无疑我们中的很多人都会遇到需要读写被其它进程占用的文件的情况，比如说在编写backup程序或是trojan的时候。能从系统中抽出SAM文件，或是读取其它某些用标准方法无法成功访问的文件显然是件不错的事情。比如说当用标志dwShareMode = 0打开文件时，其它进程就不能对它进行访问了。一个很好的例子就是网络寻呼机程序Miranda。这个程序在自己工作的时候不允许别人打开自己的数据库。假设我们需要写一个这样的*，它在感染机器后从数据库中窃走密码，然后删除自身，这个时候就需要解决这个问题。-No doubt many of us will meet the need to read and write the file is in use by another process, for example in the backup program or Trojan time. Taking the SAM files　the system, or read some other standard methods cannot successfully access the file is obviously a good thing. For example, when dwShareMode = 0 mark opened the file, no other process can access it on. A good example is the network pager program Miranda. This program when his work does not allow others to open their own . Suppose we want to write such a Trojan, it in the machine after infection　a　of stolen passwords, and then delete itself, this time we need to solve the problem.