config

易语言写的杀毒软件...............(Easy language to write anti-virus software ...............)

RapidFinder 实现文件的查找和替换(Realize RapidFinder file search and replace)

VC平台下使用VC++语言编程调用Lib库文件以及Dll文件的调用，代码比较简单，另有文字备注说明(VC LIB　DLL)

windows下的VC++有关于多com接口的编程，是一个在工程中实际用过的例子。(under windows with VC++ programming interface for multi-com, used in a real project.)

SelfDelete(可以删除自身的VC++源码(巳通过了调试)) 为了实现程序自删除功能，我们可以通过多进程的方法解决这个问题。可执行文件在结束返回前，创建一个运行命令窗口的新进程（在Windows98中为Command进程，在Windows2000/XP中为CMD进程），当然该命令窗口以隐藏方式执行，并通过传递参数执行删除功能。为了避免可执行文件的映像还在内存中就执行删除，需要把当前进程设置为实时优先级，而命令窗口进程设置为很低的IDLE优先级，这样首先可执行文件结束返回，再运行命令窗口的删除命令，就实现了该文件自身的删除功能。 (SelfDelete (you can delete its own VC++ source code (had passed debugging)) In order to achieve the program from the delete function, we can multi-process methods to solve this problem. Return before the end of the executable file, run the command window to create a new process (in Windows98 process for the Command, in Windows2000/XP process for CMD), of course, the command window to hide the manner and to perform delete functions by passing a parameter . In order to avoid the executable file image still in memory on the implementation of delete, you need to set the current process for real-time priority, and the command window to set the process priority to low IDLE, so the end of the first return to the executable file, then run the command window delete command, the file itself to achieve the delete function. )

本程序是一个获取windows系统的Version的C++程序(This program is a Get the windows system Version C++ program)

decompiler, ida的插件代码，可以反编译asm(Decompiler, Ida plug-in code, the compiler can be anti-asm)

说明：  U盘过滤驱动系统源代码主要是用DDK来实现的(U disk drive system source code filter is mainly used to realize the DDK)

VC++获取到Windows开机运行的时间，不是开机时间，而是从开机后到现在的运行时间，也就是一次开机所运行的时间，如果关机了，可能就不准确了。(The VC++ get to the Windows boot running time is not boot time, but from the boot to the running time, which is the time you turn on the running time, shutdown, and may not be accurate.)

内核态下基于动态感染技术的应用程序执行保护分析（带源程序哈） (Dynamic infection technology-based applications in kernel mode execution protection analysis (with source code))