O

obfuscate, defined, 13

oldFileSysDevice, device pointer, 146–150

oldKeyboardDevice global variable, key logging, 172–173

oldNetworkDevice, device pointer, 146–150

OldZwMapViewOfSection

Ghost.c file variable, 33–36

hookManager.h file variable, 37–38

OnCancel, function, 185

OnCheckNames, function, 218–231

OnCheckNamesComplete, function, 219–231

OnDeviceControl, function, 210

OnKeyboardRead, function, 184

OnRead, function, 218–231

OnReadComplete, function, 218–231

OnReadCompletion, function, 184

OnSendMail, function, 234–239

OnSubmit, function, 216, 219–231

OnSubmitComplete, function, 216, 219–231

OnUnload, function, 172–173

OnWrite, function, 218–231

OnWriteComplete, function, 216, 218–231

opening, Local Kernel Debugger, 7

OpenTDIConnection, function, 122–130

operating system updates, rootkit prevention, 292

outbound content compliance software. See intended installation

Outlook Client Extension testing, code, 232

OutlookExtension.cpp

code, 219–230

E-mail filtering implementation file, 216, 218–231

functions list, 218–219

OutlookExtension.dsp, E-mail filtering skeletal file, 216

OutlookExtension.dsw, E-mail filtering skeletal file, 216

OutlookExtension.h

code, 216–218

E-mail filtering implementation file, 216–218