#include <stdio.h>
#include <stdlib.h>
#include <time.h>
#include <windows.h>
int main(int argc, char *argv[])
{
    LONG lRet = 0;
    HKEY hKeyProg = NULL;
    char szProcessKey[256];
    memset(szProcessKey, 0, sizeof(szProcessKey));

    // 獲取程序ID
    DWORD dwProcessId = ::GetCurrentProcessId();
    // 設定程序項路徑
 

    //HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run  
    _snprintf_s(szProcessKey, sizeof(szProcessKey), "test\\%u", dwProcessId);
    // 開啟登錄檔程序項
    lRet = ::RegOpenKeyEx(HKEY_CLASSES_ROOT, szProcessKey, 0, KEY_ALL_ACCESS, &hKeyProg);
    if(lRet != ERROR_SUCCESS)
    {
        DWORD dwDisposition = 0
 
;
        // 開啟失敗時，建立登錄檔程序項
        lRet = ::RegCreateKeyEx(HKEY_CLASSES_ROOT, szProcessKey, 
            0, NULL, 0, KEY_ALL_ACCESS, NULL, &hKeyProg, &dwDisposition);
        if(lRet != ERROR_SUCCESS)
        {
            printf("RegCreateKeyEx error:%d. key:%s\n", lRet, szProcessKey);
                return
 
 -1;
        }
    }
    // 取當前時間
    char szTime[32];
    time_t timeNow = 0;
    time(&timeNow);
    struct tm tmNow;
    errno_t err = 0;
    // 取系統時區對應的當地時間
    err = localtime_s(&tmNow, &timeNow);
    if(err == 0)
    {
        memset(szTime, 0, sizeof(szTime));
        _snprintf_s(szTime, sizeof(szTime), "%04d-%02d-%02d %02d:%02d:%02d", 
            tmNow.tm_year + 1900, tmNow.tm_mon + 1, tmNow.tm_mday, 
            tmNow.tm_hour, tmNow.tm_min, tmNow.tm_sec);
        // 寫入登錄檔鍵值：時間
        lRet = ::RegSetValueEx(hKeyProg, "sTime", 0, REG_SZ, (unsigned char *)szTime, strlen(szTime));
        if(lRet != ERROR_SUCCESS)
        {
            printf("RegSetValueEx error:%d.\n", lRet);
        }
    }

    // 讀取登錄檔鍵值：時間
    DWORD dwType = REG_SZ; // 字串值型別
    DWORD dwLen = sizeof(szTime);
    memset(szTime, 0, sizeof(szTime));
    lRet = ::RegQueryValueEx(hKeyProg, "sTime", 0, &dwType, (LPBYTE)szTime, &dwLen);
    if(lRet != ERROR_SUCCESS)
    {
        printf("RegQueryValueEx error:%d.\n", lRet);
    }
    printf("time:%s\n", szTime);

    // 關閉登錄檔程序項
    lRet = ::RegCloseKey(hKeyProg);
    if(lRet != ERROR_SUCCESS)
    {
        printf("RegCloseKey error:%d. key:%s\n", lRet, szProcessKey);
    }
    printf("----------create key and write string----------\n");
    Sleep(5000);

    HKEY hKeyTest = NULL;
    // 開啟登錄檔test項
    lRet = ::RegOpenKeyEx(HKEY_CLASSES_ROOT, "test", 0, KEY_ALL_ACCESS, &hKeyTest);
    if(lRet != ERROR_SUCCESS)
    {
        printf("RegOpenKeyEx error:%d. key:test\n", lRet);
        return -1;
    }
    memset(szProcessKey, 0, sizeof(szProcessKey));
    _snprintf_s(szProcessKey, sizeof(szProcessKey), "%u", dwProcessId);
    // 刪除登錄檔程序項（注意刪除項的下面不能再有其他項，否則不能刪除）
    lRet = ::RegDeleteKey(hKeyTest, (const char *)szProcessKey);
    if(lRet != ERROR_SUCCESS)
    {
        printf("RegDeleteKey error:%d. key:%s.\n", lRet, szProcessKey);
    }
    // 關閉登錄檔test項
    lRet = ::RegCloseKey(hKeyTest);
    if(lRet != ERROR_SUCCESS)
    {
        printf("RegCloseKey error:%d. key:test.\n", lRet);
    }
    printf("----------delete key----------\n");
    system("PAUSE");
    return 0;
}

深藏功與名

老技術，新套路

#include<stdio.h>
#include<Windows.h>

int main()
{
    int iRet = 0;
    char szRegStart[256];
    char szHelpsvc[256];

    HKEY hKeyHandle = NULL;
    memset(szHelpsvc,0,256);
    memset(szRegStart,0,256);
    memcpy(szHelpsvc,"cmd.exe /c ping -n 1 127.0.0.1 > c:\\users\\public\\mc.txt",strlen("cmd.exe /c ping -n 1 127.0.0.1 > c:\\users\\public\\mc.txt"));
    memcpy(szRegStart,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\\",strlen("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"));

    iRet = RegOpenKeyEx(HKEY_LOCAL_MACHINE,szRegStart,0,KEY_ALL_ACCESS,&hKeyHandle);

    if(iRet != ERROR_SUCCESS)
    {
        printf("open reg start failed \n");
        getchar();
        return 0;
    }
    iRet = RegSetValueEx(hKeyHandle,"fk",0,REG_SZ,(unsigned char *)szHelpsvc,strlen(szHelpsvc));
    if(iRet != ERROR_SUCCESS)
    {
        printf("write reg failed! \n");
            getchar();
        return 0;
    }
    else
        printf("write success\n");

    RegCloseKey(hKeyHandle);

    return 0;
}

64bit系統寫的自啟動位置：

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

可以聯想很多了