回复: 你让我相信谁？
帖俩图看看
病毒的关键部分
要调用MoveFileEx重命名文件
看下面的图
返回值是0
参考MSDN
Return ValueIf the function succeeds, the return value is nonzero.
If the function fails, the return value is zero (0). To get extended error information, call
GetLastError.
返回是0 证明失败
后面的WinExeC
再看返回值
Return ValueIf the function succeeds, the return value is greater than 31.
If the function fails, the return value is one of the following error values.
| Return code/value | Description |
0
| The system is out of memory or resources.
|
ERROR_BAD_FORMAT
| The .exe file is invalid.
|
ERROR_FILE_NOT_FOUND
| The specified file was not found.
|
ERROR_PATH_NOT_FOUND
| The specified path was not found.
|
返回值为2 也就是
ERROR_FILE_NOT_FOUND
证明他干的活都是”徒劳“的 根本没有他要移动和执行的文件 所以这是个残废的病毒 需要那几个文件配合才有用
