/* 
 * KHS.cpp - Kill Hide Services v0.1
 * Copyright (c) 2005 linux2linux.
 *
 * It takes notes from knlsc and FHS.
 * Thank you, Petter Nordahl-Hagen, for your "NT Registry Hive access library"
 *
 * Freely distributable in source or binary for noncommercial purposes.
 *  
 * THIS SOFTWARE IS PROVIDED BY PETTER NORDAHL-HAGEN `AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 *
 */

Usage:

1) Run the application in the cmd envoriment.

2) If there're no hide services, it'll tell you "There're no hide services.".

3) If it find the hide services, you will see the service's name, Image Path, Start Type and Service Type.

   For example, it finds hxdef100's hide services. 

   The information will be listed below:

KHS - kill hide services 0.1 by linux2linux, 2005/5/26.
Take notes from knlsc and FHS.                         

Hide Service List:

1.------------------------------------------------------------
Hide Service : HackerDefender100
Image Path   : C:\hxdef100\hxdef100.exe C:\hxdef100\hxdef100.2.ini
Start Type   : SERVICE_AUTO_START(Will be set to Disabled).
Service Type : SERVICE_WIN32_OWN_PROCESS 

2.------------------------------------------------------------
Hide Service : HackerDefenderDrv100
Image Path   : \??\C:\hxdef100\hxdefdrv.sys
Start Type   : SERVICE_DISABLED.
Service Type : SERVICE_KERNEL_DRIVER 

Total Hide Services is 2

Do you want Disable the hide Services ( Yes / No )? [ No ]:

4) The application will disable the hide service automatically. However, It's up to you to make it take effect. 
  
   By default, you can just press "Enter" or "No" to keep the hide service alone.

   If you Press "Yes" or "Y" , the application will set the service start type to SERVICE_DISABLED just as

   the hint between two parentheses a the Hide Service List.

5) The most important is that the hide services will lose their activity util you reboot your machine.

6) Thank you for your using my little guy. If you find any bugs, don't hesitate to tell me.

   My Email is linux2linux@163.com

   I wish you have a good time !

   
                        

	



 

