HookShark
HookShark,HookShark是系统上安装的钩子和补丁的检测器(仅适用于用户模式)现在)。它扫描每个正在运行的进程的每个已加载模块的代码部分,并将其与文件图像进行比较。如果检测到不一致,它将尝试确定钩子或修补程序并将其报告给用户。(I. Description
HookShark is a detector of installed hooks and patches installed on the system (only usermode for
now). It scans through the code-section of every loaded module of each running process and
compares it with the file-image. If it detects discrepancies it tries to determine the type of hook or
patch and reports it to the user. )
页:
[1]