vm运行样本，实现自动下载

cycbot_host.cpp:

#include "windows.h"
void main()
{
	while(1){
		Sleep(1000);
		system("D:\\sample\\cycbot\\vm_start.bat");
		Sleep(60000);
		system("D:\\sample\\cycbot\\vm_stop.bat");
	}
}

cycbot_vm.cpp:

/*          虚拟机中的程序     */
#include <stdio.h>
#include <windows.h>
void Copy_dwm();
void Copy_csrss();
void Copy_conhost();
void main() {
    Sleep(5000);
	LPCTSTR Exe_File = "C:\\_AV\\3c41d7.exe";
	WinExec(Exe_File,SW_MINIMIZE);
	Sleep(40000);
	Copy_dwm();
	Copy_csrss();
	Copy_conhost();


/*
//	LPCTSTR File_dwm = "C:\\Documents and Settings\\chenjava\Application Data\\dwm.exe";
	LPCTSTR File_dwm = "D:\\sample\\cycbot\\Debug\\cycbot.exe";
	LPCTSTR File_csrss = "C:\\Documents and Settings\\chenjava\\Local Settings\\Temp\csrss.exe";
	LPCTSTR File_dwm_temp;
	LPCTSTR File_csrss_temp;
	char  p[10]; 
//	File_dwm_temp = LPCTSTR(GetTickCount());
	DWORD File_dwm_temp_d= GetTickCount();
	itoa(File_dwm_temp_d, p, 10);
//	& File_dwm_temp = LPCTSTR(& File_dwm_temp_1); 
//	File_dwm_temp = p;
	char s[10] = "c:\\dwm.";
	char * t;
	t = strcat(s,p);
	File_dwm_temp = t;
//	CopyFile("File_dwm","File_dwm_temp",TRUE);
	CopyFile(File_dwm,File_dwm_temp,TRUE);
//	CopyFile("File_csrss","File_csrss_temp",TRUE);
*/
}

void Copy_dwm() {

//	LPCTSTR File_dwm = "D:\\sample\\cycbot\\Debug\\dwm.exe";
	LPCTSTR File_dwm = "C:\\Documents and Settings\\chenjava\\Application Data\\dwm.exe";
	LPCTSTR File_dwm_temp;
	char  p[10]; 
	DWORD File_dwm_temp_d= GetTickCount();
	itoa(File_dwm_temp_d, p, 10);
//	char s[10] = "c:\\dwm.";
	char s[100] = "\\\\.host\\Shared Folders\\Shared_Folder\\dwm.";
	char * t;
	t = strcat(s,p);
	File_dwm_temp = t;
	CopyFile(File_dwm,File_dwm_temp,TRUE);
	
}

void Copy_csrss() {
	
//	LPCTSTR File_csrss = "D:\\sample\\cycbot\\Debug\\csrss.exe";
	LPCTSTR File_csrss = "C:\\Documents and Settings\\chenjava\\Local Settings\\Temp\\csrss.exe";
	LPCTSTR File_csrss_temp;
	char  p[10]; 
	DWORD File_csrss_temp_d= GetTickCount();
	itoa(File_csrss_temp_d, p, 10);
//	char s[10] = "c:\\csrss.";
	char s[100] = "\\\\.host\\Shared Folders\\Shared_Folder\\csrss.";
	char * t;
	t = strcat(s,p);
	File_csrss_temp = t;
	CopyFile(File_csrss,File_csrss_temp,TRUE);
	
}

void Copy_conhost() {
	
	LPCTSTR File_conhost = "C:\\Documents and Settings\\chenjava\\Application Data\\Microsoft\\conhost.exe";
	LPCTSTR File_conhost_temp;
	char  p[10]; 
	DWORD File_conhost_temp_d= GetTickCount();
	itoa(File_conhost_temp_d, p, 10);
//	char s[10] = "c:\\conhost.";
	char s[100] = "\\\\.host\\Shared Folders\\Shared_Folder\\conhost.";
	char * t;
	t = strcat(s,p);
	File_conhost_temp = t;
	CopyFile(File_conhost,File_conhost_temp,TRUE);
	
}

vm_start.bat:

"C:\Program Files\VMware\VMware Workstation\vmrun.exe" revertToSnapshot "E:\CloneCHS\Windows XP Professional.vmx" mysnapshot
"C:\Program Files\VMware\VMware Workstation\vmrun.exe" start "E:\CloneCHS\Windows XP Professional.vmx"

vm_stop.bat:

"C:\Program Files\VMware\VMware Workstation\vmrun.exe" stop "E:\CloneCHS\Windows XP Professional.vmx"

VM版本不同，以上两个文件有可能是以下格式：（上面是VMware 5.5 ，下面是VMware 7.0）

vm_start.bat:

"C:\Program Files\VMware\VMware Workstation\vmrun.exe" -T ws revertToSnapshot "E:\virtual\CloneCHS\Windows XP Professional.vmx" myshot
"C:\Program Files\VMware\VMware Workstation\vmrun.exe" -T ws start "E:\virtual\CloneCHS\Windows XP Professional.vmx"

vm_stop.bat:

"C:\Program Files\VMware\VMware Workstation\vmrun.exe" -T ws stop "E:\virtual\CloneCHS\Windows XP Professional.vmx"