CWUB v1.13.3.1627

ʹã
1ȻȱĶ˵ĵ
2֧֣QQ2009QQ2010QQ2011TM2009QQʰ档
3ѹѹλãcwub.exeɡԶѰQQװλòҽ
4㲻ʹcwub.exeʽʹmsimg32мء(뿴¼2)
5ҪܶʾϢҼò˵á

Ҫܣ
1ػԱʹñͿѻŲ壬繦һŲʹã
2ˡѡһЩĲȻԼٸĽ(֧ɾ)
3ڴͷءÿ60һڴ档ͷֻпأûвѡ
4Э롣򲻱֤ͬʱҶҲݡ
5ʾͻˡߺֱӻãҪܻá
6ʾԷIPҪͼƬļƵȲܻȡ
7ศСܣʹ÷֡

֪
1ֻΪȤû޸QQκļ
2ŵ񣬾ӯͬʱҲ֤ʹá
3cwubʲôʲôҲǣʱֹ(㣬QQʵ䷭)
4ʮָлmorningָԼλѵ֧֡лδעexeͼꡣ
5汾Ŷã汾.ΰ汾.°汾.ʱ䡣
6IPַѯʹѯ+زѯݿQQWry.datأcwub.dllĿ¼¡
7ʺʹϰߣǿҽĶ޸iniļ
8һõĵַ*ʾ𣬲ҳᾡˢ¡

¼
1־
2طʽ
3ڱ
4ο
5Žӿ

ҵѶ΢http://t.qq.com/lovexh ӭ


------------------------------------------------------------------------
¼һ ־

1.13
1ŻϸڡԼִ
2޸ݿȼ
3޸Timwp.exeȹ޷

1.12
1QQɨӲ̣ϣȻҲǿѡģ޸ļ
2߲鿴ͼ˵Ҳ㻹Ҫֶĵ
3ӳʾԻʾʱ䵽5
4Ⱥ޷ͼ(lkou&ͯ)
5ģʽʱϢֱлʾⳤʱȴ
6iniṹ˼ѡŻϸ
72011ϵУȥߵУ
8ѯܹܾѯʧ
9ִ͸ƣ鿴ļ˵ֶѯIP

1.11
1Զ建Ŀ¼ûжʱʹҵĵĿ¼
2رò˵ʱҼֱӸϸϢ
3ḻ˵Ŀڳ
4һǿѯܣԶḻϢ
5Ӵ˰汾ʼʹVMPӿǣԸЩ
6Żϸڣͣʾȡһȫֹӣⱨ
7QQ2010 SP3.1ŻԶ̬/ͣò汾ֻ̬ܶأ̬ܶͣ
8ԶճʱϢٵԻ򣬽ֱճ촰
9ŻЧȥ½档ϻʾϢ

1.10
1޸ʱỰʾϢ
2ѯGETύķʽ
3δߺδõַ޸ΪԶ
4Ӵڹϵͳ
5ϸ΢iniļṹעԱ
6ɿ汾α죬˻İ汾Ϣ(ͯо)

1.09
1ڽ˱ڲʾϢBug֧2010ϵУ
2󴰿ģʽйر
3޸IP.exeʧBug
4ӰɫΪɫͬ
5Żò˵ʾ
6޸ַض

1.08
1Զ塢ɫ
2Ļ浽Ŀ¼㲻ͬ汾QQ
3IPַѯ(ʹñݿ)iniļ
4޸缫ʱѯַ³Ĵ
5Żѯʧܺ²ѯ
6ѯƽ
7⻺ļбɾ

1.07
1IPַ棬IPIPο
2ڲ˵ӸϢ
3ԻʱƣǱջ棬*
4޸ܴ
5˫ģʽ־ж
6ٴθIPѯ룬ϣ׼ȷҹCZ88.NETַ

1.06
1޸òܱĴ
2ʾøϸԶ
3ϣʾIPڵأ
4ԱQQWry.Datļcwub.dllͬһĿ¼
5޸ѯݿⲻȷĴ

1.05
1ʾЧwin7ϵø
2ò˵ҼʾĿͻ
3Эصȼ

1.04
1֧͸ģʽʾͻ
2һԴͷ
3Զʾ깦ܣ޸ʧȥBug
4һּطʽ
5ĳͼ꣬ʶ

1.03
1ŻLoader·ķʽӱĿ¼ѰQQ.exe
2ŻLoader򿪽ǰԽ·
3LoaderӵʵУ
4ŻDllʾͻ߼

1.02
1ŻѵĿͻ˵ķʽ
2ŻʱĻÿͻ
3LoaderΪԱУܴעȡQQλ

1.01
1촰ʾͻ
2ͻ˰汾ŸıΪFineIPĸʽ

1.00
1ʵֻܣػԱ
3ӼܣЭ
2DBGģʽʾͻ



------------------------------------------------------------------------
¼ طʽ

ʹexeʽÿμʱcwub.exe
QQʱֱӼCWUBôļBinĿ¼£
(*ŵǱļ)

*cwub.dllҪģ
*cwub.iniļ
*msimg32.dll Ѿдõģ飬ֻʹṩ
QQWry.DatIPݿ⣬

ȻQQ.exeԶʹáûأٴμǷװȷ


------------------------------------------------------------------------
¼ ڱ

Ѿ֪CWUBΪһٸҡ

4

1ҪʹCWUB
2жɱ
3ȥɱٷύ󱨣CWUBǲȻϼ꣬ҲCWUBͲǲ
4ɱųܣ԰CWUBӵųб

ǹĲǻˣô


------------------------------------------------------------------------
¼ ο£

ַȺ

http://www.yonsm.net/read.php?170
http://lysoft.g4soft.net/article.asp?id=44
http://blog.donews.com/zwell/archive/2004/08/31/84513.aspx
http://bbs.pediy.com/showthread.php?threadid=26765
http://forum.ubuntu.org.cn/viewtopic.php?t=103231
http://www.codeproject.com/KB/threads/completeinject.aspx
http://bbs.pediy.com/showthread.php?t=78418
http://code.google.com/p/myqq3/
http://wenku.baidu.com/view/b581f2c30c22590102029d84.html
http://www.lovecns.com/post/702/

C/C++ԼһЩ֪ʶЩºҲдһCWUB
ûʲôģһǰҲʲôᣡ


------------------------------------------------------------------------
¼ Žӿڣ

´ʾmsimg32.dllμcwub.dll

HINSTANCE m_hModule=LoadLibrary("cwub.dll");
if (m_hModule!=NULL)
{
FARPROC fpAddress = GetProcAddress( m_hModule,"Loader");
if (fpAddress != NULL)
{
typedef void (__cdecl * MYLOADER) (void);
((MYLOADER)fpAddress)();
}
}


ù߸ΪCwubConfig.exeڲ˵Զѡ

