+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Anti TaskManager Kill By Mr.Wolf (/showthread.php?tid=4486586)
Pages: Pages
1
2
Anti TaskManager Kill By Mr.Wolf - gaiththewolf - Oct 12, 2014
Hi HF members :)
I Coded a VB.Net Class For ReRun an applications when killed by windows TaskManager
TuTo : How To Use
Download Progect In TuTo with Class [SRC]
Download
- Mr.Wolf -
* - +Haze - Oct 12, 2014
I must say that does look nice :). Hope it's not infected, though I won't be downloading.
* - gaiththewolf - Oct 12, 2014
(Oct 12, 2014 05:44 AM)+Haze Wrote: I must say that does look nice :). Hope it's not infected, though I won't be downloading.
Hi
The Download Is a Project Not an Executable File you can try it .
thanks
* - CottleSilver - Oct 12, 2014
Good code, the question now is how do you kill it without a pc restart?
* - Easi-- - Oct 12, 2014
Every trojan has single instance option checked (can be seen in My Project in Visual Studio)
So what is the difference to :
Code
Private Sub Form1_FormClosing(sender As Object, e As FormClosingEventArgs) Handles Me.FormClosing
Application.Restart()
End Sub?
* - +Haze - Oct 12, 2014
(Oct 12, 2014 06:25 AM)Easi-- Wrote: Every trojan has single instance option checked (can be seen in My Project in Visual Studio)
So what is the difference to :
CodePrivate Sub Form1_FormClosing(sender As Object, e As FormClosingEventArgs) Handles Me.FormClosing
Application.Restart()
End Sub
?
I think that code would only work if you were to close it by clicking the exit button on the form and not by closing it using the task manager.
* - gaiththewolf - Oct 12, 2014
(Oct 12, 2014 06:10 AM)CottleSilver Wrote: Good code, the question now is how do you kill it without a pc restart?
there are a solutions to kill It but I let the others To find the solution ✌
* - Easi-- - Oct 12, 2014
(Oct 12, 2014 06:29 AM)+Haze Wrote: I think that code would only work if you were to close it by clicking the exit button on the form and not by closing it using the task manager.
Try it. It also works if you kill the application via taskmanager.
* - Cornflower Blue இڿڰۣ-ڰۣ— - Oct 12, 2014
(Oct 12, 2014 06:29 AM)+Haze Wrote: I think that code would only work if you were to close it by clicking the exit button on the form and not by closing it using the task manager.
It does work, but only in Windows 8, and I think 8.1. I think this is a bug that they don't care about.
* - BerryP - Oct 12, 2014
Wont work for RATs and such... Because it would always have to restart the connection again. Its ok, but really not a good way.
Peace
* - SIM-1456245 - Oct 12, 2014
I have coded the same thing a long time ago, it's called Twin-Process persistence. It is theoretically good, but in practice not the best thing. Haven't seen the code, but if you are looping through the processes(getting by name) then the positive thing is that it doesn't require any kind of elevation, but if you are using strange API's, no profit, just use another method.
* - Bbgunman - Oct 12, 2014
Thank you for this I may use this if that is ok?
* - Zeivu~ - Oct 12, 2014
Yeah this is really nice i will be adding
it this to my Crypter
* - skResolver - Oct 12, 2014
Nice idea, it will be more funny to use loop start on it + add new registry to regedit for automatic start-up.
* - Easi-- - Oct 13, 2014
Does not work for me (Win 8.1 , x64)..