sampledriver.cpp

使用内核方法检测隐藏的进程

// SampleDriver.cpp : Defines the class behaviors for the application.
//

#include "stdafx.h"
#include "SampleDriver.h"
#include "SampleDriverDlg.h"

#ifdef _DEBUG
#define new DEBUG_NEW
#undef THIS_FILE
static char THIS_FILE[] = __FILE__;
#endif

/////////////////////////////////////////////////////////////////////////////
// CSampleDriverApp

BEGIN_MESSAGE_MAP(CSampleDriverApp, CWinApp)
	//{{AFX_MSG_MAP(CSampleDriverApp)
	//}}AFX_MSG
	ON_COMMAND(ID_HELP, CWinApp::OnHelp)
END_MESSAGE_MAP()

/////////////////////////////////////////////////////////////////////////////
// CSampleDriverApp construction

CSampleDriverApp::CSampleDriverApp()
{
}

/////////////////////////////////////////////////////////////////////////////
// The one and only CSampleDriverApp object

CSampleDriverApp theApp;

/////////////////////////////////////////////////////////////////////////////
// CSampleDriverApp initialization

BOOL CSampleDriverApp::InitInstance()
{
	AfxEnableControlContainer();

	// Standard initialization

#ifdef _AFXDLL
	Enable3dControls();			// Call this when using MFC in a shared DLL
#else
	Enable3dControlsStatic();	// Call this when linking to MFC statically
#endif

	CSampleDriverDlg dlg;
	m_pMainWnd = &dlg;
	int nResponse = dlg.DoModal();
	if (nResponse == IDOK)
	{
	}
	else if (nResponse == IDCANCEL)
	{
	}

	// Since the dialog has been closed, return FALSE so that we exit the
	//  application, rather than start the application's message pump.
	return FALSE;
}