日期:2014-05-17 浏览次数:20795 次
创建第一个Windows8应用程序,
Visual Studio 11效果如下
设计下列控件
针对程序进行命名
按钮插入下列代码实现杀毒,实现卸载驱动,删除文件,删除注册表,请见代码注释
WCHAR path[100]; // 需要删除的系统驱动及文件 WCHAR DeviceName[2][50] = { {"\\\\.\\slHBKernel"}, {"\\\\.\\slHBKernel32"} }; WCHAR ServiceName[2][50] = { {"HBKernel"}, {"HBKernel32"} }; WCHAR FileName[2][50] = { {"\\drivers\\HBKernel.sys"}, {"\\drivers\\HBKernel32.sys"} }; for ( int i=0; i<2; i++ ) { HANDLE hDevice = CreateFile( DeviceName[i], GENERIC_READ|GENERIC_WRITE, 0, NULL, OPEN_EXISTING, 0, NULL ); DWORD dLen; BOOL Driver_DEL = DeviceIoControl( hDevice, 0x22E003, NULL, 0, NULL, 0, &dLen, NULL ); CloseHandle(hDevice); if ( Driver_DEL==TRUE ) { printf("Virus Device Driver %s has been unloaded...\n", DeviceName[i]); } SC_HANDLE scm = OpenSCManager(0, 0, 0x0F003F); SC_HANDLE service = OpenService(scm, ServiceName[i], SERVICE_ALL_ACCESS|DELETE); if ( service!=NULL ) { if ( ControlService(service, 1, NULL) ) { printf("The %s service has been stopped...\n", ServiceName[i]); } if ( DeleteService(service) ) { printf("The %s file has been removed from the SCM...\n", ServiceName[i]); } } CloseServiceHandle(