dwProcess，該病毒修改註冊表創建Run/syspler項實現自啟動，運行後連線特定網站地址，試圖下載病毒和惡意代碼。
基本介紹
- 中文名：dwProcess
- 進程檔案：：dwProcess.exe
- 進程名稱：：Troj_Downloader.syspler
- 英文描述：：N/A
相關詞條
- dwProcess
dwProcess,該病毒修改註冊表創建Run/syspler項實現自啟動,運行後連線特定網站地址,試圖下載病毒和惡意代碼。...
- PROCESS_INFORMATION
① hProcess:返回新進程的句柄。② hThread:返回主執行緒的句柄。③ dwProcessId:返回一個全局進程標識符。該標識符用於標識一個進程。從進程被創建到終止,該值...
- LPPROCESS_INFORMATION
結構原型typedef struct _PROCESS_INFORMATION { HANDLE hProcess; HANDLE hThread; DWORD dwProcessId; DWORD dwThreadId; } PROCESS_INFORMATION, *LPPROCESS_...
- PROCESS_INFOMATION結構
DWORD dwProcessId; //新建進程的IDDWORD dwThreadId; //新建進程主執行緒ID}PROCESS_INFOMATION,*LPPROCESS_INFOMATION;PROCESS_INFOMATION結構主要在新建進程函式Create...
- GetWindowThreadProcessld
GetWindowThreadProcessld,函式功能:該函式返回創建指定視窗執行緒的標識和創建視窗的進程的標識符,後一項是可選的,函式原型;DWORD GetWindowThreadProcessld(HWND hwnd,...
- GetWindowThreadProcessId
Declare Function GetWindowThreadProcessId Lib "user32" Alias "GetWindowThreadProcessId" (ByVal hwnd As Long, lpdwProcessId As Long) As Long...
- DuplicateHandle
__in DWORD dwProcessId);dwDesiredAccess:決定你擁有該進程的操作許可權,如果要成功用到則要填PROCESS_ALL_ACCESS或PROCESS_DUP_HANDLEbInheritHandle:是否可繼承...
- findwindow
DWORD dwProcessId // process identifier);HANDLE hProcess, // handle to process whose memory is written toLPVOID lpBaseAddress, // address to start ...
- WaitForDebugEvent
typedef struct _DEBUG_EVENT { DWORD dwDebugEventCode; DWORD dwProcessId; DWORD dwThreadId; union { EXCEPTION_DEBUG_INFO Exception; CREATE_THREAD_DEBUG_...
