drvwork.h

在驱动下实现进程隐藏,在驱动下实现进程隐藏.

#if !defined(AFX_DRVWORK_H__23320EB3_AF87_477E_A213_B25A6747CC3A__INCLUDED_)
#define AFX_DRVWORK_H__23320EB3_AF87_477E_A213_B25A6747CC3A__INCLUDED_

#include "winsvc.h"
#include <winioctl.h>
#include "..\HideDriver\Ioctl.h"
class DriverWork
{
public:
	DriverWork();
	virtual ~DriverWork();

	static BOOL Install(LPCTSTR DriverName,LPCTSTR driverExec,DWORD startType);
	static BOOL Remove(LPCTSTR DriverName,LPCTSTR driverExec);
	static BOOL Start(LPCTSTR DriverName);
	static BOOL Stop(LPCTSTR DriverName);
	static BOOL Exchange(LPCTSTR DriverName, 
						 unsigned long ioctlCode,
						 PWCHAR pInStr,
						 DWORD inStr_size,
						 PWCHAR pOutStr,
						 DWORD outStr_size,
						 PDWORD BytesReturned);
private:
	static SC_HANDLE scm;
};

#endif // !defined(AFX_DRVWORK_H__23320EB3_AF87_477E_A213_B25A6747CC3A__INCLUDED_)