ZombifyProcess

ZombifyProcess http://www.malwaretech.com/2014/12/zombie-processes-as-hips-bypass.html Yes, I use do whilefalse, please don't hate me...

Simple little program, bypassing the HIPS monitoring-vulnerability warning-the black bar safety net

This is a little experiment. From abroad of a program. The test object is the more popular of the SSM. Other HIPS are basically the same. First we put the paint program rule deleted. And then run a draw to confirm the rule has been deleted. Stop it. ! Now running our test program, and drawing...