某病毒使用的API CreateDesktop

<span style="font-family: Arial, Helvetica, sans-serif; background-color: rgb(255, 255, 255);">首先是这样的。。之前分析某个病毒的时候，一直搞不懂这个API CreateDesktop。。后来自己实践了会儿，大致就是可以把创建的进程运行在此桌面中，达到无法直接在本机桌面显示的效果。。代码如下：</span>

<span style="font-family: Arial, Helvetica, sans-serif; background-color: rgb(255, 255, 255);"></span><pre name="code" class="html">int _tmain(int argc, _TCHAR* argv[])
{
	if (argc < 2) 
	{
		printf("Usage: runhidden <path to executable>\n");
		return -2;
	}

	HDESK desktop = CreateDesktop(_T("hiddenDesktop"), NULL, NULL, 0, DESKTOP_CREATEWINDOW, NULL);
	if (NULL == desktop)
	{
		printf("Failed to create desktop: %d\n", GetLastError());
		return -1;
	}

	if (!OpenDesktop(_T("hiddenDesktop"), 0, TRUE, GENERIC_ALL))
	{
		printf("Failed to open desktop: