xp親測有效，使用我們自己編寫的列舉驅動模組會看不到。列舉驅動模組請看文章
但是使用ark工具依然能看到我們隱藏的驅動某塊，比如kernel detective 和pchunter 但是隱藏的驅動模組為紅色，意為ark工具檢測到了該模組進行了隱藏
#include
typedef
unsigned
long
dword
; typedef
struct
_kldr_data_table_entry kldr_data_table_entry, *pkldr_data_table_entry;
pdriver_object pdriverobject = null;
void
hidedriver()
} // 鍊錶往前走
entry = (pkldr_data_table_entry)entry->inloadorderlinks.flink;
} }
ntstatus
unloaddriver(
in pdriver_object driverobject
)
ntstatus
driverentry(
in pdriver_object driverobject,
in punicode_string registrypath
)
Linux 隱藏驅動模組
作為惡意驅動，肯定是希望自己模組載入之後不會被發現，那麼就需要對安裝的驅動模組進行隱藏，在驅動初始化入口進行摘鏈，kobject del 函式刪除當前模組的kobject就可以起到在 lsmod 和 sys module中隱藏。list del init this module.list test....
Linux pci驅動原始碼
include include include include include include include include include include include include include ifdef linux26 include endif include plx.h defi...
odoo 隱藏原始碼選單
1.隱藏選單 有時，我們需要把原始碼裡面的選單去掉，有些原始碼裡面的功能以及選單就不用顯示 sale.report sales team model ir.ui.menu name active eval false record 解釋上面 切換選單上級 sale.report sales team...