一个简单AutoRun病毒专杀的源代码

#include <iostream.h>
#include <windows.h>

BOOL DELU()
{
        UINT        revtype;
        HANDLE        hFile;
        DWORD        dwread;
         int                j,n,q;
        BOOL        retu;
         char        buff[256];
         char        name[256] = "h:\\";
         char        sname[256] = "h:\\autorun.inf";
         for (BYTE i=0x41; i < 0x5b; i++)         //遍历所有盘符，从“A”到“Z”

        {
                name[0] = i;
                revtype = GetDriveType(name);         //取得盘符类型

                 if (DRIVE_REMOVABLE == revtype)         //如果是移动盘符

                {
                        sname[0] = name[0];                         //改变字符数组的第一个字母，也即盘符

                        SetFileAttributes(sname, FILE_ATTRIBUTE_NORMAL);         //设置autorun.inf文件属性为正常，方便删除

                        cout<< "找到移动设备，盘符为："<<name[0]<<endl;
                        hFile = CreateFile(sname,         //打开找到的autorun.inf文件

                                GENERIC_READ,    
                                FILE_SHARE_READ,    
                                NULL, OPEN_EXISTING,    
                                FILE_ATTRIBUTE_ARCHIVE,    
                                NULL);
                        ReadFile(hFile, &buff, strlen(buff), &dwread, NULL);         //读取autorun.inf文件的内容放到buff中

                        CloseHandle(hFile);
                        retu = DeleteFile(sname);
                         if (retu)
                        {
                                cout<< "autorun.inf文件已经删除成功！"<<endl;
                        }
                         for (j = 0; buff[j] >= 1 && buff[j] <= 122; j++)                 //截断放入到buff中的数据，得到inf文件内容

                        {

                         if (buff[j-3] == 'E' && buff[j-2] == 'X' && buff[j-1] == 'E')         //如果发现是EXE，就停下来，并且结束字符串

                                {
                                        buff[j] = 0x00;                 //0x00表示字符串结束标志

                                         break;
                                }
                        }
                        n = j;
                         while ((buff[n] != '=') && (n > 9))                 //从缓冲区后面开始找等号

                        {
                                n-=1;
                        }
                         for (j = n+1, q = 3; buff[j]; j++,q++)         //上面一个for和while实现了找出***完整路径，下面的把该路径赋值给name数组

                        {
                                name[q] = buff[j];
                        }
                        name[q] = 0x00;
                        SetFileAttributes(name, FILE_ATTRIBUTE_NORMAL);
                        retu = FALSE;
                        retu = DeleteFile(name);
                         if (retu)
                        {
                                cout<<name<< "文件已经删除!"<<endl;
                        }
                        cout<< "扫描结束!"<<endl;

                }
        }
         return true;
}

int main()
{
        cout<< "U盘病毒专杀！"<<endl;
        cout<< "-------by wiliwiin"<<endl;
        BOOL Bret;
        Bret = DELU();
         return 0;
}

转载于:https://blog.51cto.com/wiliiwin/222098