自己写的API－Hook。hook的函数是CreateProcessA和CreateProcessW。就是说可以检测进程创建。还有2处不完善。一个是创建程序的路径没能很好的显示。另一个退出时有点系统异常。-himself wrote the API - Hook. The hook function is CreateProcessA and CreateProcessW. Say can detect the creation process. There are two imperfect.

C++开发的驱动，VB写的接口程序，希望对大家有用，拦截进程的创建，Ring0-C++ development of driver interface program written in VB, hope to be useful, intercept process creation, Ring0

HOOK API，hook的CreateProcess，使用的jump方式，学习之用-HOOK API, hook CreateProcess, use the jump mode, learning to use