L

Ldr (Loader manager), functional group, 40

LdrGetDllHandle, routine, 40

LdrGetProcedureAddress, routine, 40

LdrInitializeThunk, routine, 40

LdrLockLoaderLock, routine, 40

LdrUnlockLoaderLock, routine, 40

library, finding a specific, 44–47

link heartbeats, feedback, 244

link library, code, 44–46

Listen, function, 270–272

Listen.cs file

code, 271–272

functions list, 270

rootkit remote controller implementation, 270–272

listOffset, global variable, 210–211

Load File dialog box, 307

Loader Manager (Ldr), functional group, 40

loader operations, functional groups for hooking, 40

loading

demand start, 21

the rootkit, 24

Local Kernel Debugger, opening the, 7

LogAttachments, function, 219–231

LogBody, function, 219–231

LogContent, function, 219–231, 234–239

Lotus files, E-mail filtering, 233

Lotus Notes

Client Extension testing code, 242

E-mail filtering overview, 232–233

installing a Lotus Notes client filter, 241–242

LotusExtension.c file, 234–239

LotusExtension.def file, 240

LotusExtension.h file, 234

LotusExtension.mak file, 240

readme.txt file, 241

testing the Lotus Notes client extension, 242

Lotus Notes C API, downloading, 233

LotusExtension.c

code, 235–239

E-mail filtering, 234–239

E-mail filtering implementation file, 232

functions list, 234

LotusExtension.def

code, 240

E-mail filtering, 240

E-mail filtering implementation file, 232

LotusExtension.h

code, 234

E-mail filtering implementation file, 232, 234

LotusExtension.mak

code, 240

E-mail filtering, 240

E-mail filtering implementation file, 232

low-level technology, interface-driven versus, 256

lstrcmpiW, function, 50–51