Can I read Techniques to Hide Malware Processes on EtoBox?

Techniques to Hide Malware Processes by Alan Petzold is a document available to read on EtoBox.

What is Techniques to Hide Malware Processes about?

The document discusses techniques used by malware to hide processes from the Task Manager in Windows. It explains that malware replaces the legitimate call to the EnumProcesses() function, which lists running processes, with its own implementation that removes any mention of processes it is programmed to hide. While hooking APIs could also achieve this outcome, malware typically directly modifies memory without notifying the operating system. The responses provide additional details on how malware modifies

Author

Alan Petzold

Language

EN