檢測windows下rootkit對文件的隱藏。some usermode overwrites first few bytes
of ZwQueryDirectoryFile and that trick will fail then :( So, you will
probably need a small database of the correct indexes for all Windows
versions
標簽：
ZwQueryDirectoryFile
overwrites
usermode
windows
上傳時間：
2014-12-08
上傳用戶：lps11188
