64位隐藏保护进程

资源描述这是使用dkom实现的隐藏进程的方法，用驱动实现，需要绕过pg，否则驱动加载不成功，无法实现进程的隐藏。

HideProcess64Demo
res
Release
ipch
Debug
HideProcess64Demo.aps
HideProcess64Demo.clw
HideProcess64Demo.cpp
HideProcess64Demo.dsp
HideProcess64Demo.dsw
HideProcess64Demo.h
HideProcess64Demo.ncb
HideProcess64Demo.opt
HideProcess64Demo.plg
HideProcess64Demo.rc
HideProcess64Demo.sdf
HideProcess64Demo.sln
HideProcess64Demo.suo
HideProcess64Demo.vcxproj
HideProcess64Demo.vcxproj.filters
HideProcess64Demo.vcxproj.user
HideProcess64DemoDlg.cpp
HideProcess64DemoDlg.h
LoadDrvCtrl.h
ReadMe.txt
resource.h
StdAfx.cpp
StdAfx.h
HideProcess64
objchk_wlh_amd64
ipch
sources
makefile
buildchk_wlh_amd64.log
buildchk_wlh_amd64.wrn
buildx64.bat
clean.bat
ddkbuild.cmd
HideProcess64.c
HideProcess64.h
HideProcess64.sdf
HideProcess64.sln
HideProcess64.suo
HideProcess64.vcxproj
HideProcess64.vcxproj.user
mybuild.bat
readme.txt
HideProc32
objchk_wlh_x86
ipch
sources
makefile
clean.bat
ddkbuild.cmd
HideProcess32.c
HideProcess32.sdf
HideProcess32.sln
HideProcess32.suo
HideProcess32.vcxproj
HideProcess32.vcxproj.user
inc.c
inc.h
mybuild.bat
readme.txt
ssdt_hook.c
ssdt_hook.h