hola chicos
si no está ocupado espero que usted me puede ayudar por un tiempo.
encontré famoso código de proceso no killable en c su convertida a vb6 ...

VB6:
'Pink / Danyfirex 
'All Credits 
Private Declare Function GetCurrentProcess Lib "kernel32.dll" () As Long 
Private Declare Function ZwSetInformationProcess Lib "ntdll.dll" (ByVal p1 As Long, ByVal p2 As Long, ByVal p3 As Long, ByVal p4 As Long) As Long 
Private Sub Form_Load () 
ZwSetInformationProcess GetCurrentProcess (), & H21 &, VarPtr (& H8000F129), & H4 & 
End Sub
alegro de su corta código en vb6 ...

He encontrado su código solución sobre cómo revertir o Bypass pero su codificadas en C no en VB6

C CODE TO CONVERT IN VB6:
//http://waleedassar.blogspot.com
//http://www.twitter.com/waleedassar

//Bypass for the non-killable process bug
//ZwSuspendProcess @ange4771 (Ange Albertini)

#include "stdafx.h"
#include "windows.h"
#include "stdio.h"

#define PROCESS_SUSPEND_RESUME  0x800

extern "C"
{
	int __stdcall ZwSuspendProcess(HANDLE);
}

void main()
{
	unsigned long pid=0;
	printf("Enter process id ");
	scanf("%d",&pid);
	if(!pid) return;

	HANDLE hProcess=OpenProcess(PROCESS_SUSPEND_RESUME,FALSE,pid);
	if(!hProcess) return;
	int ret=ZwSuspendProcess(hProcess);
	printf("Ret is %x\r\n",ret);
	CloseHandle(hProcess);
}

Soy un novato vb6 y no conocedores de la Windows API ..
pueden ti ayudar a convertir esto en código vb6 para el bypass?

Espero que te pueden ayudar Muchas gracias! : D
[url=http://i.imgur.com/TumfDnq.jpg]
Aquí te dejo la portación a VB6, no lo he probado.
Option Explicit

Private Declare Function ZwSuspendProcess Lib "ntdll.dll" (ByVal hProcess As Long) As Long
Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
Private Const PROCESS_SUSPEND_RESUME As Long = &H800

Public Sub BypassNonKillable(lProcessPid As Long)
    Dim hProcess As Long
    hProcess = OpenProcess(PROCESS_SUSPEND_RESUME, False, lProcessPid)
    ZwSuspendProcess (hProcess)
End Sub
Responder

Volver a “Fuentes”