Describe: use of thread scheduling Chain link to the code detection process. Basic can be detected all current Rootkit hidden process. System programming enthusiasts certainly under.

File list(time 1996080903~2009020920)(Click to check if it's the file you need, and recomment it at the bottom):
  buildchk.log
  buildchk_wnet_x86.log
  buildchk_wxp_x86.log
  kmodule.c
  Makefile
  Myklister.ncb
  Myklister.sln
  Myklister.sys
  Myklister.vcproj
  obj
  ...\_objects.mac
  objchk
  ......\i386
  ......\....\kmodule.obj
  ......\....\Myklister.pdb
  objchk_wnet_x86
  ...............\i386
  ...............\....\kmodule.obj
  ...............\....\Myklister.pdb
  ...............\_objects.mac
  objchk_wxp_x86
  ..............\i386
  ..............\....\kmodule.obj
  ..............\....\Myklister.pdb
  ..............\_objects.mac
  objfre
  ......\i386
  Sources

 Downloaders recently:  xiangfeng99 xhenxiaoli yj_780209 dim0nbdp zxy98 [More information of uploader Fi7kes]

 To Search: rootkit c++ detection process 

 [FaceVerificationStstemBaseOnVC.rar] - This is a development platform based on the VC the Face Recognition/Detection source, for the Study of Human Face Recognition can help!
 [processmon.zip] - This is a proccess monitor driver for windows2000,it can monitor all proccess created or closed. This source code uses function not open to pulblic of
 [enumfilehandle.rar] - Enumerate the system to handle all open files, and sometimes can not afford to delete a file, it may not release the file handle, you can use it to fi

 [net_driver_code.rar] - included 8139,8019, dm9000, 9200EMAC. p710mac card, and so on the driving source. FOSS just for a few changes can be run.
 [051017NameLess114.rar] - Trojan code NameLess BackDoor V1.14 (stable version) source code, a very precious things, it is strongly recommended to download. Thanks to the open-s
 [usb_code.rar] - introduced by vc usb equipment operating procedures, control access USB devices
 [FireText.500070.rar] - text characters running around a flame flicker, rather pretty. Basic idea : For a given language, around magenta-money overseas minus a random order q
 [process_manage.rar] - process information display system, including the process name, path, priority, thread and so on
 [remotecontrolsoftwaresourcecode.Rar] - key code : complete registry handling, document handling. Server using multithreading services will best address SOCKET request. Data reception, sendi
 [filexzx.rar] - in FILEMON done on the basis of changes, can achieve a ban on the paper's readers delete operation

Functions/Classes:
DeviceIoControl