Exe自杀

1. //http://hi.baidu.com/zxhouse
3. #include <windows.h>   
4.   
5. BOOL DeleteMyself(WCHAR *pHelper)   
6. {   
7.     int ret;   
8.      WCHAR helper[MAX_PATH];   
9.      ZeroMemory(helper, sizeof(helper));   
10.     if (pHelper)   
11.          wcsncpy(helper, pHelper, MAX_PATH-2);   
12.     else  
13.          wcscpy(helper, L"calc.exe");   
14.        
15.      STARTUPINFOW si = {sizeof(STARTUPINFOW),0};   
16.      PROCESS_INFORMATION pi;   
17.        
18.      HANDLE hSYNC = OpenProcess(SYNCHRONIZE, TRUE, GetCurrentProcessId());   
19.        
20.     if (CreateProcessW(NULL, helper, 0, 0, TRUE, CREATE_SUSPENDED, 0, 0, &si, &pi))   
21.      {   
22.          CONTEXT ctx = {CONTEXT_FULL,0};   
23.          ret = GetThreadContext(pi.hThread, &ctx);   
24.            
25.          WCHAR MyselfPath[MAX_PATH];   
26.         int nPathLen = GetModuleFileNameW(NULL, MyselfPath, MAX_PATH);   
27.            
28.          struct StackContext   
29.          {   
30.              DWORD_PTR DeleteFileW;   
31.              DWORD_PTR WaitForSingleObject_argv1;   
32.              DWORD_PTR WaitForSingleObject_argv2;   
33.              DWORD_PTR ExitProcess;   
34.              DWORD_PTR DeleteFileW_argv1;   
35.              DWORD_PTR shit;   
36.              DWORD_PTR ExitProcess_argv1;   
37.          }stackctx;   
38.            
39.          HMODULE hKernel32 = GetModuleHandleW(L"Kernel32.dll");   
40.            
41.          ctx.Eip = (DWORD_PTR)GetProcAddress(hKernel32, "WaitForSingleObject");   
42.          ctx.Esp = (DWORD_PTR)VirtualAllocEx(pi.hProcess, 0, 512*1024, MEM_COMMIT, PAGE_EXECUTE_READWRITE);   
43.          ctx.Esp += 256*1024;   
44.          stackctx.DeleteFileW = (DWORD_PTR)GetProcAddress(hKernel32, "DeleteFileW");   
45.          stackctx.WaitForSingleObject_argv1 = (DWORD_PTR)hSYNC;   
46.          stackctx.WaitForSingleObject_argv2 = (DWORD_PTR)-1;   
47.          stackctx.ExitProcess = (DWORD_PTR)GetProcAddress(hKernel32, "ExitProcess");   
48.          stackctx.DeleteFileW_argv1 = (DWORD_PTR)VirtualAllocEx(pi.hProcess, 0, (nPathLen+1)*sizeof(WCHAR), MEM_COMMIT, PAGE_EXECUTE_READWRITE);   
49.          ret = WriteProcessMemory(pi.hProcess, (LPVOID)stackctx.DeleteFileW_argv1, MyselfPath, (nPathLen+1)*sizeof(WCHAR), NULL);   
50.         if (!ret) return FALSE;   
51.            
52.          stackctx.shit = 0;   
53.          stackctx.ExitProcess_argv1 = 0;   
54.            
55.          ret = WriteProcessMemory(pi.hProcess, (LPVOID)(ctx.Esp), &stackctx, sizeof(stackctx), NULL);   
56.         if (!ret) return FALSE;   
57.            
58.          ret = SetThreadContext(pi.hThread, &ctx);   
59.         if (!ret) return FALSE;   
60.            
61.          ResumeThread(pi.hThread);   
62.          CloseHandle(pi.hThread);   
63.          CloseHandle(pi.hProcess);   
64.         return TRUE;   
65.      }else  
66.      {   
67.         return FALSE;   
68.      }   
69. }   
70.   
71.   
72. int main()   
73. {   
74.      DeleteMyself(0);   
75.     return 0;   
76. }   
77.   
78. //2000/xp/2003/vista 上已经测试通过