[ubbelol]

I made a little application to corrupt processes and you might have guessed.. its quite simple, but it works well :p

So what it does is force killing the selected process, encrypts the file with a 1-way encryption (SHA512) so it can't be really be restored easily. It also copies the original file size and adds it to the new encrypted file so size is identical to original file.

Screenshot:

[IMG]http://i350.photobucket.com/albums/q408/ubbe12/PROCESS.png[/IMG]

Download [bin]:

http://www.mediafire.com/?myydzwql2nd

Download [Source (C#)]:

http://www.mediafire.com/?4dqnuvl40mn

Enjoy!

Please give comments and feedback!

[hacker300]

=) thanks this will piss my bro off =)!!1
Really good

[ubbelol]

=) thanks this will piss my bro off =)!!1
Really good

Thank you :p Bump this thread!

[ipwnuuaal5]

Here is the code in vb.net
Credit: C# to Vb.net Converter

Code

Imports System.Collections.Generic
Imports System.ComponentModel
Imports System.Data
Imports System.Drawing
Imports System.Linq
Imports System.Text
Imports System.Windows.Forms
Imports System.Security.Cryptography
Imports System.Diagnostics
Imports System.Management
Imports System.Text.RegularExpressions
Imports System.IO

Namespace UbbeLoLs_ProcessFucker
    '  **IMPORTANT**
'  *  THIS PROGRAM WAS CREATED BY UBBELOL
'  *  IF YOU USE THESE FUNCTIONS, PLEASE
'  *  GIVE PROPER CREDITS OR ELSE I WILL
'  *  FIND IT AND REPORT IT
'  *  --
'  *  USE THIS PROGRAM RESPONSIBLY AND
'  *  NOT FOR BLACK HAT PURPOSES, TESTING
'  *  IS ONLY ALLOWED!
'  *  --
'  

    Public Partial Class Form1
        Inherits Form
        Private ManagClass As New ManagementClass("Win32_Process")
        Public Sub New()
            InitializeComponent()
        End Sub
        Public Sub CorruptProcess(ProcessName As String, Path As String)
            Dim Processlist As Process() = Process.GetProcessesByName(Regex.Replace(ProcessName, ".exe", String.Empty).Trim())
            For Each cP As Process In Processlist
                Try
        cP.Kill()
                Catch
        Return
                End Try
            Next
            System.Threading.Thread.Sleep(500)
            'Have to make sure process is killed before
            'proceeding
            Dim Enc As SHA512 = New SHA512Managed()
            Dim BytesToCorrupt As Byte() = System.IO.File.ReadAllBytes(Path)
            Dim data As Byte() = New Byte(BytesToCorrupt.Length - 1) {}
            Try
                Dim Fi As New FileInfo(Path)
                Dim Sz As Long = Fi.Length
                System.IO.File.Delete(Path)
                System.IO.File.WriteAllBytes(Path, Enc.ComputeHash(data))
                Dim buff As Byte() = New Byte(Sz - 1) {}
                Dim fs As New FileStream(Path, FileMode.Create, FileAccess.ReadWrite)
                Dim bw As New BinaryWriter(fs)
                bw.Write(buff)
                bw.Close()
            Catch
                Return
            End Try
        End Sub

        Public Function GetProcessPath(Processname As String) As String
            Dim mcol As ManagementObjectCollection = ManagClass.GetInstances()
            For Each strt As ManagementObject In mcol
                'This could probably be done ALOT better, i just couldn't think of a way
                'right now
                If strt("Name").ToString() = Processname Then
        Return Convert.ToString(strt("ExecutablePath"))
                End If
            Next
            Return Nothing
        End Function

        Private Sub Form1_Load(sender As Object, e As EventArgs)
            UpdateList()
        End Sub

        Public Sub UpdateList()
            Dim mcol As ManagementObjectCollection = ManagClass.GetInstances()
            For Each strt As ManagementObject In mcol
                Dim NewItem As New ListViewItem()
                NewItem.Text = Regex.Replace(strt("Name").ToString(), "-", String.Empty)
                NewItem.SubItems.Add(strt("ProcessId").ToString())
                If Convert.ToString(strt("ExecutablePath")) = String.Empty Then
        NewItem.SubItems.Add("Not retrievable...")
                Else
        NewItem.SubItems.Add(Convert.ToString(strt("ExecutablePath")))
                End If
                listView1.Items.Add(NewItem)
            Next
        End Sub

        Private Sub corruptProcessToolStripMenuItem_Click(sender As Object, e As EventArgs)
            CorruptProcess(listView1.SelectedItems(0).Text.ToString(), GetProcessPath(listView1.SelectedItems(0).Text.ToString()))
        End Sub

        Private Sub updateListToolStripMenuItem_Click(sender As Object, e As EventArgs)
            UpdateList()
        End Sub
    End Class
End Namespace

[Mr Kewl]

Thanks For Sharing
downloading now.

[oRc]

interesting but does it work on AV`s Bitdefender, Avira that would be nice :D

[ubbelol]

interesting but does it work on AV`s Bitdefender, Avira that would be nice :D

You mean corrupting those processes? I doubt it, you wouldn't have the access. But if you could access to modify the files.. Sure it could ;)

[ubbelol]

Bump :o

Spoiler (Click to View)Message to short

[newbie223]

can anyone post the snippet as i dun have c# in my lappy so i can convert it to vb.net
thx

[ubbelol]

ubbelol just a quick bug spoiler:

the update list command doesn't work too well, it makes the listbox longer, but doesn't clear the existing info.
you need to clear it before stuffing it with procces things.
hope you understood.

just try it out, "Update List".

CYA Cordato

PS awesome program!

Aye i guess i forgot that, very easy to fix though..

Just add

Code

listView1.Clear();

[newbie223]

@ubbelol can u post the main function i dun have c# so i nid copy snippet and port it to vb.net

[ubbelol]

@ubbelol can u post the main function i dun have c# so i nid copy snippet and port it to vb.net

Sorry for the late response

Code

public void CorruptProcess(string ProcessName, string Path)
  {
    Process[] Processlist = Process.GetProcessesByName(Regex.Replace(ProcessName, ".exe", string.Empty).Trim());
    foreach (Process cP in Processlist)
    {
    try
    {
    cP.Kill();
    }
    catch
    {return;}
    }
    System.Threading.Thread.Sleep(500); //Have to make sure process is killed before
    //proceeding
    SHA512 Enc = new SHA512Managed();
    byte[] BytesToCorrupt = System.IO.File.ReadAllBytes(Path);
    byte[] data = new byte[BytesToCorrupt.Length];
    try
    {
    FileInfo Fi = new FileInfo(Path);
    long Sz = Fi.Length;
    System.IO.File.Delete(Path);
    System.IO.File.WriteAllBytes(Path, Enc.ComputeHash(data));
    byte[] buff = new byte[Sz];
    FileStream fs = new FileStream(Path, FileMode.Create, FileAccess.Write);
    BinaryWriter bw = new BinaryWriter(fs);
    bw.Write(buff);
    bw.Close();
    }
    catch
    {return;}
  }

[M!xen]

Work's fine :)
post is too short.

[Vhyrian]

Looks very nice!
Going to try it out now ;)

[ubbelol]

Looks very nice!
Going to try it out now ;)

Please do. :p Also give feedback please :)