Description: 1, in the main program the requested copies of the program to the system disk \ windows \ directory and renamed taskmgr.exe, while the second copy to the system drive \ windows \ system32 directory and renamed explorer.exe. To confuse the users first determine the virus. 2, the program process of the establishment of two windows, each process checks each clock cycle, another process is running. If there are pop-up dialog box " I' m still here!" , If there is no start another process and the pop-up dialog box " I' m still here!" . 3, the two-virus program will copy a good start to the registry key. (Oftware \ \ microsoft \ \ windows \ \ currentversion \ \ run). Each clock is running when the program should add this information to the registry.
To Search:
File list (Check if you may need any files):
源文件\VirtualVirus\process is alive.txt
......\............\Psapi.h
......\............\ScheduledTask.h
......\............\ScheduledTask.cpp
......\............\WinMain.cpp
......\............\Release\VirtualVirus.exe
......\............\Debug\VirtualVirus.exe
......\............\.....\ScheduledTask.obj
......\............\.....\WinMain.obj
......\............\Psapi.Lib
......\............\Debug\VirtualVirus.bsc
......\............\VirtualVirus.dsp
......\............\VirtualVirus.dsw
......\............\Debug\vc60.idb
......\............\.....\VirtualVirus.ilk
......\............\VirtualVirus.ncb
......\............\VirtualVirus.opt
......\............\Debug\vc60.pdb
......\............\VirtualVirus.plg
......\............\Debug\ScheduledTask.sbr
......\............\.....\WinMain.sbr
......\............\VirtualVirus.sln
......\............\VirtualVirus.suo
......\............\VirtualVirus.vcproj.fn123-PC.fn123.user
......\............\VirtualVirus.vcproj
......\............\Debug
......\............\Release
......\VirtualVirus
源文件
Download