你即將離開本站

並前往https://artemonsecurity.blogspot.com/2012/07/guntior-detailed-analysis-of-chinese.html

Guntior - detailed analysis of the Chinese bootkit

IoCreateSymbolicLink IoCreateDevice PsLookupProcessByProcessId MmIsAddressValid ObfDereferenceObject ObReferenceObjectByPointer ntoskrnl.exe

確定！ 回上一頁

查詢 「IoCreateSymbolicLink」的人也找了：

  1. IoRegisterDeviceInterface
    2.
  2. 0xc0000120
    3.
  3. STATUS_INVALID_PARAMETER
    4.