本菜的坑爹小程序。。。。。。
MainUscan.cpp
#include <windows.h>
#include <stdio.h>
#include <Dbt.h>
#include "resource.h"
#include "print.h"
#define MAXUDRIVE 3
#define WM_SHELLNOTIFY WM_USER+5
#define IDI_TRAY 0
#define IDM_RESTORE 1000
#define IDM_EXIT 1010
LRESULT CALLBACK WndProc (HWND, UINT, WPARAM, LPARAM) ;
BOOL CALLBACK MainDlg (HWND, UINT, WPARAM, LPARAM) ;
BOOL CALLBACK AboutDlgProc (HWND, UINT, WPARAM, LPARAM) ;
BOOL CALLBACK AboutDlgProc2 (HWND, UINT, WPARAM, LPARAM) ;
BOOL CALLBACK AboutDlgProc3 (HWND, UINT, WPARAM, LPARAM) ;
BOOL CALLBACK AboutDlgProc4 (HWND, UINT, WPARAM, LPARAM) ;
int MD5_CAL(char * filename, bool write) ;
int find(char * lpPath, int LoadReturn, char * files);
int ScanFile(char * filePath, int ListNumber);
int LoadList();
int CleanFile(char * filePath);
int Scan();
int ScanAutorun();
extern char MD5_CurrentFile[32];
HINSTANCE hInst ;
HWND hwndModeless, hwndEdit;
NOTIFYICONDATA note;
HMENU hPopupMenu;
HINSTANCE hInstance;
TCHAR RestoreString[] = TEXT ("&打开主窗口");
TCHAR ExitString[] = TEXT ("&退出程序");
int Filetotal = 0, Virustotal = 0, VirusClear = 0;
bool GuardU = TRUE;
char MD5[32], rw[5] = {"A"};
int WINAPI WinMain (HINSTANCE hInstance, HINSTANCE hPrevInstance,
PSTR szCmdLine, int iCmdShow)
{
static TCHAR szAppName[] = TEXT ("UScan") ;
HWND hwnd ;
MSG msg ;
RECT rect ;
WNDCLASS wndclass ;
hInst = hInstance ;
wndclass.style = CS_HREDRAW | CS_VREDRAW | CS_DBLCLKS;
wndclass.lpfnWndProc = WndProc ;
wndclass.cbClsExtra = 0 ;
wndclass.cbWndExtra = 0 ;
wndclass.hInstance = hInstance ;
wndclass.hIcon = LoadIcon (NULL, szAppName) ;
wndclass.hCursor = LoadCursor (NULL, IDC_ARROW) ;
wndclass.hbrBackground = NULL ;
wndclass.lpszMenuName = TEXT ("IDR_MENU") ;
wndclass.lpszClassName = szAppName ;
if (!RegisterClass (&wndclass))
{
MessageBox (NULL, TEXT ("This program requires Windows NT!"),
szAppName, MB_ICONERROR) ;
return 0 ;
}
hwnd = CreateWindow (szAppName, TEXT ("UScan"),
WS_OVERLAPPED | WS_CAPTION | WS_SYSMENU |
WS_BORDER | WS_MINIMIZEBOX,
CW_USEDEFAULT, CW_USEDEFAULT,
CW_USEDEFAULT, CW_USEDEFAULT,
NULL, NULL, hInstance, NULL) ;
hwndModeless = CreateDialog (hInstance, szAppName, hwnd, MainDlg) ;
GetWindowRect (hwndModeless, &rect) ;
AdjustWindowRect (&rect, WS_CAPTION | WS_BORDER, FALSE) ;
SetWindowPos (hwnd, NULL, 0, 0, rect.right - rect.left,
rect.bottom - rect.top, SWP_NOMOVE) ;
ShowWindow (hwndModeless, SW_SHOW) ;
ShowWindow (hwnd, SW_SHOWNORMAL) ;
UpdateWindow (hwnd) ;
while (GetMessage (&msg, NULL, 0, 0))
{
if (hwndModeless == 0 || !IsDialogMessage (hwndModeless, &msg))
{
TranslateMessage (&msg) ;
DispatchMessage (&msg) ;
}
}
return msg.wParam ;
}
LRESULT CALLBACK WndProc (HWND hwnd, UINT message, WPARAM wParam, LPARAM lParam)
{
HMENU hMenu;
OPENFILENAME NewFile;
HANDLE hFile;
FILE * fpfile;
POINT pt;
static char szName[1024];
static HINSTANCE hInstance ;
int i;
char * FilterFile = "All File(*.*)\0*.*\0", Md5[32];
switch (message)
{
case WM_CREATE:
hPopupMenu = CreatePopupMenu();
AppendMenu(hPopupMenu, MF_STRING, IDM_RESTORE, RestoreString);
AppendMenu(hPopupMenu, MF_STRING, IDM_EXIT, ExitString);
break;
case WM_SETFOCUS:
SetFocus (hwndModeless);
return 0 ;
case WM_SIZE:
if(wParam == SIZE_MINIMIZED)
{
note.cbSize = sizeof(NOTIFYICONDATA);
note.hWnd = hwnd;
note.uID = IDI_TRAY;
note.uFlags = NIF_ICON | NIF_MESSAGE | NIF_TIP;
note.uCallbackMessage = WM_SHELLNOTIFY;
note.hIcon = LoadIcon(NULL, IDI_WINLOGO);
lstrcpy(note.szTip, TEXT ("TrayIcon"));
ShowWindow(hwnd, SW_HIDE);
Shell_NotifyIcon(NIM_ADD, ¬e);//加到系统盘里
}
break;
case WM_DESTROY:
PostQuitMessage(0);
break;
case WM_SHELLNOTIFY:
if(wParam == IDI_TRAY)
{
if(lParam == WM_RBUTTONDOWN)
{
GetCursorPos(&pt);
SetForegroundWindow(hwnd);
TrackPopupMenu(hPopupMenu, TPM_RIGHTALIGN,pt.x,
pt.y,NULL, hwnd, NULL);
}
else if(lParam == WM_LBUTTONDBLCLK)
{
SendMessage(hwnd, WM_COMMAND, IDM_RESTORE,0);
}
}
break;
case WM_DEVICECHANGE:
switch (wParam)
{
case DBT_DEVICEARRIVAL: //设备插进来
if (GuardU)
{
Scan();
}
return 0;
}
break;
case WM_COMMAND:
hMenu = GetMenu (hwnd);
if(lParam == 0)
{
Shell_NotifyIcon(NIM_DELETE, ¬e);
if(LOWORD(wParam) == IDM_RESTORE)
{
ShowWindow(hwnd, SW_RESTORE);
}
}
switch (LOWORD (wParam))
{
case ID_MENUBUG:
MessageBox (NULL, TEXT ("QQ xxxxxxxxxxxx E-mail xxxxxxxxxxx Name 高鑫徒弟"),
TEXT ("欢迎您提交BUG!"), NULL) ;
return 0;
case ID_MENUVERSION:
DialogBox (hInstance, TEXT ("AboutBox"), hwnd, AboutDlgProc) ;
return 0;
case ID_MENUSETTING:
DialogBox (hInstance, TEXT ("Settings"), hwnd, AboutDlgProc2) ;
return 0;
case ID_MENUIADD:
DialogBox (hInstance, TEXT ("Md5List"), hwnd, AboutDlgProc3) ;
return 0;
case ID_ADD:
fpfile = fopen ("List.ini", "a");
RtlZeroMemory(szName, sizeof(szName));
RtlZeroMemory(&NewFile, sizeof(NewFile));
NewFile.lStructSize = sizeof(NewFile);
NewFile.hwndOwner = hwnd;
NewFile.lpstrFile = szName;
NewFile.lpstrFilter = FilterFile;
NewFile.nMaxFile = sizeof(szName);
NewFile.Flags = (OFN_FILEMUSTEXIST | OFN_PATHMUSTEXIST);
if(GetOpenFileName( & NewFile) == FALSE)
{
return 0;
}
if (MD5_CAL(szName, FALSE) == 0)
{
MessageBox(NULL, TEXT("MD5计算错误!"), NULL, MB_OK);
fclose(fpfile);
return 0;
}
if (fpfile == NULL)
{
MessageBox(NULL, TEXT("资源文件操作错误!"), NULL, MB_OK);
fclose(fpfile);
return 0;
}
fputs ("\n", fpfile);
fputs (MD5_CurrentFile, fpfile);
fclose (fpfile);
MessageBox(NULL, MD5_CurrentFile, TEXT("手动入库"), MB_OK);
return 0;
case ID_CALMD5:
RtlZeroMemory(szName, sizeof(szName));
RtlZeroMemory(&NewFile, sizeof(NewFile));
NewFile.lStructSize = sizeof(NewFile);
NewFile.hwndOwner = hwnd;
NewFile.lpstrFile = szName;
NewFile.lpstrFilter = FilterFile;
NewFile.nMaxFile = sizeof(szName);
NewFile.Flags = (OFN_FILEMUSTEXIST | OFN_PATHMUSTEXIST);
EditPrintf (hwndEdit, TEXT ("请导入文件.....\n"));
if(GetOpenFileName( & NewFile) == TRUE)
{
EditPrintf (hwndEdit, TEXT ("您选择了 %s\n"), szName);
}
else
{
return FALSE;
}
if((hFile = CreateFile(szName, GENERIC_READ, FILE_SHARE_READ,
NULL, OPEN_EXISTING, NULL, NULL)) == INVALID_HANDLE_VALUE)
{
EditPrintf (hwndEdit, TEXT ("获取文件句柄失败!\n"));
CloseHandle(hFile);
return FALSE;
}
EditPrintf (hwndEdit, TEXT ("文件大小FileSize:%dByte\n"),
GetFileSize(hFile, NULL));
CloseHandle(hFile);
//MD5
if ((i = MD5_CAL (szName, TRUE)) == 0)
{
EditPrintf (hwndEdit, TEXT ("\n MD5计算错误Error!"));
return FALSE;
}
else if (i == 1)
{
fpfile = fopen ("Filemd5.txt", "r");
if (fpfile == NULL)
{
EditPrintf (hwndEdit, TEXT ("\n 文件指针NULL!"));
fclose(fpfile);
return FALSE;
}
if (fseek (fpfile, 9, SEEK_SET) == -1)
{
EditPrintf (hwndEdit, TEXT ("\n 文件指针错误!"));
fclose(fpfile);
return FALSE;
}
if (fgets(Md5, 33, fpfile) == NULL)
{
EditPrintf (hwndEdit, TEXT ("\n 文件指针错误!"));
fclose(fpfile);
return FALSE;
}
EditPrintf (hwndEdit, TEXT ("该文件的MD5值为:%s\n"), Md5);
EditPrintf (hwndEdit,
TEXT ("将%s文件的MD5值保存在Filemd5.txt上\n\n"), szName);
fclose(fpfile);//引用fgets的char数组时不应先fclose指针
}
return 0;
}
}
return DefWindowProc (hwnd, message, wParam, lParam) ;
}
BOOL CALLBACK AboutDlgProc (HWND hDlg, UINT message,
WPARAM wParam, LPARAM lParam)
{
switch (message)
{
case WM_INITDIALOG :
return TRUE ;
case WM_COMMAND :
switch (LOWORD (wParam))
{
case IDOK :
case IDCANCEL :
EndDialog (hDlg, 0) ;
return TRUE ;
}
break ;
}
return FALSE ;
}
BOOL CALLBACK AboutDlgProc2 (HWND hDlg, UINT message,
WPARAM wParam, LPARAM lParam)
{
switch (message)
{
case WM_INITDIALOG :
CheckRadioButton (hDlg, IDC_CHECK1, IDC_CHECK3, IDC_CHECK1) ;
return TRUE ;
case WM_COMMAND :
switch (LOWORD (wParam))
{
case IDOK2:
EndDialog (hDlg, TRUE) ;
return TRUE ;
case IDCANCEL2:
EndDialog (hDlg, FALSE) ;
return TRUE ;
case IDC_CHECK1:
MessageBox (NULL, TEXT ("亲,此选项不可改动哦!"),
TEXT ("设置"), NULL) ;
CheckRadioButton (hDlg, IDC_CHECK1, IDC_CHECK3, IDC_CHECK1) ;
return TRUE;
}
break ;
}
return FALSE ;
}
BOOL CALLBACK AboutDlgProc3 (HWND hDlg, UINT message,
WPARAM wParam, LPARAM lParam)
{
char buffer[33];
HWND hwndEdit2;
FILE * fp;
hwndEdit2 = GetDlgItem (hDlg, IDC_EDITMD5);
switch (message)
{
case WM_COMMAND :
switch (LOWORD (wParam))
{
case IDOK3:
GetWindowText(hwndEdit2, buffer, 33);
fp = fopen ("List.ini", "a");
if (fp == NULL)
{
MessageBox(NULL, TEXT("资源文件操作错误!"), NULL, MB_OK);
return FALSE;
}
fputs ("\n", fp);
fputs (buffer, fp);
fclose(fp);
EndDialog (hDlg, TRUE) ;
return TRUE ;
case IDCANCEL3:
EndDialog (hDlg, FALSE) ;
return TRUE ;
}
break ;
}
return FALSE ;
}
BOOL CALLBACK AboutDlgProc4 (HWND hDlg, UINT message,
WPARAM wParam, LPARAM lParam)
{
switch (message)
{
case WM_INITDIALOG :
return TRUE ;
case WM_LBUTTONDOWN :
EndDialog (hDlg, FALSE) ;
break ;
}
return FALSE ;
}
BOOL CALLBACK MainDlg (HWND hwnd, UINT message, WPARAM wParam, LPARAM lParam)
{
static char szName[1024];
static bool ifscanon = FALSE;
static int j = 0, guard = 1;
int i;
switch (message)
{
case WM_INITDIALOG:
hwndEdit = GetDlgItem (hwnd, IDC_EDIT);
EditPrintf (hwndEdit, TEXT ("************************************欢迎使用本菜的小工具**********************************\n"));
EditPrintf (hwndEdit, TEXT ("*****************************菜鸟上路请各位大神多多指教哈*****************************\n"));
EditPrintf (hwndEdit, TEXT ("**********************静默保护:最小化窗口或点击后台保护按钮*********************\n"));
return TRUE ;
case WM_COMMAND:
switch (LOWORD (wParam))
{
case IDC_QUIT:
DestroyWindow (GetParent (hwnd)) ;
return TRUE ;
case IDC_GUARD:
if (guard % 2 == 0)
{hen
SetDlgItemText(hwnd, IDC_GUARD, TEXT("关闭监控\n"));
EditPrintf (hwndEdit, TEXT ("监控已经开启!\n"));
GuardU = TRUE;
}
else
{
SetDlgItemText(hwnd, IDC_GUARD, TEXT("开启监控"));
EditPrintf (hwndEdit, TEXT ("监控已经关闭!\n"));
GuardU = FALSE;
}
guard++;
return TRUE;
case IDC_F:
DialogBox (hInstance, TEXT ("Help"), hwnd, AboutDlgProc4) ;
return TRUE;
case IDC_SCAN:
if (ifscanon)
{
for (i = 0; i < 3; i++)
{
EditPrintf (hwndEdit, TEXT ("正在扫描中,请勿重复点击...\n"));
return FALSE;
}
}
ifscanon = TRUE;
Scan();
ifscanon = FALSE;
return TRUE ;
}
}
return FALSE;
}
int find(char * lpPath, int LoadReturn, char * files)
{
char szFind[MAX_PATH], szPath[MAX_PATH];//,szFile[MAX_PATH]
WIN32_FIND_DATA FindFileData;
HANDLE hFind;
strcpy(szPath, lpPath);
strcpy(szFind, lpPath);
strcat(szFind, files);
hFind=FindFirstFile(szFind, &FindFileData);
if(INVALID_HANDLE_VALUE == hFind)
{
return 0;
}
while(TRUE)
{
EditPrintf (hwndEdit, TEXT ("扫描%s中...\n"), strcat(szPath, FindFileData.cFileName));
ScanFile(szPath, LoadReturn);
memset(szPath, '\0', strlen(szPath));
strcpy(szPath, lpPath);
if(!FindNextFile(hFind,&FindFileData))
{
break;
}
}
FindClose(hFind);
return 1;
}
int ScanFile(char * filePath, int ListNumber)
{
HANDLE hFile;
FILE * fp;
int i = 0, j, FileSize;
fp = fopen ("List.ini", "r");
fseek(fp, 0L, 0);
if (fp == NULL)
{
EditPrintf (hwndEdit, TEXT ("读取资源失败!\n"));
fclose(fp);
return 0; //fail
}
else
{
Filetotal ++;
if((hFile = CreateFile(filePath, GENERIC_READ, FILE_SHARE_READ,
NULL, OPEN_EXISTING, NULL, NULL)) == INVALID_HANDLE_VALUE)
{
EditPrintf (hwndEdit, TEXT ("获取文件句柄失败!\n"));
fclose(fp);
CloseHandle(hFile);
return 0; //fail
}
if ((FileSize = GetFileSize(hFile, NULL)) >= 6000000)
{
EditPrintf (hwndEdit, TEXT ("%s文件过大(%d)Byte 跳过扫描\n"), filePath, FileSize);
fclose(fp);
CloseHandle(hFile);
return 3;
}
MD5_CAL(filePath, FALSE);
EditPrintf (hwndEdit, TEXT ("该文件的MD5为%s\n"), MD5_CurrentFile);
while(i < ListNumber)
{
i++;
if (fgets(MD5, 33, fp) == NULL)
{
EditPrintf (hwndEdit, TEXT ("读取资源失败!\n"));
fclose(fp);
CloseHandle(hFile);
return 0; //fail
}
if (fseek (fp, 2L, SEEK_CUR) == -1)
{
EditPrintf (hwndEdit, TEXT ("读取资源失败!\n"));
fclose(fp);
CloseHandle(hFile);
return 0; //fail
}
EditPrintf (hwndEdit, TEXT ("比对特征值MD5:%s\n"), MD5);
//文件的MD5 与ListNumber个MD5比对
//如果文件过大,则不予扫描 (5M)
//比对MD5
for(j = 0; j < 32; j++)
{
if (MD5[j] == MD5_CurrentFile[j])
{
if(j == 31)
{
CloseHandle(hFile);
EditPrintf (hwndEdit, TEXT ("扫描出%s为病毒文件!\n"), filePath);
Virustotal++;
//清除机制
if (CleanFile(filePath) == TRUE)
{
EditPrintf (hwndEdit, TEXT ("%s病毒文件已删除!\n"), filePath);
VirusClear++;
}
else
{
EditPrintf (hwndEdit, TEXT ("%s病毒文件删除失败!\n"), filePath);
}
return 4;
}
}
else
{
break;
}
}
}
CloseHandle(hFile);
fclose (fp);
}
return 1;
}
int LoadList()
{
HANDLE hFile;
int i;
if((hFile = CreateFile("list.ini", GENERIC_READ, FILE_SHARE_READ,
NULL, OPEN_EXISTING, NULL, NULL)) == INVALID_HANDLE_VALUE)
{
return -1;
}
i = GetFileSize(hFile, NULL) / 32;
CloseHandle(hFile);
return i;
}
int CleanFile(char * filePath)
{
char autorun[16];
strcpy(autorun, rw);
strcpy(autorun, "autorun.inf");
DeleteFile(autorun);
return DeleteFile(filePath);
}
int Scan()
{
int i = 0, j, k;
char rw2, U[MAXUDRIVE], rw3[12] = {"A"};
FILE * fpfile;
EditPrintf (hwndEdit, TEXT ("获取U盘相关信息,请稍后...\n"));
for(rw2 = 'A'; rw2 <= 'Z'; rw2++)
{
rw[0] = rw2;
if(GetDriveType((LPCTSTR) strcat(rw, ":\\") ) == DRIVE_REMOVABLE)
{
EditPrintf (hwndEdit, TEXT ("检测到U盘,盘符为%c:\\\n"), rw2);
U[i++] = rw2;
}
memset (rw, 0, strlen( rw ));
}
U[ i ] = '\0';
EditPrintf (hwndEdit, TEXT ("您的电脑共有%d个可移动磁盘\n"), strlen( U ));
EditPrintf (hwndEdit, TEXT ("正在验证可移动磁盘有效性...\n"));
for (j = 0; j < i; j++)
{
rw3[0] = U[j];
strcat (rw3, ":\\logU.log");
fpfile = fopen (rw3, "wb");
if (fpfile == NULL)
{
EditPrintf (hwndEdit, TEXT ("可移动磁盘%c无效\n"), U[j]);
}
else
{
fclose (fpfile);
DeleteFile (rw3);
EditPrintf (hwndEdit, TEXT ("可移动磁盘%c有效\n\n"), U[j]);
EditPrintf (hwndEdit, TEXT ("准备扫描%c:\\ 扫描方式:快速扫描\n\n"), U[j]);
rw[0] = U[j];
k = LoadList();
if (k == -1)
{
EditPrintf (hwndEdit, TEXT ("加载资源失败!\n"));
return FALSE;
}
else if (k > 0)
{
EditPrintf (hwndEdit, TEXT ("加载资源成功,可通过特征查杀%d\n"), k);
//Scan*******************************
find(strcat(rw, ":\\"), k, "*.dll");
find(rw, k, "*.exe");
find(rw, k, "*.com");
find(rw, k, "*.scr");
//ScanEnd****************************
}
}
memset (rw3, 0, strlen( rw3 ));
}
EditPrintf (hwndEdit, TEXT ("扫描完成,共扫描了%d个文件!\n"), Filetotal);
if (Filetotal)
{
EditPrintf (hwndEdit, TEXT ("发现%d个文件为病毒文件!\n"), Virustotal);
}
if (Virustotal)
{
EditPrintf (hwndEdit, TEXT ("删除了%d个病毒文件!\n"), VirusClear);
}
Filetotal = 0;
Virustotal = 0;
return 0;
}
GetMd5.cpp md5算法是百度的
#include<stdio.h>
#include<string.h>
#include<stdlib.h>
#define F(x, y, z) (((x) & (y)) | ((~x) & (z)))
#define G(x, y, z) (((x) & (z)) | ((y) & (~z)))
#define H(x, y, z) ((x) ^ (y) ^ (z))
#define I(x, y, z) ((y) ^ ((x) | (~z)))
#define RL(x, y) (((x) << (y)) | ((x) >> (32 - (y)))) //x向左循环移y位
#define PP(x) (x<<24)|((x<<8)&0xff0000)|((x>>8)&0xff00)|(x>>24) //将x高低位互换,例如PP(aabbccdd)=ddccbbaa
#define FF(a, b, c, d, x, s, ac) a = b + (RL((a + F(b,c,d) + x + ac),s))
#define GG(a, b, c, d, x, s, ac) a = b + (RL((a + G(b,c,d) + x + ac),s))
#define HH(a, b, c, d, x, s, ac) a = b + (RL((a + H(b,c,d) + x + ac),s))
#define II(a, b, c, d, x, s, ac) a = b + (RL((a + I(b,c,d) + x + ac),s))
unsigned A,B,C,D,a,b,c,d,i,len,flen[2],x[16]; //i临时变量,len文件长,flen[2]为64位二进制表示的文件初始长度
char MD5_CurrentFile[32];
char filename[200]; //文件名
FILE *fp;
void md5(){ //MD5核心算法,供64轮
a=A,b=B,c=C,d=D;
/**//* Round 1 */
FF (a, b, c, d, x[ 0], 7, 0xd76aa478); /**//* 1 */
FF (d, a, b, c, x[ 1], 12, 0xe8c7b756); /**//* 2 */
FF (c, d, a, b, x[ 2], 17, 0x242070db); /**//* 3 */
FF (b, c, d, a, x[ 3], 22, 0xc1bdceee); /**//* 4 */
FF (a, b, c, d, x[ 4], 7, 0xf57c0faf); /**//* 5 */
FF (d, a, b, c, x[ 5], 12, 0x4787c62a); /**//* 6 */
FF (c, d, a, b, x[ 6], 17, 0xa8304613); /**//* 7 */
FF (b, c, d, a, x[ 7], 22, 0xfd469501); /**//* 8 */
FF (a, b, c, d, x[ 8], 7, 0x698098d8); /**//* 9 */
FF (d, a, b, c, x[ 9], 12, 0x8b44f7af); /**//* 10 */
FF (c, d, a, b, x[10], 17, 0xffff5bb1); /**//* 11 */
FF (b, c, d, a, x[11], 22, 0x895cd7be); /**//* 12 */
FF (a, b, c, d, x[12], 7, 0x6b901122); /**//* 13 */
FF (d, a, b, c, x[13], 12, 0xfd987193); /**//* 14 */
FF (c, d, a, b, x[14], 17, 0xa679438e); /**//* 15 */
FF (b, c, d, a, x[15], 22, 0x49b40821); /**//* 16 */
/**//* Round 2 */
GG (a, b, c, d, x[ 1], 5, 0xf61e2562); /**//* 17 */
GG (d, a, b, c, x[ 6], 9, 0xc040b340); /**//* 18 */
GG (c, d, a, b, x[11], 14, 0x265e5a51); /**//* 19 */
GG (b, c, d, a, x[ 0], 20, 0xe9b6c7aa); /**//* 20 */
GG (a, b, c, d, x[ 5], 5, 0xd62f105d); /**//* 21 */
GG (d, a, b, c, x[10], 9, 0x02441453); /**//* 22 */
GG (c, d, a, b, x[15], 14, 0xd8a1e681); /**//* 23 */
GG (b, c, d, a, x[ 4], 20, 0xe7d3fbc8); /**//* 24 */
GG (a, b, c, d, x[ 9], 5, 0x21e1cde6); /**//* 25 */
GG (d, a, b, c, x[14], 9, 0xc33707d6); /**//* 26 */
GG (c, d, a, b, x[ 3], 14, 0xf4d50d87); /**//* 27 */
GG (b, c, d, a, x[ 8], 20, 0x455a14ed); /**//* 28 */
GG (a, b, c, d, x[13], 5, 0xa9e3e905); /**//* 29 */
GG (d, a, b, c, x[ 2], 9, 0xfcefa3f8); /**//* 30 */
GG (c, d, a, b, x[ 7], 14, 0x676f02d9); /**//* 31 */
GG (b, c, d, a, x[12], 20, 0x8d2a4c8a); /**//* 32 */
/**//* Round 3 */
HH (a, b, c, d, x[ 5], 4, 0xfffa3942); /**//* 33 */
HH (d, a, b, c, x[ 8], 11, 0x8771f681); /**//* 34 */
HH (c, d, a, b, x[11], 16, 0x6d9d6122); /**//* 35 */
HH (b, c, d, a, x[14], 23, 0xfde5380c); /**//* 36 */
HH (a, b, c, d, x[ 1], 4, 0xa4beea44); /**//* 37 */
HH (d, a, b, c, x[ 4], 11, 0x4bdecfa9); /**//* 38 */
HH (c, d, a, b, x[ 7], 16, 0xf6bb4b60); /**//* 39 */
HH (b, c, d, a, x[10], 23, 0xbebfbc70); /**//* 40 */
HH (a, b, c, d, x[13], 4, 0x289b7ec6); /**//* 41 */
HH (d, a, b, c, x[ 0], 11, 0xeaa127fa); /**//* 42 */
HH (c, d, a, b, x[ 3], 16, 0xd4ef3085); /**//* 43 */
HH (b, c, d, a, x[ 6], 23, 0x04881d05); /**//* 44 */
HH (a, b, c, d, x[ 9], 4, 0xd9d4d039); /**//* 45 */
HH (d, a, b, c, x[12], 11, 0xe6db99e5); /**//* 46 */
HH (c, d, a, b, x[15], 16, 0x1fa27cf8); /**//* 47 */
HH (b, c, d, a, x[ 2], 23, 0xc4ac5665); /**//* 48 */
/**//* Round 4 */
II (a, b, c, d, x[ 0], 6, 0xf4292244); /**//* 49 */
II (d, a, b, c, x[ 7], 10, 0x432aff97); /**//* 50 */
II (c, d, a, b, x[14], 15, 0xab9423a7); /**//* 51 */
II (b, c, d, a, x[ 5], 21, 0xfc93a039); /**//* 52 */
II (a, b, c, d, x[12], 6, 0x655b59c3); /**//* 53 */
II (d, a, b, c, x[ 3], 10, 0x8f0ccc92); /**//* 54 */
II (c, d, a, b, x[10], 15, 0xffeff47d); /**//* 55 */
II (b, c, d, a, x[ 1], 21, 0x85845dd1); /**//* 56 */
II (a, b, c, d, x[ 8], 6, 0x6fa87e4f); /**//* 57 */
II (d, a, b, c, x[15], 10, 0xfe2ce6e0); /**//* 58 */
II (c, d, a, b, x[ 6], 15, 0xa3014314); /**//* 59 */
II (b, c, d, a, x[13], 21, 0x4e0811a1); /**//* 60 */
II (a, b, c, d, x[ 4], 6, 0xf7537e82); /**//* 61 */
II (d, a, b, c, x[11], 10, 0xbd3af235); /**//* 62 */
II (c, d, a, b, x[ 2], 15, 0x2ad7d2bb); /**//* 63 */
II (b, c, d, a, x[ 9], 21, 0xeb86d391); /**//* 64 */
A += a;
B += b;
C += c;
D += d;
}
int MD5_CAL(char * filename, bool write)
{
if (!(fp = fopen(filename, "rb")))
{
fclose(fp);
return 0;
} //以二进制打开文件
if (fseek(fp, 0, SEEK_END) == -1)
{
fclose(fp);
return 0;
} //文件指针转到文件末尾
if((len = ftell(fp)) == -1)
{
fclose(fp);
return 0;
} //ftell函数返回long,最大为2GB,超出返回-1
rewind(fp);
//文件指针复位到文件头
A = 0x67452301, B = 0xefcdab89, C = 0x98badcfe, D = 0x10325476; //初始化链接变量
flen[1] = len/0x20000000; //flen单位是bit
flen[0] = (len%0x20000000)*8;
memset(x, 0, 64); //初始化x数组为0
fread(&x, 4, 16, fp); //以4字节为一组,读取16组数据
for(i = 0;i < len / 64; i++)
{ //循环运算直至文件结束
md5();
memset(x, 0, 64);
fread(&x, 4, 16, fp);
}
( (char*) x) [len % 64] = 128; //文件结束补1,补0操作,128二进制即10000000
if(len % 64 > 55) md5(), memset(x,0,64);
memcpy(x+14, flen, 8); //文件末尾加入原文件的bit长度
md5();
fclose(fp);
if (write == 1)
{
fp = fopen( "Filemd5.txt", "w" );
fprintf(fp, "MD5 Code:%08x%08x%08x%08x\n", PP(A), PP(B), PP(C), PP(D)); //高低位逆反输出
fclose(fp);
}
if (write == 0)
{
sprintf(MD5_CurrentFile, "%08x%08x%08x%08x", PP(A), PP(B), PP(C), PP(D));
}
return 1;
}
print.h
void EditPrintf (HWND hwndEdit, TCHAR * szFormat, ...)
{
TCHAR szBuffer [1024] ;
va_list pArgList ;
va_start (pArgList, szFormat) ;
wvsprintf (szBuffer, szFormat, pArgList) ;
va_end (pArgList) ;
SendMessage (hwndEdit, EM_SETSEL, (WPARAM) -1, (LPARAM) -1) ;
SendMessage (hwndEdit, EM_REPLACESEL, FALSE, (LPARAM) szBuffer) ;
SendMessage (hwndEdit, EM_SCROLLCARET, 0, 0) ;
}
Uscan.rc
//Microsoft Developer Studio generated resource script.
//
#include "resource.h"
#define APSTUDIO_READONLY_SYMBOLS
/
//
// Generated from the TEXTINCLUDE 2 resource.
//
#include "afxres.h"
/
#undef APSTUDIO_READONLY_SYMBOLS
/
// Chinese (中国) resources
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_CHS)
#ifdef _WIN32
LANGUAGE LANG_CHINESE, SUBLANG_CHINESE_SIMPLIFIED
#pragma code_page(936)
#endif //_WIN32
/
//
// Dialog
//
USCAN DIALOG DISCARDABLE 0, 0, 299, 169
STYLE WS_CHILD
FONT 8, "MS Sans Serif"
BEGIN
DEFPUSHBUTTON "关闭监控",IDC_GUARD,81,135,62,14
DEFPUSHBUTTON "关闭程序",IDC_QUIT,229,135,53,14
DEFPUSHBUTTON "扫描U盘",IDC_SCAN,8,135,61,14
EDITTEXT IDC_EDIT,7,5,285,127,ES_MULTILINE | ES_AUTOVSCROLL |
ES_READONLY | WS_VSCROLL | NOT WS_TABSTOP
DEFPUSHBUTTON "功能简介",IDC_F,156,135,61,14
END
ABOUTBOX DIALOG DISCARDABLE 0, 0, 85, 37
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "About"
FONT 10, "System"
BEGIN
DEFPUSHBUTTON "OK",IDOK,18,18,46,12
LTEXT "For study SDK",IDC_STATIC,18,7,48,8
END
SETTINGS DIALOG DISCARDABLE 0, 0, 187, 98
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "设置"
FONT 10, "System"
BEGIN
DEFPUSHBUTTON "确定",IDOK2,25,77,50,14
PUSHBUTTON "取消",IDCANCEL2,88,77,50,14
CONTROL "启用本地特征扫描",IDC_CHECK1,"Button",BS_AUTOCHECKBOX |
WS_TABSTOP,13,8,127,15
CONTROL "启用启发式扫描",IDC_CHECK2,"Button",BS_AUTOCHECKBOX |
WS_DISABLED | WS_TABSTOP,13,20,127,15
CONTROL "启用云扫描",IDC_CHECK3,"Button",BS_AUTOCHECKBOX |
WS_DISABLED | WS_TABSTOP,13,33,127,15
END
MD5LIST DIALOG DISCARDABLE 0, 0, 196, 75
STYLE DS_MODALFRAME | WS_POPUP
FONT 10, "System"
BEGIN
DEFPUSHBUTTON "确定",IDOK3,7,54,50,14
PUSHBUTTON "取消",IDCANCEL3,139,54,50,14
EDITTEXT IDC_EDITMD5,7,21,182,12,ES_AUTOHSCROLL
LTEXT "请键入MD5值",IDC_STATIC,9,9,48,8
END
HELP DIALOG DISCARDABLE 0, 0, 187, 57
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "功能简介"
FONT 10, "System"
BEGIN
GROUPBOX "U盘小工具",IDC_STATIC,7,7,173,43
LTEXT "这是一个U盘小工具,提供了基础的监控和查杀功能,您还可以手动添加特征库。",
IDC_STATIC,15,17,156,17
LTEXT "按任意键退出",IDC_STATIC,60,38,49,8
END
/
//
// DESIGNINFO
//
#ifdef APSTUDIO_INVOKED
GUIDELINES DESIGNINFO DISCARDABLE
BEGIN
"USCAN", DIALOG
BEGIN
LEFTMARGIN, 7
RIGHTMARGIN, 292
TOPMARGIN, 7
BOTTOMMARGIN, 162
HORZGUIDE, 109
END
"ABOUTBOX", DIALOG
BEGIN
LEFTMARGIN, 7
RIGHTMARGIN, 78
TOPMARGIN, 7
BOTTOMMARGIN, 30
END
"SETTINGS", DIALOG
BEGIN
LEFTMARGIN, 7
RIGHTMARGIN, 180
TOPMARGIN, 7
BOTTOMMARGIN, 91
END
"MD5LIST", DIALOG
BEGIN
LEFTMARGIN, 7
RIGHTMARGIN, 189
TOPMARGIN, 7
BOTTOMMARGIN, 68
END
"HELP", DIALOG
BEGIN
LEFTMARGIN, 7
RIGHTMARGIN, 180
TOPMARGIN, 7
BOTTOMMARGIN, 50
END
END
#endif // APSTUDIO_INVOKED
#ifdef APSTUDIO_INVOKED
/
//
// TEXTINCLUDE
//
1 TEXTINCLUDE DISCARDABLE
BEGIN
"resource.h\0"
END
2 TEXTINCLUDE DISCARDABLE
BEGIN
"#include ""afxres.h""\r\n"
"\0"
END
3 TEXTINCLUDE DISCARDABLE
BEGIN
"\r\n"
"\0"
END
#endif // APSTUDIO_INVOKED
/
//
// Menu
//
IDR_MENU MENU DISCARDABLE
BEGIN
MENUITEM "", 65535
POPUP "&关于"
BEGIN
MENUITEM "&版本", ID_MENUVERSION
MENUITEM "&提交BUG", ID_MENUBUG
END
POPUP "&设置"
BEGIN
MENUITEM " &综合设置", ID_MENUSETTING
MENUITEM " &增加MD5库", ID_MENUIADD
MENUITEM "&添加该文件至病毒库", ID_ADD
END
POPUP "&小工具"
BEGIN
MENUITEM "&计算文件MD5及大小", ID_CALMD5
END
END
#endif // Chinese (中国) resources
/
/
// English (U.S.) resources
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENU)
#ifdef _WIN32
LANGUAGE LANG_ENGLISH, SUBLANG_ENGLISH_US
#pragma code_page(1252)
#endif //_WIN32
/
//
// Icon
//
// Icon with lowest ID value placed first to ensure application icon
// remains consistent on all systems.
UScan ICON DISCARDABLE "UScan.ico"
#endif // English (U.S.) resources
/
#ifndef APSTUDIO_INVOKED
/
//
// Generated from the TEXTINCLUDE 3 resource.
//
/
#endif // not APSTUDIO_INVOKED
菜鸟出品。。。必属菜品。。。