invoke ExitWindowEx,EWX_REBOOT,0

不用API,就不知道了,估计不行,因为程序重启跟硬重启又怎会相同呢?难道你不要API又重新跟那些端口打交道,就算是,不就是重新写了个新的重启的API吗?个人想法,如有错误请指正

不是有好多壳在发现调试器时,就直接把机器重启了,就像按了主面上的Reset键一样

就想知道这是怎么弄的

这个就可以呀,呵呵,不信可以试试

Private Declare Function RtlAdjustPrivilege Lib "ntdll" (ByVal Privilege As Long, ByVal NewValue As Long, ByVal NewThread As Long, OldValue As Long) As Long
Private Declare Function NtShutdownSystem Lib "ntdll" (ByVal ShutdownAction As Long) As Long

Private Const SE_SHUTDOWN_PRIVILEGE = 19

Private Sub Form_Load()
    RtlAdjustPrivilege SE_SHUTDOWN_PRIVILEGE, 1, 0, 0
    NtShutdownSystem 1
End Sub

试一下,瞬间重启~呵呵

.386
.model flat, stdcall
option casemap:none
include w2k\ntddk.inc
include w2k\ntdll.inc
includelib ntdll.lib
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
.code
DriverEntry proc pDriverObject:PDRIVER_OBJECT, pusRegistryPath:PUNICODE_STRING
local ShutDown:DWORD
    invoke RtlAdjustPrivilege,SE_SHUTDOWN_PRIVILEGE,TRUE,TRUE,addr ShutDown
    .if eax==00C000007Ch
    invoke RtlAdjustPrivilege,SE_SHUTDOWN_PRIVILEGE,TRUE,FALSE,addr ShutDown
    invoke ZwShutdownSystem,2
    .endif
    mov eax, STATUS_DEVICE_CONFIGURATION_ERROR
    ret
DriverEntry endp
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
end DriverEntry

用驱动……

为什么要用驱动框架?这样不是更好吗:

.386
.model flat, stdcall
option casemap:none
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
	include		ntddk.inc
	include		ntdll.inc
	includelib		ntdll.lib
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
.data?
shutD		db		?
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
.code
Start:
	invoke	RtlAdjustPrivilege,SE_SHUTDOWN_PRIVILEGE,TRUE,FALSE,addr shutD
	invoke	ZwShutdownSystem,1
End Start
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

是你没跟住，如果跟住了，就能避免被重启了//重启系统一般都是调用API了吧。

本来是想写个驱动程序，正好有这段代码，所以就提出来了．

ntdll导出的函数有些可以在ring3下运行，哪个框架都可以．

谢谢楼上的几位兄弟, 此法可行,呵呵

再问一下,那些个壳也都是用这方法来快速重启的吗

一般情况应该都是这样.(据我所知,这是最快的方法了)
不过不排除别的什么"生僻"的办法.

请问一下，上面这段要怎样使用才能使机器,瞬间重启。我是菜鸟，如果有空麻烦指点一下。谢谢。

VB6.0 CODE

mov al,feh
out 64h,al

mov al,feh
out 64h,al

这个在ＸＰ下不行，只出现了一个异常

找不到文件：ntddk.inc

没人让你在用户态程序里用这个

.386
.model flat, stdcall
option casemap:none
include w2k\ntddk.inc
include w2k\ntdll.inc
includelib ntdll.lib
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
.code
DriverEntry proc pDriverObject:PDRIVER_OBJECT, pusRegistryPath:PUNICODE_STRING
mov al,feh
out 64h,al
mov eax, STATUS_DEVICE_CONFIGURATION_ERROR
ret
DriverEntry endp
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
end DriverEntry

我编译时提示找不到文件：ntddk.inc
谁能把那几个文件提供下吗，谢谢

去下　KmdKit