Simple anti-U disk virus (malformed folder that cannot be deleted)

DWORD WINAPI GetLogicalDriveStrings( //获取磁盘 _In_ DWORD nBufferLength, _Out_ LPTSTR lpBuffer );

 Fills a buffer with strings that specify valid drives in the system.

BOOL WINAPI CreateDirectory( _In_ LPCTSTR lpPathName, _In_opt_ LPSECURITY_ATTRIBUTES lpSecurityAttributes );  Creates a new directory. 

#include "stdafx.h" #include  void ImmuntiyAutoRun() { //建立无法删除的文件夹 char szDriverStr[MAXBYTE] = { 0 }; DWORD dwLen = GetLogicalDriveStringsA(MAXBYTE, szDriverStr); for (int i = 0; i < dwLen; i+=4) { char szRoot[4] = {}, szPath[MAX_PATH] = { 0 }; strncpy_s(szRoot, &szDriverStr[i], 4); strcpy_s(szPath, szRoot); strcat_s(szPath, "autorun.inf"); if (!CreateDirectoryA(szPath, nullptr)) printf_s("Error:%d", GetLastError()); strcat_s(szPath, "\\anti......\\"); if (!CreateDirectoryA(szPath, nullptr)) printf_s("Error:%d", GetLastError()); } } int _tmain(int argc, _TCHAR* argv[]) { ImmuntiyAutoRun(); getchar(); return 0; }

BOOL WINAPI RemoveDirectory( _In_ LPCTSTR lpPathName );