Windows的关机和重起

/*第六节 Windows的关机和重起很多木马都有远程关机功能,但这并不是一个很好的功能.不过对于入侵服务器,有时需要重起服务器.其实对于关机和重起,只需要调用几个API函数即可实现.对于WIN9X系统,可以直接调用,对于WIN2K以上,出于安全考虑,稍有不同,下面分别看一下.9X系统:ExitWindowsEx(EWX_LOGOFF,0);     //注销ExitWindowsEx(EWX_REBOOT,0);     //重启ExitWindowsEx(EWX_SHUTDOWN,0);   //关机在程序中直接调用即可.2K以上系统:*/#include <stdio.h>#include <windows.h>BOOL MySystemShutdown(){HANDLE hToken; TOKEN_PRIVILEGES tkp; // Get a token for this process. if (!OpenProcessToken(GetCurrentProcess(), TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken)) return( FALSE ); // Get the LUID for the shutdown privilege. LookupPrivilegeValue(NULL, SE_SHUTDOWN_NAME, &tkp.Privileges[0].Luid); tkp.PrivilegeCount = 1;  // one privilege to set    tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED; // Get the shutdown privilege for this process. AdjustTokenPrivileges(hToken, FALSE, &tkp, 0, (PTOKEN_PRIVILEGES)NULL, 0); if (GetLastError() != ERROR_SUCCESS) return FALSE; // Shut down the system and force all applications to close. if (!ExitWindowsEx(EWX_SHUTDOWN | EWX_FORCE, SHTDN_REASON_MAJOR_OPERATINGSYSTEM |SHTDN_REASON_FLAG_PLANNED)) return FALSE; return TRUE;}void MySystemShutdown2(){HANDLE hToken;TOKEN_PRIVILEGES tkp;OSVERSIONINFO osvi;osvi.dwOSVersionInfoSize = sizeof(OSVERSIONINFO);                               // 取得系统版本if (GetVersionEx(&osvi) == 0)return false;if (osvi.dwPlatformId == VER_PLATFORM_WIN32_NT){// Windows NT 3.51, Windows NT 4.0, Windows 2000,// Windows XP,  Windows .NET Serverif (!OpenProcessToken(GetCurrentProcess(),TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken))//打开当前进程访问代号return false;LookupPrivilegeValue(NULL, SE_SHUTDOWN_NAME, &tkp.Privileges[0].Luid);//获取本地唯一标识用于在特定系统中设置权限tkp.PrivilegeCount = 1;tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;AdjustTokenPrivileges(hToken, FALSE, &tkp, 0, (PTOKEN_PRIVILEGES)NULL, 0);//提升访问令牌权限}ExitWindowsEx(EWX_FORCE, 0);//强制关机，不向进程发送WM_QUERYENDSESSION消息}int main(int argc, char* argv[]){MySystemShutdown();MySystemShutdown2();//存在问题}