........\KillVirus\FrmKillViru.cs
...........\...........\.........\FrmKillViru.Designer.cs
...........\...........\.........\FrmKillViru.resx
...........\...........\ModInfo.cs
...........\...........\obj\x86\Debug\AntiRootkit.csproj.FileListAbsolute.txt
...........\...........\...\...\.....\AntiRootkit.exe
...........\...........\...\...\.....\AntiRootkit.FrmKillViru.resources
...........\...........\...\...\.....\AntiRootkit.FrmMain.resources
...........\...........\...\...\.....\AntiRootkit.FrmModSearch.resources
...........\...........\...\...\.....\AntiRootkit.pdb
...........\...........\...\...\.....\AntiRootkit.Properties.Resources.resources
...........\...........\...\...\.....\DesignTimeResolveAssemblyReferencesInput.cache
...........\...........\...\...\.....\GenerateResource.read.1.tlog
...........\...........\...\...\.....\GenerateResource.write.1.tlog
...........\...........\Privilege.cs
...........\...........\ProcFunc.cs
...........\...........\ProcInfo.cs
...........\...........\Program.cs
...........\...........\...perties\AssemblyInfo.cs
...........\...........\..........\Resources.Designer.cs
...........\...........\..........\Resources.resx
...........\...........\..........\Settings.Designer.cs
...........\...........\..........\Settings.settings
...........\...........\SysServices.cs
...........\...........\UnLocker.cs
...........\AntiRootkit.exe
...........\AntiRootkit.sln
...........\AntiRootkit.suo
...........\Data\exe.rar
...........\....\exeData.txt
...........\....\exeReport.htm
...........\....\hrl41.rar
...........\....\InjectTest.dll
...........\....\lpk.rar
...........\....\lpk.txt
...........\....\LpkReport.htm
...........\....\lpksvr.txt
...........\....\rizrio.rar
...........\lpk.dll
...........\usp10.dll
...........\说明.txt
...........\这里的两个LPK.DLL USP10.DLL 是系统文件 防感染的.txt
...........\AntiRootkit\obj\x86\Debug\TempPE
...........\...........\...\...\Debug
...........\...........\bin\Debug
...........\...........\...\Release
...........\...........\obj\x86
...........\...........\bin
...........\...........\KillVirus
...........\...........\obj
...........\...........\Properties
...........\AntiRootkit
...........\Data
AntiRootKit