ZwTerminateProcess Test, to kill process from kernel mode. Compile it with Meerkat Advanced kernel mode driver GUI for KmdKit4D. link: http://www.mediafire.com/?hbhjorv8797k2-ZwTerminateProcess Test, to kill process from kernel mode. Compile it

1． Hook之前的准备工作之一。 在这个软件中，总共hook了15个native api 函数。他们分别是： ZwOpenKey , ZwClose, ZwQueryValueKey, ZwDeleteKey, ZwSetValueKey, ZwCreateKey, ZwDeleteValueKey. ZwEnumerateValueKey,ZwRestoreKey, ZwReplaceKey, ZwTerminateProcess, ZwSetSecurityObject, Zw

n种方法结束进程 附加强力结束进程模块-n ways to attach the end of a strong end of the process module processes

通过修改ssdt表 hook掉ZwTerminateProcessZwLoadDriver以及ZwSetSystemInformation 是一份比较简单易读的驱动程序入门源码 是zmpi软件的进程防护拦截模块-By modifying the SSDT hook ZwTerminateProcess ZwLoadDriver and ZwSetSystemInformation Is a relatively simple driver entry source.