[gaiththewolf]

Hi HF members :)

I Coded a VB.Net Class For ReRun an applications when killed by windows TaskManager

TuTo : How To Use





Download Progect In TuTo with Class [SRC]

Download

- Mr.Wolf -

[+Haze]

I must say that does look nice :). Hope it's not infected, though I won't be downloading.

[gaiththewolf]

I must say that does look nice :). Hope it's not infected, though I won't be downloading.

Hi

The Download Is a Project Not an Executable File you can try it .

thanks

[CottleSilver]

Good code, the question now is how do you kill it without a pc restart?

[Easi--]

Every trojan has single instance option checked (can be seen in My Project in Visual Studio)

So what is the difference to :

Code

Private Sub Form1_FormClosing(sender As Object, e As FormClosingEventArgs) Handles Me.FormClosing
      Application.Restart()
    End Sub

?

[+Haze]

Every trojan has single instance option checked (can be seen in My Project in Visual Studio)

So what is the difference to :

Code

Private Sub Form1_FormClosing(sender As Object, e As FormClosingEventArgs) Handles Me.FormClosing
      Application.Restart()
    End Sub

?

I think that code would only work if you were to close it by clicking the exit button on the form and not by closing it using the task manager.

[gaiththewolf]

Good code, the question now is how do you kill it without a pc restart?

there are a solutions to kill It but I let the others To find the solution ✌

[Easi--]

I think that code would only work if you were to close it by clicking the exit button on the form and not by closing it using the task manager.

Try it. It also works if you kill the application via taskmanager.

[Cornflower Blue இڿڰۣ-ڰۣ—]

I think that code would only work if you were to close it by clicking the exit button on the form and not by closing it using the task manager.

It does work, but only in Windows 8, and I think 8.1. I think this is a bug that they don't care about.

[BerryP]

Wont work for RATs and such... Because it would always have to restart the connection again. Its ok, but really not a good way.

Peace

[SIM-1456245]

I have coded the same thing a long time ago, it's called Twin-Process persistence. It is theoretically good, but in practice not the best thing. Haven't seen the code, but if you are looping through the processes(getting by name) then the positive thing is that it doesn't require any kind of elevation, but if you are using strange API's, no profit, just use another method.

[Bbgunman]

Thank you for this I may use this if that is ok?

[Zeivu~]

Yeah this is really nice i will be adding
it this to my Crypter

[skResolver]

Nice idea, it will be more funny to use loop start on it + add new registry to regedit for automatic start-up.

[Easi--]

Does not work for me (Win 8.1 , x64)..