![]() |
|
#2
|
||||
|
||||
|
I would not both with SSDT in x64 Windows.. is much easier to just remove process from linked list and/or handle table.
-Fyyre
__________________
Pax in vultu, bellum in corde. -- https://github.com/Fyyre |
| The Following User Gave Reputation+1 to Fyyre For This Useful Post: | ||
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Hiding a process | securedsolutions | x64 OS | 5 | 08-29-2013 17:59 |
| SSDT in Windows Vista/7 x86 | _MAX_ | General Discussion | 3 | 08-30-2012 02:56 |
| Best rootkit for win7? | suddenLy | General Discussion | 10 | 03-25-2011 08:52 |