目前发现的最强悍的VB隐藏进程方法
VB隐藏进程问题的讨论由来已久,效果有好有坏,反正是各有各的招,偶然机会看到planet-source一段隐藏进程的文章,作者说采用了kernel mode driver!方法,
单从技术方法而言,这是目前见到隐藏进程中最强悍的了(个人见解,井底之蛙了),不过这种东西用在正义的人手上是一个除暴安良的利器,用心叵测者就不好说了,但是技术终归是技术,好的东西还是应该用心学习.
原贴地址
原贴中的程序已有更新,更新的程序中提供了VB.Net 8 的实现
以下是更新程序的几个下载地址
http://www.2shared.com/file/7848706/de04be5b/HideMyApp.html
http://www.1filesharing. com/download/ZF8AF3HZ/HideMyApp.rar
http://bluehost.to/file/glAkGsRKj/HideMyApp.rar
http://duc kload.com/download/187293/HideMyApp.rar
http://www.egoshare.com/download.php?id=33B916FC40
提醒:应该对源码PSLib.vbp进行编译,然后再在你的工程中引用编译后的dll文件.
使用方法可以查看示例代码,示例代码直接支持会报Class has not been initialized的错误,可以按上面的方式编译,然后去掉对工程的直接引用,再在引用中重新选择生成后的Dll文件.
其它不多说,可以看一下readme.txt文件,readme内容:
Introduction:
==============
Since the DOS age, people have been trying to figure out ways to hide their
processes from being detected. One can recall the Interruption Hook method used
in the early DOS. With the introduction of the new operating system, Microsoft
Windows 95 and the new security issues, the old method simply didn't work.
So, people had to find a new way, and they did indeed. They convinced the OS that
their program was a service. That way, it didn't show up in the task manager.
These tricks used to work well until Windows NT, and its successors were released.
Everything has changed, the task manager now includes a list of all currently
running processes (CRPs) that makes completely hiding a process almost impossible.
As a result of many hours of hard work, and about 8 Blue Scree
相关文档：
Private Declare Function URLDownloadToFile Lib "urlmon" Alias "URLDownloadToFileA" ( _
ByVal pCaller As Long, _
ByVal szURL As String, _
ByVal szFileName As String, _
ByVal dwReserved As Long, _
......
3,Return without GoSub
5,Invalid procedure call
6,Overflow
7,Out of memory
9,Subscript out of range
10,This array is fixed or temporarily locked
11,Division by zero
13,Type mismatch
14,Out of string space
16,Expression too complex
17,Cant perform requested operation
18,User int ......
该方法不需要使用API及第三方控件
这里使用的是VB的UserControl控件的AsyncRead方法
步骤如下:
1、添加一个用户控件，设置InvisibleAtRuntime属性为true，目的是运行时该控件不显示用户界面，就象Timer控件一样。
2、到自定义控件的代码窗口，添加如下代码
Option Explicit
'下载结果枚举
Public Enum Downloa ......
如何让幻灯片在vb的框架里播放
'Microsoft PowerPoint 9.0(Office 2000的，如果是97则是8.0) Object Library)
''Microsoft PowerPoint 11.0(Office 2003) Object Library)
Private Declare Sub Sleep Lib "kernel32" (ByVal dwMilliseconds As Long) '延时API声明
Private Sub Form_Load()
Dim ppt As New PowerPoint. ......
VB编写托盘图标有两个要点，一是使用 Shell_NotifyIcon 函数显示图标；二是向系统注册 TaskbarCreated 消息，以便explorer崩溃时恢复托盘的图标。
首先需要增加一个模块文件，内容如下：
Public Declare Function Shell_NotifyIcon Lib "shell32.dll" Alias "Shell_NotifyIconA" (ByVal dwMessage As Long, lpData As NOT ......
