Now some small software, control the Update method is generally HTTP read file, determine whether the read text is equal to the version number
Or to determine the QQ nickname, network nickname and so on.
above has its own shortcomings, here is recommended a DNS control software updates the backdoor, anti-DDoS.
#include <Winsock2.h> #include <Urlmon.h> #pragma comment (lib, "Urlmon.lib") #pragma comment (lib, "ws2_32. Lib ") int main () {int err = 0;char szip[100] = {0};char strserver[100] = {0}; WORD wversionrequested = 0; Wsadata wsadata = {0};struct hostent* phe = null;strcpy (strserver, "www.baidu.com"); wversionrequested = Makeword (a); 0x0101 WSAStartup (wversionrequested,&wsadata); PHE = gethostbyname (strserver), if (NULL! = PHE) {char * * ppaddr = phe->h_addr_list; for (; *ppaddr! = NULL;pp addr + +) {
strcpy (Szip,inet_ntoa (* (LPIN_ADDR) * (PPADDR));//printf ("%s\n", Szip);}} WSACleanup (); if (strcmp (Szip, "1.0.3.1")//can write software version number own play { :: MessageBox (NULL, "Detected update", "", MB_OK); ShellExecute (NULL, "open", "http://www.baidu.com/gengxin.asp", null,null,sw_show); ExitProcess (0);} return 0;}
DNS backdoor code, permanent anti-attack