Welcome Guest ( Log In | Register )



4 Pages V   1 2 3 > »   
Reply to this topicStart new topic
> Disable Task Manager 1 Line Code![vb6]
master_nero
post Mar 23 2007, 06:50 AM
Post #1


Newbie [ Level 2 ]
Group Icon

Group: Members
Posts: 15
Joined: 23-March 07
Member No.: 21,033



In VB programing.
Just put in form load or a command button
A = Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f", vbNormalFocus)
Go to the top of the page
 
+Quote Post
Jimmy89
post Mar 23 2007, 08:23 AM
Post #2


Living at the Datacenter
Group Icon

Group: [HOSTED]
Posts: 696
Joined: 30-June 06
From: Australia
Member No.: 14,219



thats some good code, but its just the same as going to
QUOTE
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

and adding the value DisableTaskManager with a value of 1

also, it might be good to add the code to re-enable the task manager in case you actually want to use it! if i understood the code correctly;
CODE
A = Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f", vbNormalFocus)

then this code should re-enable it!

happy coding
-jimmy

This post has been edited by Jimmy89: Mar 23 2007, 08:23 AM
Go to the top of the page
 
+Quote Post
lowbreed
post Oct 18 2007, 03:19 PM
Post #3


Newbie [ Level 1 ]
Group Icon

Group: Members
Posts: 3
Joined: 18-October 07
Member No.: 25,585



Here's another solution for winXP & VB6

sub command1_click()
x.hideMyProcess
end sub


That's it!
Your process in now invisible. Gone!
It doesn't matter if the bad guy presses CTRL ALT DEL. Your program won't show up in task manager process list.
Bye bye END TASK !

Yeah, it's free at
www.winPadlock.uni.cc
www.winPadlock.co.nr
Go to the top of the page
 
+Quote Post
ethergeek
post Oct 18 2007, 04:51 PM
Post #4


Premium Member
Group Icon

Group: [HOSTED]
Posts: 393
Joined: 9-March 07
From: Tucson, AZ
Member No.: 20,794



Yeah...programs that do crap like this are obnoxious. Don't hide your application from the task manager...what use is it to have a task that you need to go into the scheduler's thread table to kill when it malfunctions? Using this trash is just bad coding practice and shows a complete and utter disregard for your users.

This post has been edited by ethergeek: Oct 18 2007, 04:51 PM
Go to the top of the page
 
+Quote Post
Jeigh
post Oct 18 2007, 07:53 PM
Post #5


Whitest Black Mage
Group Icon

Group: [MODERATOR]
Posts: 1,352
Joined: 20-May 05
From: NB, Canada
Member No.: 5,281



Agreed, hiding processes, reg editing especially, etc is just vile without user permission. If you want to feel all tough go pick on a baby or something and leave the end users alone haha, they are the people who pay programmers to do what they do tongue.gif

But yea, I wouldn't recommend doing this ever, just make programs that don't crash so people never need to look for the process in the task list wink.gif
Go to the top of the page
 
+Quote Post
vizskywalker
post Oct 18 2007, 08:53 PM
Post #6


Techno-Necromancer
Group Icon

Group: Members
Posts: 1,018
Joined: 13-January 05
From: The Net
Member No.: 2,127



Assuming someone adds the code to hide their process from task manager, what's the easiest way to identify the process and kill it. Because hiding the process is something I know many viruses do, and I would like to be able to track them down easily, if possible.

~Viz
Go to the top of the page
 
+Quote Post
ethergeek
post Oct 18 2007, 10:49 PM
Post #7


Premium Member
Group Icon

Group: [HOSTED]
Posts: 393
Joined: 9-March 07
From: Tucson, AZ
Member No.: 20,794



QUOTE(vizskywalker @ Oct 18 2007, 01:53 PM) *
Assuming someone adds the code to hide their process from task manager, what's the easiest way to identify the process and kill it. Because hiding the process is something I know many viruses do, and I would like to be able to track them down easily, if possible.

~Viz


The easiest way to do it is just enumerate all the threads on the scheduler...find threads that aren't owned by a process and suspend them, kill them, or look at their file handles and see what they're up to.
Go to the top of the page
 
+Quote Post
Chesso
post Oct 19 2007, 08:36 AM
Post #8


Teh Coder
Group Icon

Group: Members
Posts: 1,053
Joined: 18-April 06
From: Australia
Member No.: 12,833



I made my own code in Object Pascal, that hides my application from everything and renders taskman utterly useless, it is still there but it's shut down so fast every time it is run (and so is msconfig, among others) that it is impossible to close the application, remove it from start-up (due to how it is made) or do anything to it.

At least not without a third party task manager to kill the process.

Although my application isn't malicious (and I have taken some measure to insure it can't really be used as such), it's basically a key logging application, however it is built to recognise custom keystroke combinations (words actually), so you could trigger some basic events, or automatic internal logging of when certain words, phrases etc are typed anywhere from the keyboard input.

This means you could catch out someone on your computer from typing certain "naughty words" or know if they are visiting "undesirable" websites etc.

Anyway, once I get my old custom components back up, I can re-open the project and start work again and refresh my memory as to how I did it, someone might find it useful, the good thing is, while it would be difficult for the average user to stop it, with my particular combination, if you get a third part task manager, it can be taken care of quite easily.
Go to the top of the page
 
+Quote Post
ethergeek
post Oct 19 2007, 03:47 PM
Post #9


Premium Member
Group Icon

Group: [HOSTED]
Posts: 393
Joined: 9-March 07
From: Tucson, AZ
Member No.: 20,794



QUOTE(Chesso @ Oct 19 2007, 01:36 AM) *
I made my own code in Object Pascal, that hides my application from everything and renders taskman utterly useless, it is still there but it's shut down so fast every time it is run (and so is msconfig, among others) that it is impossible to close the application, remove it from start-up (due to how it is made) or do anything to it.

At least not without a third party task manager to kill the process.

Although my application isn't malicious (and I have taken some measure to insure it can't really be used as such), it's basically a key logging application, however it is built to recognise custom keystroke combinations (words actually), so you could trigger some basic events, or automatic internal logging of when certain words, phrases etc are typed anywhere from the keyboard input.

This means you could catch out someone on your computer from typing certain "naughty words" or know if they are visiting "undesirable" websites etc.

Anyway, once I get my old custom components back up, I can re-open the project and start work again and refresh my memory as to how I did it, someone might find it useful, the good thing is, while it would be difficult for the average user to stop it, with my particular combination, if you get a third part task manager, it can be taken care of quite easily.


The fact that people can do inane **** like this...is exactly why I use Mac and Linux. An application running as a non-root user should *never* have edit access to things like the process table (which is basically how these apps work).
Go to the top of the page
 
+Quote Post
vizskywalker
post Oct 19 2007, 04:51 PM
Post #10


Techno-Necromancer
Group Icon

Group: Members
Posts: 1,018
Joined: 13-January 05
From: The Net
Member No.: 2,127



Correct me if I'm wrong, but non root users can run pgrep and ps, can't they? Those access the process table. And then they can use kill to modify that table. Besides, I'm not sure if these apps are modifying the process table, because I'm not sure information regarding which processes show up in TaskManager is really stored in the process table itself.

~Viz
Go to the top of the page
 
+Quote Post

4 Pages V   1 2 3 > » 
Fast ReplyReply to this topicStart new topic

Collapse

> Similar Topics

Topics Topics
  1. Microsoft's security program manager...(5)
  2. Hackers Publish Code For Critical Ie Bug(0)
  3. Microsoft Xmlhttp Activex Control Code Execution Vulnerability(0)
  4. phpBB avatar_path PHP Code Execution Vulnerability(3)
  5. Winzip ActiveX Control Remote Code Execution Vulnerability(2)


 



- Lo-Fi Version Time is now: 7th October 2008 - 12:59 AM