学步园

#include <WinTrust.h><br /> #include <Softpub.h></p> <p>#pragma comment(lib, "WinTrust.lib")</p> <p>int main()<br /> {<br /> TCHAR szExe[MAX_PATH];<br /> //_tprintf(_T("Please Type Exe File Path:/n"));<br /> //_tscanf_s(_T("%ws"), szExe, MAX_PATH);<br /> ::GetModuleFileName(::AfxGetInstanceHandle(), (LPTSTR)szExe, MAX_PATH);<br /> _tprintf(_T("Verifying %ws/n"), szExe);</p> <p> GUID gd = WINTRUST_ACTION_GENERIC_VERIFY_V2;</p> <p> WINTRUST_FILE_INFO FileData;<br /> memset(&FileData, 0, sizeof(FileData));<br /> FileData.cbStruct = sizeof(WINTRUST_FILE_INFO);<br /> FileData.pcwszFilePath = (LPCTSTR)szExe;<br /> FileData.hFile = NULL;<br /> FileData.pgKnownSubject = NULL;</p> <p> WINTRUST_DATA WinTrustData;<br /> memset(&WinTrustData, 0, sizeof(WINTRUST_DATA));<br /> WinTrustData.cbStruct = sizeof(WINTRUST_DATA);<br /> WinTrustData.pPolicyCallbackData = NULL;<br /> WinTrustData.pSIPClientData = NULL;<br /> WinTrustData.dwUIChoice = WTD_UI_NONE;<br /> WinTrustData.fdwRevocationChecks = WTD_REVOKE_NONE;<br /> WinTrustData.dwUnionChoice = WTD_CHOICE_FILE;<br /> WinTrustData.dwStateAction = 0;<br /> WinTrustData.hWVTStateData = NULL;<br /> WinTrustData.pwszURLReference = NULL;<br /> WinTrustData.dwProvFlags = WTD_SAFER_FLAG;<br /> WinTrustData.dwUIContext = 0;<br /> WinTrustData.pFile = &FileData;</p> <p> LONG lRst = WinVerifyTrust(NULL, &gd, &WinTrustData);<br /> if (lRst == ERROR_SUCCESS)<br /> {<br /> _tprintf(_T("Verified Success!/n"));<br /> }<br /> else<br /> {<br /> _tprintf(_T("Verified Fail!Error Number:0x%08X/n"), lRst);<br /> }</p> <p> system("Pause");<br /> }

其实是MSDN上面的一个代码，可以校验EXE自身是否有被修改过。可以放在完整软件的启动时执行，用以校验自身是否被病毒感染，是否被脱壳等。。。WinXP SP3+VS2008编译运行通过