检查U盘自动删除当前打开U盘内cad病毒

zlg258369

在论坛上看到查杀cad病毒的程序多为手动查杀，现写了个自动删除的！！

1. 
   
2. 
   
3.     Private Declare Function GetWindowText Lib "user32" Alias "GetWindowTextA" (ByVal hwnd As IntPtr, ByVal lpString As String, ByVal cch As Integer) As Integer
   
4.     Private Declare Function GetWindowTextLength Lib "user32" Alias "GetWindowTextLengthA" (ByVal hwnd As IntPtr) As Integer
   
5.     Private Declare Function GetForegroundWindow Lib "user32" () As Integer
   
6. 
   
7.     Public Const WM_DEVICECHANGE = &H219
   
8.     Public Const DBT_DEVICEARRIVAL = &H8000
   
9.     Public Const DBT_DEVICEREMOVECOMPLETE = &H8004
   
10.     Dim DriveLetter As String
    
11. 
    
12.     Protected Overrides Sub WndProc(ByRef m As System.Windows.Forms.Message)
    
13.         If m.Msg = WM_DEVICECHANGE Then
    
14.             Select Case m.WParam
    
15.                 Case DBT_DEVICEARRIVAL
    
16.                     Dim s() As DriveInfo = DriveInfo.GetDrives
    
17.                     For Each drive As DriveInfo In s
    
18.                         If drive.DriveType = DriveType.Removable Then
    
19.                             DriveLetter = drive.Name.ToString()
    
20.                             Timer1.Enabled = True
    
21.                         End If
    
22.                     Next
    
23.                 Case DBT_DEVICEREMOVECOMPLETE
    
24.                     Dim s() As DriveInfo = DriveInfo.GetDrives
    
25.                     For Each drive As DriveInfo In s
    
26.                         If drive.ToString = DriveLetter Then Exit Sub
    
27.                     Next
    
28.                     Timer1.Enabled = False
    
29.             End Select
    
30.         End If
    
31.         MyBase.WndProc(m)
    
32.     End Sub
    
33. 
    
34.     Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick
    
35.         Dim hdl As New IntPtr(GetForegroundWindow)
    
36.         Dim strTitle As String = Space(GetWindowTextLength(hdl) + 1)
    
37.         GetWindowText(hdl, strTitle, strTitle.Length)
    
38.         If Left(strTitle, 3) = DriveLetter Then
    
39.             File.Delete(strTitle& "\ACAD.LSP")
    
40.         End If
    
41.     End Sub
    
42. 
    

<br /> <br />     Private Declare Function GetWindowText Lib "user32" Alias "GetWindowTextA" (ByVal hwnd As IntPtr, ByVal lpString As String, ByVal cch As Integer) As Integer<br />     Private Declare Function GetWindowTextLength Lib "user32" Alias "GetWindowTextLengthA" (ByVal hwnd As IntPtr) As Integer<br />     Private Declare Function GetForegroundWindow Lib "user32" () As Integer<br /> <br />     Public Const WM_DEVICECHANGE = &H219<br />     Public Const DBT_DEVICEARRIVAL = &H8000<br />     Public Const DBT_DEVICEREMOVECOMPLETE = &H8004<br />     Dim DriveLetter As String<br /> <br />     Protected Overrides Sub WndProc(ByRef m As System.Windows.Forms.Message)<br />         If m.Msg = WM_DEVICECHANGE Then<br />             Select Case m.WParam<br />                 Case DBT_DEVICEARRIVAL<br />                     Dim s() As DriveInfo = DriveInfo.GetDrives<br />                     For Each drive As DriveInfo In s<br />                         If drive.DriveType = DriveType.Removable Then<br />                             DriveLetter = drive.Name.ToString()<br />                             Timer1.Enabled = True<br />                         End If<br />                     Next<br />                 Case DBT_DEVICEREMOVECOMPLETE<br />                     Dim s() As DriveInfo = DriveInfo.GetDrives<br />                     For Each drive As DriveInfo In s<br />                         If drive.ToString = DriveLetter Then Exit Sub<br />                     Next<br />                     Timer1.Enabled = False<br />             End Select<br />         End If<br />         MyBase.WndProc(m)<br />     End Sub<br /> <br />     Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick<br />         Dim hdl As New IntPtr(GetForegroundWindow) <br />         Dim strTitle As String = Space(GetWindowTextLength(hdl) + 1) <br />         GetWindowText(hdl, strTitle, strTitle.Length) <br />         If Left(strTitle, 3) = DriveLetter Then<br />             File.Delete(strTitle& "\ACAD.LSP")<br />         End If<br />     End Sub<br /> <br />

上面是一个简单的例子，可以根据需要自己修改，我觉得用做成服务最好。

AMTONNY

多谢楼主分享