Win32 Kernel Rootkits modify the behaviour of the system by Kernel Native API hooking. This technique is typically implemented by modifying the ServiceTable entries in the Service Descr iptor Table (SDT). 有关钩子-Win32 Kern

SSDT 恢复代码 SSDT 恢复代码-SSDT code to restore to restore SSDT code