PH open API

[forart]

PrcHelp is library that emulates Win32 API process and thread functions: VirtualAllocEx, VirtualFreeEx, CreateRemoteThread and OpenThread.
These Win32 API functions may have no (useful) implementation on all Windows versions.
PrcHelp API functions offer nearly the same functionality as Win32 API functions and do work on Windows 95 as well as on Longhorn.

Source code, binaries and examples

Official website


note: i'll just mail them to join ros...

[Headstrong]

WARNING

that zip file has a virus in it

AVG reports Downloader.Small.56.L

[forart]

Avast (15/09/06) report Win32:Small-BHT [Trj]

...anyway i don't know if it's a false positive.

Let's mail them: Info _at_ ApiHooks _dot_ com

[oiaohm]

Its also pure asm.

It does have comments.

Something is intresting Nortons and Clamwin don't aggree. with AVG and avast on it. Being a trojan. Wonder if its a part that has been used in a tojan. Bit like the way upx exes sometimes false.

Note detects are class Trojan. Mean no self replication.
I wish AV companys could come up with one naming system.