Windows的关机和重起

/*

第六节 Windows的关机和重起

很多木马都有远程关机功能,但这并不是一个很好的功能.不过对于入侵服务器,有时需要重起服务器.其实对于关机和重起,只需要调用几个
API函数即可实现.
对于WIN9X系统,可以直接调用,对于WIN2K以上,出于安全考虑,稍有不同,下面分别看一下.

9X系统:
ExitWindowsEx(EWX_LOGOFF,0);     //注销
ExitWindowsEx(EWX_REBOOT,0);     //重启
ExitWindowsEx(EWX_SHUTDOWN,0);   //关机

在程序中直接调用即可.

2K以上系统:
*/
#include <stdio.h>
#include <windows.h>
BOOL MySystemShutdown()
{
	HANDLE hToken; 
	TOKEN_PRIVILEGES tkp; 

	// Get a token for this process. 

	if (!OpenProcessToken(GetCurrentProcess(), 
		TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken)) 
		return( FALSE ); 

	// Get the LUID for the shutdown privilege. 

	LookupPrivilegeValue(NULL, SE_SHUTDOWN_NAME, 
		&tkp.Privileges[0].Luid); 

	tkp.PrivilegeCount = 1;  // one privilege to set    
	tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED; 

	// Get the shutdown privilege for this process. 

	AdjustTokenPrivileges(hToken, FALSE, &tkp, 0, 
		(PTOKEN_PRIVILEGES)NULL, 0); 

	if (GetLastError() != ERROR_SUCCESS) 
		return FALSE; 

	// Shut down the system and force all applications to close. 

	if (!ExitWindowsEx(EWX_SHUTDOWN | EWX_FORCE, 
		SHTDN_REASON_MAJOR_OPERATINGSYSTEM |
		SHTDN_REASON_FLAG_PLANNED)) 
		return FALSE; 

	return TRUE;
}


void MySystemShutdown2()
{
	HANDLE hToken;
	TOKEN_PRIVILEGES tkp;

	OSVERSIONINFO osvi;
	osvi.dwOSVersionInfoSize = sizeof(OSVERSIONINFO);                               // 取得系统版本

	if (GetVersionEx(&osvi) == 0)
		return false;


	if (osvi.dwPlatformId == VER_PLATFORM_WIN32_NT)
	{
		// Windows NT 3.51, Windows NT 4.0, Windows 2000,
		// Windows XP,  Windows .NET Server
		if (!OpenProcessToken(GetCurrentProcess(),
			TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken))
			//打开当前进程访问代号
			return false;

		LookupPrivilegeValue(NULL, SE_SHUTDOWN_NAME, &tkp.Privileges[0].Luid);
		//获取本地唯一标识用于在特定系统中设置权限

		tkp.PrivilegeCount = 1;
		tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;

		AdjustTokenPrivileges(hToken, FALSE, &tkp, 0, (PTOKEN_PRIVILEGES)NULL, 0);
		//提升访问令牌权限
	}

	ExitWindowsEx(EWX_FORCE, 0);//强制关机，不向进程发送WM_QUERYENDSESSION消息

}

int main(int argc, char* argv[])
{
	MySystemShutdown();
	MySystemShutdown2();//存在问题
}