c++ - 从进程监视器中隐藏的进程

Question

<分区>

Answer 1

Process Monitor 的用途之一是查找并删除试图对用户隐藏的恶意软件:

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.

我并不是说您想做的事情是不可能的，而是您正在尝试做一些感觉有点不诚实的事情。

话虽这么说，但我希望您考虑这样一个事实，即您正试图对一个实用程序隐藏一个进程，该进程是由比你我聪明得多的人编写的，用于查找任何东西。