PH open API

Here you can discuss ReactOS related topics.

Moderator: Moderator Team

Post Reply
forart
Posts: 1050
Joined: Mon Nov 29, 2004 1:36 pm
Location: Italy
Contact:

PH open API

Post by forart »

ApiHooks.com wrote:PrcHelp is library that emulates Win32 API process and thread functions: VirtualAllocEx, VirtualFreeEx, CreateRemoteThread and OpenThread.
These Win32 API functions may have no (useful) implementation on all Windows versions.
PrcHelp API functions offer nearly the same functionality as Win32 API functions and do work on Windows 95 as well as on Longhorn.
Source code, binaries and examples

Official website


note: i'll just mail them to join ros...
»Forward Agency NPO
In progress we (always) trust.

Headstrong
Posts: 52
Joined: Sun Nov 28, 2004 6:26 pm
Location: Scotland UK

Virus

Post by Headstrong »

WARNING

that zip file has a virus in it :evil:

AVG reports Downloader.Small.56.L

forart
Posts: 1050
Joined: Mon Nov 29, 2004 1:36 pm
Location: Italy
Contact:

Post by forart »

Avast (15/09/06) report Win32:Small-BHT [Trj] :?

...anyway i don't know if it's a false positive. :roll:

Let's mail them: Info _at_ ApiHooks _dot_ com
»Forward Agency NPO
In progress we (always) trust.

oiaohm
Posts: 1322
Joined: Sun Dec 12, 2004 8:40 am

Post by oiaohm »

Its also pure asm.

It does have comments.

Something is intresting Nortons and Clamwin don't aggree. with AVG and avast on it. Being a trojan. Wonder if its a part that has been used in a tojan. Bit like the way upx exes sometimes false.

Note detects are class Trojan. Mean no self replication.
I wish AV companys could come up with one naming system.

Post Reply

Who is online

Users browsing this forum: Google [Bot], Kevin Castro and 3 guests