Introduction - If you have any usage issues, please Google them yourself
work needs to control the process of creation, then the ZwCreateProcess HOOK, later found xp 2003 and the process of creating both NtCreateProcessEx
Packet : 414884在windows 2003中hook zwcreateprocessex.zip filelist
在Windows 2003中HOOK ZwCreateProcessEx.txt