Disable Task Manager 1 Line Code![vb6]

Pages: 1, 2, 3, 4
free web hosting

Read Latest Entries..: (Post #32) by iGuest on Jun 24 2008, 06:36 AM. (Line Breaks Removed)
close Process Disable Task Manager 1 Line Code![vb6] I just want to close an application or check weather it show in task manager if it is then I just want to not to open again by any other user This can be done in VB Mention API functions for it Which only close application or Process -reply by nilay21286... read more.
Read the FIRST post of this Topic. - Express your Opinion! Contribute Knowledge :-).

Free Web Hosting > Computers & Tech > Security issues & Exploits

Disable Task Manager 1 Line Code![vb6]

master_nero
In VB programing.
Just put in form load or a command button
A = Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f", vbNormalFocus)

Reply

Jimmy89
thats some good code, but its just the same as going to
QUOTE
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

and adding the value DisableTaskManager with a value of 1

also, it might be good to add the code to re-enable the task manager in case you actually want to use it! if i understood the code correctly;
CODE
A = Shell("REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f", vbNormalFocus)

then this code should re-enable it!

happy coding
-jimmy

Reply

lowbreed
Here's another solution for winXP & VB6

sub command1_click()
x.hideMyProcess
end sub


That's it!
Your process in now invisible. Gone!
It doesn't matter if the bad guy presses CTRL ALT DEL. Your program won't show up in task manager process list.
Bye bye END TASK !

Yeah, it's free at
www.winPadlock.uni.cc
www.winPadlock.co.nr

Reply

ethergeek
Yeah...programs that do crap like this are obnoxious. Don't hide your application from the task manager...what use is it to have a task that you need to go into the scheduler's thread table to kill when it malfunctions? Using this trash is just bad coding practice and shows a complete and utter disregard for your users.

Reply

Jeigh
Agreed, hiding processes, reg editing especially, etc is just vile without user permission. If you want to feel all tough go pick on a baby or something and leave the end users alone haha, they are the people who pay programmers to do what they do tongue.gif

But yea, I wouldn't recommend doing this ever, just make programs that don't crash so people never need to look for the process in the task list wink.gif

Reply

vizskywalker
Assuming someone adds the code to hide their process from task manager, what's the easiest way to identify the process and kill it. Because hiding the process is something I know many viruses do, and I would like to be able to track them down easily, if possible.

~Viz

Reply

ethergeek
QUOTE(vizskywalker @ Oct 18 2007, 01:53 PM) *
Assuming someone adds the code to hide their process from task manager, what's the easiest way to identify the process and kill it. Because hiding the process is something I know many viruses do, and I would like to be able to track them down easily, if possible.

~Viz


The easiest way to do it is just enumerate all the threads on the scheduler...find threads that aren't owned by a process and suspend them, kill them, or look at their file handles and see what they're up to.

Reply

Chesso
I made my own code in Object Pascal, that hides my application from everything and renders taskman utterly useless, it is still there but it's shut down so fast every time it is run (and so is msconfig, among others) that it is impossible to close the application, remove it from start-up (due to how it is made) or do anything to it.

At least not without a third party task manager to kill the process.

Although my application isn't malicious (and I have taken some measure to insure it can't really be used as such), it's basically a key logging application, however it is built to recognise custom keystroke combinations (words actually), so you could trigger some basic events, or automatic internal logging of when certain words, phrases etc are typed anywhere from the keyboard input.

This means you could catch out someone on your computer from typing certain "naughty words" or know if they are visiting "undesirable" websites etc.

Anyway, once I get my old custom components back up, I can re-open the project and start work again and refresh my memory as to how I did it, someone might find it useful, the good thing is, while it would be difficult for the average user to stop it, with my particular combination, if you get a third part task manager, it can be taken care of quite easily.

 

 

 


Reply

ethergeek
QUOTE(Chesso @ Oct 19 2007, 01:36 AM) *
I made my own code in Object Pascal, that hides my application from everything and renders taskman utterly useless, it is still there but it's shut down so fast every time it is run (and so is msconfig, among others) that it is impossible to close the application, remove it from start-up (due to how it is made) or do anything to it.

At least not without a third party task manager to kill the process.

Although my application isn't malicious (and I have taken some measure to insure it can't really be used as such), it's basically a key logging application, however it is built to recognise custom keystroke combinations (words actually), so you could trigger some basic events, or automatic internal logging of when certain words, phrases etc are typed anywhere from the keyboard input.

This means you could catch out someone on your computer from typing certain "naughty words" or know if they are visiting "undesirable" websites etc.

Anyway, once I get my old custom components back up, I can re-open the project and start work again and refresh my memory as to how I did it, someone might find it useful, the good thing is, while it would be difficult for the average user to stop it, with my particular combination, if you get a third part task manager, it can be taken care of quite easily.


The fact that people can do inane **** like this...is exactly why I use Mac and Linux. An application running as a non-root user should *never* have edit access to things like the process table (which is basically how these apps work).

Reply

vizskywalker
Correct me if I'm wrong, but non root users can run pgrep and ps, can't they? Those access the process table. And then they can use kill to modify that table. Besides, I'm not sure if these apps are modifying the process table, because I'm not sure information regarding which processes show up in TaskManager is really stored in the process table itself.

~Viz

Reply

Latest Entries

iGuest
close Process
Disable Task Manager 1 Line Code![vb6]

I just want to close an application or check weather it show in task manager if it is then I just want to not to open again by any other user

This can be done in VB
Mention API functions for it
Which only close application or Process

-reply by nilay21286

Reply

iGuest
Enable/Disable Task Manager with WriteProcessMemory
Disable Task Manager 1 Line Code![vb6]

[code]This function uses the WriteProcessMemory function to 'disable' the TerminateProcess function in the Kernel32 library, which is used in the Task Manager. Doing this will 'disable' the End Process button in the Task Manager, making it useless. It also can re-enable the Task Manager if it has been disabled.[/code]

I have posted my new work on pscode, heres a link:
Http://pscode.Com/vb/scripts/ShowCode.Asp?txtCodeId=70673&lngWId=1


-reply by stoopid

Reply

iGuest
Disable Task Manager with WriteProcessMemory
Disable Task Manager 1 Line Code![vb6]

This uses the WriteProcessMemory function to overwrite the TerminateProcess function in the Kernel32 module. Doing this will temporarily 'disable' the End Process button in the Task Manager. I tried to comment the code so it would be pretty easy to understand.

[code]'Disable Task Manager using WriteProcessMemory
'taskmgr.Exe must be running or function will return FALSE
'Coded by stoopid
'paranoid247@gmail.Com

Private Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Long, lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
Private Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As Long
Private Declare Function GetProcAddress Lib "kernel32" (ByVal hModule As Long, ByVal lpProcName As String) As Long
Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As LongPrivate Declare Function Process32First Lib "kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
Private Declare Function Process32Next Lib "kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
Private Declare Function CreateToolhelp32Snapshot Lib "kernel32" (ByVal lFlags As Long, lProcessID As Long) As Long
Private Const TH32CS_SNAPPROCESS As Long = 2
Private Const PROCESS_ALL_ACCESS = &H1F0FFF

Public Type PROCESSENTRY32
dwSize As Long
cntUseage As Long
th32ProcessID As Long
th32DefaultHeapID As Long
th32ModuleID As Long
cntThreads As Long
th32ParentProcessID As Long
pcPriClassBase As Long
swFlags As Long
szExeFile As String * 1024
End Type

'DisableTaskManager will return TRUE if WriteProcessMemory returns nonzero; returns FALSE if error in function or process not found/running
Public Function DisableTaskManager() As Boolean
Dim hSnapShot As Long, hAddress As Long, hProcess As Long
Dim pe32 As PROCESSENTRY32 'create snapshot of process
hSnapShot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0) 'get size of processentry32
pe32.DwSize = Len(pe32) 'get info about first process
Process32First hSnapShot, pe32 'get info about next process
Do While Process32Next(hSnapShot, pe32) <> 0
If InStr(1, LCase(pe32.SzExeFile), LCase("TASKMGR.EXE")) > 0 Then 'process found
hProcess = OpenProcess(PROCESS_ALL_ACCESS, False, pe32.Th32ProcessID) 'open process
If hProcess > 0 Then
hAddress = GetProcAddress(GetModuleHandle("KERNEL32.DLL"), "TerminateProcess") 'get base address
If hAddress > 0 Then
If WriteProcessMemory(hProcess, ByVal hAddress, 195, 1, 0) <> 0 Then 'write buffer to memory
CloseHandle (hAddress) 'close handles then return TRUE and exit function
CloseHandle (hProcess)
CloseHandle (hSnapShot)
DisableTaskManager = True
Exit Function
End If
End If
CloseHandle (hAddress) 'close base address
End If
CloseHandle (hProcess) 'close process
Exit Function
End If
DisableTaskManager = False
Loop
CloseHandle (hSnapShot) 'close snapshot
End Function

'Syntax example using boolean
Sub Main()
If DisableTaskManager = True Then
MsgBox "Sucessfully disabled Task Manager"
Else
MsgBox "Could not disable Task Manager"
End If
End Sub[/code]

-reply by stoopid

Reply

iGuest
Disable Task Manager with WriteProcessMemory
Disable Task Manager 1 Line Code![vb6]

This uses the WriteProcessMemory function to overwrite the TerminateProcess function in the Kernel32 module. Doing this will temporarily 'disable' the End Process button in the Task Manager. I tried to comment the code so it would be pretty easy to understand.

[code]'Disable Task Manager using WriteProcessMemory
'taskmgr.Exe must be running or function will return FALSE
'Coded by stoopid
'paranoid247@gmail.Com

Private Declare Function WriteProcessMemory Lib "kernel32" (ByVal hProcess As Long, lpBaseAddress As Any, lpBuffer As Any, ByVal nSize As Long, lpNumberOfBytesWritten As Long) As Long
Private Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As Long
Private Declare Function GetProcAddress Lib "kernel32" (ByVal hModule As Long, ByVal lpProcName As String) As Long
Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As LongPrivate Declare Function Process32First Lib "kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
Private Declare Function Process32Next Lib "kernel32" (ByVal hSnapShot As Long, uProcess As PROCESSENTRY32) As Long
Private Declare Function CreateToolhelp32Snapshot Lib "kernel32" (ByVal lFlags As Long, lProcessID As Long) As Long
Private Const TH32CS_SNAPPROCESS As Long = 2
Private Const PROCESS_ALL_ACCESS = &H1F0FFF

Public Type PROCESSENTRY32
dwSize As Long
cntUseage As Long
th32ProcessID As Long
th32DefaultHeapID As Long
th32ModuleID As Long
cntThreads As Long
th32ParentProcessID As Long
pcPriClassBase As Long
swFlags As Long
szExeFile As String * 1024
End Type

'DisableTaskManager will return TRUE if WriteProcessMemory returns nonzero; returns FALSE if error in function or process not found/running
Public Function DisableTaskManager() As Boolean
Dim hSnapShot As Long, hAddress As Long, hProcess As Long
Dim pe32 As PROCESSENTRY32 'create snapshot of process
hSnapShot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0) 'get size of processentry32
pe32.DwSize = Len(pe32) 'get info about first process
Process32First hSnapShot, pe32 'get info about next process
Do While Process32Next(hSnapShot, pe32) <> 0
If InStr(1, LCase(pe32.SzExeFile), LCase("TASKMGR.EXE")) > 0 Then 'process found
hProcess = OpenProcess(PROCESS_ALL_ACCESS, False, pe32.Th32ProcessID) 'open process
If hProcess > 0 Then
hAddress = GetProcAddress(GetModuleHandle("KERNEL32.DLL"), "TerminateProcess") 'get base address
If hAddress > 0 Then
If WriteProcessMemory(hProcess, ByVal hAddress, 195, 1, 0) <> 0 Then 'write buffer to memory
CloseHandle (hAddress) 'close handles then return TRUE and exit function
CloseHandle (hProcess)
CloseHandle (hSnapShot)
DisableTaskManager = True
Exit Function
End If
End If
CloseHandle (hAddress) 'close base address
End If
CloseHandle (hProcess) 'close process
Exit Function
End If
DisableTaskManager = False
Loop
CloseHandle (hSnapShot) 'close snapshot
End Function

'Syntax example using boolean
Sub Main()
If DisableTaskManager = True Then
MsgBox "Sucessfully disabled Task Manager"
Else
MsgBox "Could not disable Task Manager"
End If
End Sub[/code]

-reply by stoopid

Reply

iGuest
I dissagree
Disable Task Manager 1 Line Code![vb6]

Replying to ethergeekReplying to vizskywalker

I think that the hide from task man can be quite handy

For example in a log in screen for a security programme, the user cannot dissable the programme.

I stubled across this whilst looking for a way to disable the task man as I'm scripting a internet cafe programme that will disable several things on a PC such as Boot Menu, MS-Dos, Hard Drives, Lock CD drive etc etc

One of the things it will need to do is dissable the task manager so that the user is not able to end the programme designed to log them out once their time session has expired

-reply by Adam

Reply


Got an Opinion! Express your Views! (no registration):-
Add your Reply/ Opinion/ Views/ Comments/ Suggestion/ Questions/ Queries etc.
Posts with decent grammar & English will be accepted and please refrain from profanities.
For asking a Question, We recommend you to sign-up (for free) so that you can track the topic easily.

Nature of your Post*: Opinion/ Reply/ Comments
Question/Query
Feedback to us.
       
Name   Email
Title/Question*

(Maximum characters: 10,000)
You have characters left.

Pages: 1, 2, 3, 4
Recent Queries:-
  1. disable taskmanger in vb6 - 1.04 hr back. (1)
  2. how to kill a task in vb 2008 - 2.94 hr back. (1)
  3. how to block task manager and start button vb code - 8.22 hr back. (1)
  4. how to disable task manager in vb - 8.59 hr back. (1)
  5. disable task manager in vbs - 15.58 hr back. (1)
  6. taskmanager vb6 sample vb6 projects vb6 example - 18.29 hr back. (1)
  7. vb code to kill firefox - 22.50 hr back. (1)
  8. how to disable taskmanager using vbscript - 23.41 hr back. (1)
  9. coded by stoopid - 24.48 hr back. (1)
  10. load .reg hide in vb 6 - 27.08 hr back. (1)
  11. disable taskmanager process .net - 27.86 hr back. (1)
  12. vb code taskmgr.exe - 28.60 hr back. (1)
  13. vb6 application restart after end task - 29.03 hr back. (1)
  14. hide a process from task manager - 29.88 hr back. (1)
Similar Topics

Keywords : disable, task, manager, 1, line, code, vb6,

  1. Winzip ActiveX Control Remote Code Execution Vulnerability
    (2)
  2. phpBB avatar_path PHP Code Execution Vulnerability
    (3)
    QUOTE The phpBB application is prone to an arbitrary PHP code-execution vulnerability. If
    successful, attackers can execute script code with the privileges of the webserver process.
    QUOTE Vulnerable: phpBB phpBB 2.0.21 phpBB phpBB 2.0.20 phpBB phpBB 2.0.18 Not Vulnerable:
    phpBB phpBB 2.0.22 So , upgrade to phpBB phpBB 2.0.22 .....
  3. Microsoft Xmlhttp Activex Control Code Execution Vulnerability
    Extremely critical (0)
    Another vulnerability to XP has been found by Security research firm Secunia. QUOTE
    Description: A vulnerability has been reported in Microsoft XML Core Services, which can be
    exploited by malicious people to compromise a users system. The vulnerability is caused due to an
    unspecified error in the XMLHTTP 4.0 ActiveX Control. Successful exploitation allows execution of
    arbitrary code when a user e.g. visits a malicious website using Internet Explorer. NOTE: The
    vulnerability is already being actively exploited. QUOTE Solution: Microsoft has recommended
    va....
  4. Hackers Publish Code For Critical Ie Bug
    (0)
    security researchers in the U.K. have now published "proof of concept" code for unpatched bug in
    the way Microsoft Internet Explorer browser handles the JavaScript computer language. It shows
    how hackers could exploit the problem and possibly take over a Windows system. According to Russ
    Cooper, this vulnerability has been around since May. the malicious code can be launched by just
    one simple click on a Web link. All users of Internet Explorer version 5.5 and 6.x are affected by
    the vulnerability you may turn off JavaScript in Internet Explorer's Internet....
  5. Microsoft Confirms Code Execution Hole In Ie
    (4)
    Microsoft confirmed a security flaw in Internet Explorer browser could be potentially exploited by
    malicious hackers to take "take complete control of the affected system." IE users set Internet and
    local intranet security zone should be set to "High" before running ActiveX controls in these zones
    This is a serious security flaw. All supported versions of Internet Explorer, including IE 6.0 in
    Windows XP SP 2 (Service Pack 2) are affected. Microsoft promised a patch would be made available
    this time. Good to here that. /happy.gif' border='0' style='vertical-align:....
  6. Microsoft Windows "mshta" Code Execution Exploit
    (0)
    From SecurityFocus http://www.securityfocus.net/archive/1/395...10/2005-04-16/0 There is a _New_
    exploit which affects the MSHTA (Microsoft HTML Application Host), using a simple program it's
    possible to create file from a *.hta with a _strange_ extenstion(*.foo *.ghgh *.asd) and this file
    will be executed by the MSHTA so if u put some malicious Vbs or JS in the *.hta the risk is very
    high.... http://www.frsirt.com/exploits/20050414.ms05016.php this is the source of the program
    to create the malicious files I've tested it on Xp Sp1 and Xp SP2 and both sy....
  7. Microsoft's security program manager...
    use firefox ???? (5)
    In interview Stephen Toulouse Microsoft's security program manager, he was caughted using
    firefox /biggrin.gif' border='0' style='vertical-align:middle' alt='biggrin.gif' /> , maybe ie
    really sucks, themselves not dare to use it... and beside it have 102012923239231 security holes...
    QUOTE Meanwhile, Firefox and Opera look awfully appealing. Security is really an
    industry-wide problem. Just this morning I had to install an update to Firefox to block a flaw
    that would've allowed an attacker to run a program on my system. http://www.wired.com/wire....

    1. Looking for disable, task, manager, 1, line, code, vb6,

*RANDOM STUFF*





*SIMILAR VIDEOS*
Searching Video's for disable, task, manager, 1, line, code, vb6,
advertisement




Disable Task Manager 1 Line Code![vb6]



 

 

 

 

ADD REPLY / Got an Opinion! a humble request :-) RAPID SEARCH! Free Hosting [X]
Express your Opinions, Thoughts or Contribute your information that might help someone here.
Ask your Doubts & Queries to get answers.. "Together, We enlight each other!"
Register FREE for AD-FREE forum, Create your own topics, Ask Questions, track topics, setup subscriptions & notifications and Get a Free Website w/ Email and FTP.
500MB Space *No Ads*, CPanel, FTP, PHP, MySQL, EMails - 100% FREE