内核钩子检测示例
................\代码说明.txt
................\应用层
................\......\应用层
................\......\......\Release
................\......\......\.......\SafeCheck.exe
................\......\......\SafeCheck
................\......\......\SafeCheck.ncb
................\......\......\SafeCheck.sln
................\......\......\SafeCheck.suo
................\......\......\.........\1.bmp
................\......\......\.........\bitmap2.bmp
................\......\......\.........\Dllhook.cpp
................\......\......\.........\Dllhook.h
................\......\......\.........\DriProOther.sys
................\......\......\.........\Driver.cpp
................\......\......\.........\Driver.h
................\......\......\.........\FilePrase.cpp
................\......\......\.........\FilePrase.h
................\......\......\.........\HookView.cpp
................\......\......\.........\HookView.h
................\......\......\.........\IDTAndKernel.cpp
................\......\......\.........\Ioctls.h
................\......\......\.........\KerHookSSDTIDT.sys
................\......\......\.........\LoadNtDriver.cpp
................\......\......\.........\LoadNtDriver.h
................\......\......\.........\openfile.txt
................\......\......\.........\process.cpp
................\......\......\.........\process.h
................\......\......\.........\RAWSDTaddress.cpp
................\......\......\.........\RAWSDTaddress.H
................\......\......\.........\ReadMe.txt
................\......\......\.........\Resource.h
................\......\......\.........\SafeCheck.aps
................\......\......\.........\SafeCheck.cpp
................\......\......\.........\SafeCheck.h
................\......\......\.........\SafeCheck.ico
................\......\......\.........\SafeCheck.rc
................\......\......\.........\SafeCheck.vcproj
................\......\......\.........\SafeCheck.vcproj.ASM-1475037415F.asm.user
................\......\......\.........\SafeCheck.vcproj.ASM-KERNEL.asmkernel.user
................\......\......\.........\SafeCheck.vcproj.ASMKERNE-60DF6F.asm.user
................\......\......\.........\ShowOrHide.cpp
................\......\......\.........\ShowOrHide.h
................\......\......\.........\SlickOS2.ssk
................\......\......\.........\small.ico
................\......\......\.........\stdafx.cpp
................\......\......\.........\stdafx.h
................\......\......\.........\targetver.h
................\......\......\.........\xde.c
................\......\......\.........\xde.h
................\......\......\.........\xde.vsprops
................\......\......\.........\xdetbl.c
................\......\......\.........\内核钩子.doc
................\......\......\.........\函数特征.txt
................\......\......\.........\新建 文本文档.txt
................\编译说明.txt
................\运行文件夹
................\..........\DriProOther.sys
................\..........\KerHookSSDTIDT.sys
................\..........\SafeCheck.exe
................\驱动层
................\......\DriProOther
................\......\...........\buildchk_wxp_x86.log
................\......\...........\buildchk_wxp_x86.wrn
................\......\...........\buildfre_wxp_x86.log
................\......\...........\buildfre_wxp_x86.wrn
................\......\...........\DriProOther.cpp
................\......\...........\Driver.h
................\......\...........\EnumDriver.dsp
................\......\...........\EnumDriver.dsw
................\......\...........\EnumDriver.ncb
................\......\...........\EnumDriver.plg
................\......\...........\Ioctls.h
................\......\...........\MAKEFILE
................\......\...........\objchk_wxp_x86
................\......\...........\..............\i386
................\......\...........\..............\....\driproother.obj
................\......\...........\..............\....\driproother.obj.oacr.root.x86chk.pft.xml
................\......\.