{"author_url":"https://blog.hatena.ne.jp/blono/","provider_name":"Hatena Blog","blog_url":"https://yano.hatenadiary.jp/","width":"100%","type":"rich","image_url":null,"blog_title":"yano\u306e\u65e5\u8a18","version":"1.0","description":"\u4eca\u56de\u306f Windows \u306e Service \u304b\u3089\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u8d77\u52d5\u3059\u308b\u65b9\u6cd5\u3092\u7d39\u4ecb\u3057\u307e\u3059\uff0eVista \u4ee5\u964d\u3067\u306f\u30b5\u30fc\u30d3\u30b9\u304b\u3089\u30e6\u30fc\u30b6\u30bb\u30c3\u30b7\u30e7\u30f3\u306b\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3059\u308b\u306b\u306f CreateProcessWithLogonW \u3092\u4f7f\u7528\u3057\u307e\u3059\u304c\uff0c\u3053\u3053\u3067\u306f\u6307\u5b9a\u3057\u305f\u30d7\u30ed\u30bb\u30b9\u306e\u30c8\u30fc\u30af\u30f3\u3092\u8907\u88fd\u3057\u3066 CreateProcessAsUser \u95a2\u6570\u3067\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u8d77\u52d5\u3059\u308b\u65b9\u6cd5\u3092\u7d39\u4ecb\u3057\u307e\u3059\uff0e\u4f8b\u3048\u3070\u3053\u306e\u30d7\u30ed\u30b0\u30e9\u30e0\u306b winlogon.exe \u30d7\u30ed\u30bb\u30b9\u306e\u30cf\u30f3\u30c9\u30eb\u3092\u6e21\u3059\u3068\uff0cLocal System Account \u30e6\u30fc\u30b6\u3067\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u306b\u306a\u308a\u307e\u3059\uff0e\u65e9\u901f\u4ee5\u4e0b\u306b\u79c1\u306e\u5b9f\u88c5\u4f8b\u3092\u793a\u3057\u307e\u3059\uff0e \u30d7\u30ed\u30b0\u30e9\u30e0\u306e\u4f5c\u6210\u306b\u306f EternalWindo\u2026","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fyano.hatenadiary.jp%2Fentry%2F20100714%2F1279036230\" title=\"Windows \u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30b0\u30e9\u30e0\u304b\u3089\u30e6\u30fc\u30b6\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3059\u308b\u65b9\u6cd5 - yano\u306e\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","height":"190","author_name":"blono","title":"Windows \u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30b0\u30e9\u30e0\u304b\u3089\u30e6\u30fc\u30b6\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3059\u308b\u65b9\u6cd5","provider_url":"https://hatena.blog","url":"https://yano.hatenadiary.jp/entry/20100714/1279036230","categories":["Windows","C++"],"published":"2010-07-14 00:50:30"}