运行程序脱离文件映射困扰,程序运行后可对程序做任意操作,包括删除程序,内存中保留代码.

用rundll32.exe加载dll,然后在dll中重新加载自身并FreeLibrary原先加载的那份脱离隐射-Run the program from the file mapping problems, after running the program can do any action, including the deletion of the program, the memory reserved code with rundll32.exe loaded dll, and then re-load the dll and FreeLibrary their share from the previously loaded insinuate