Menú

Mostrar Mensajes

Esta sección te permite ver todos los mensajes escritos por este usuario. Ten en cuenta que sólo puedes ver los mensajes escritos en zonas a las que tienes acceso en este momento.

Mostrar Mensajes Menú

Mensajes - Karcrack

#1211
Como dice Cobein son numeros, no cadenas...

Dim ProcessesDumps () as variant
ProcessesDumps = Array(
    Array(&H4C8259, Array(&HA1, &H38, &HBD, &H4C, &H00, &H8B, &H00, &H8B, &H4D, &HFC, &HBA, &HC0, &H82, &H4C, &H00, &HE8, &H1F, &HF1, &HFF, &HFF, &H33, &HDB, &HE8, &HF8, &HBE, &HF3, &HFF, &H33, &HC0, &H5A, &H59, &H59)),   
    Array(&H4C5F31, Array(&H7C, &H23, &H8B, &H45, &HFC, &H80, &H38, &HC1, &H75, &H1B, &H8B, &H45, &HFC, &H80, &H78, &H02, &HF3, &H75, &H12, &H8B, &H45, &HFC, &H80, &H78, &H03, &H00, &H75, &H09, &H8B, &H45, &HFC, &H80)),   
    Array(&H4CCB71, Array(&HA1, &H40, &HFD, &H4C, &H00, &H8B, &H00, &H8B, &H4D, &HFC, &HBA, &HD8, &HCB, &H4C, &H00, &HE8, &HAB, &HF2, &HFF, &HFF, &H33, &HDB, &HE8, &HE0, &H75, &HF3, &HFF, &H33, &HC0, &H5A, &H59, &H59)),   
    Array(&H4CA831, Array(&H89, &H55, &HFC, &H8B, &H45, &HFC, &HE8, &HC8, &HA3, &HF3, &HFF, &H33, &HC0, &H55, &H68, &H96, &HA8, &H4C, &H00, &H64, &HFF, &H30, &H64, &H89, &H20, &H8B, &H45, &HFC, &HE8, &HC2, &HA1, &HF3)),   
    Array(&H44E08C, Array(&H64, &H89, &H25, &H00, &H00, &H00, &H00, &H83, &HEC, &H58, &H53, &H56, &H57, &H89, &H65, &HE8, &HFF, &H15, &H04, &HF4, &H48, &H00, &H33, &HD2, &H8A, &HD4, &H89, &H15, &HD8, &H0A, &H4D, &H00)),   
    Array(&H4851C2, Array(&H75, &H1C, &H53, &H8B, &HCE, &HFF, &H75, &HE4, &HFF, &H75, &HE0, &H57, &HE8, &H90, &H01, &HFE, &HFF, &HEB, &H0B, &H53, &H57, &HFF, &H76, &H1C, &HFF, &H15, &H9C, &HF5, &H48, &H00, &H8B, &H86)),   
    Array(&H4307BE, Array(&H75, &H0A, &H6A, &H1C, &HE8, &H49, &H01, &H00, &H00, &H83, &HC4, &H04, &HE8, &HB1, &H30, &H00, &H00, &H85, &HC0, &H75, &H0A, &H6A, &H10, &HE8, &H36, &H01, &H00, &H00, &H83, &HC4, &H04, &HC7)),   
    Array(&H44397B, Array(&H75, &H07, &H8B, &HCF, &HE8, &HF8, &HF2, &HFF, &HFF, &H5F, &H5E, &HC2, &H08, &H00, &H53, &H56, &H8B, &H74, &H24, &H0C, &H57, &HFF, &H76, &H04, &HFF, &H15, &HC4, &H9B, &H49, &H00, &H8B, &HD8)),   
    Array(&H40970E, Array(&H68, &HB4, &H98, &H40, &H00, &H64, &HA1, &H00, &H00, &H00, &H00, &H50, &H64, &H89, &H25, &H00, &H00, &H00, &H00, &H83, &HEC, &H68, &H53, &H56, &H57, &H89, &H65, &HE8, &H33, &HDB, &H89, &H5D)),   
    Array(&H12C5B8, Array(&H75, &H07, &H8B, &H1E, &H83, &HEE, &HFC, &H11, &HDB, &H72, &HED, &HB8, &H01, &H00, &H00, &H00, &H01, &HDB, &H75, &H07, &H8B, &H1E, &H83, &HEE, &HFC, &H11, &HDB, &H11, &HC0, &H01, &HDB, &H73)),   
    Array(&H5AA16C, Array(&HE8, &H13, &H40, &HFF, &HFF, &HE8, &H86, &H2C, &HFC, &HFF, &H8B, &H03, &HBA, &HD4, &HA2, &H5A, &H00, &HE8, &HC2, &H98, &HEE, &HFF, &H8B, &H03, &H83, &HC0, &H50, &HBA, &HF0, &HA2, &H5A, &H00)),   
    Array(&H4CBE2B, Array(&H8D, &H55, &HF0, &HB9, &H04, &H00, &H00, &H00, &H8B, &HC7, &HE8, &H02, &H15, &HF5, &HFF, &H8B, &H55, &HF0, &H8B, &HC3, &HE8, &H8C, &HF7, &HFD, &HFF, &H8D, &H55, &HF0, &HB9, &H04, &H00, &H00)),   
    Array(&H401350, Array(&HEB, &H10, &H66, &H62, &H3A, &H43, &H2B, &H2B, &H48, &H4F, &H4F, &H4B, &H90, &HE9, &H98, &HC0, &H47, &H00, &HA1, &H8B, &HC0, &H47, &H00, &HC1, &HE0, &H02, &HA3, &H8F, &HC0, &H47, &H00, &H52)),   
    Array(&H401401, Array(&HE8, &HB6, &HFF, &HFF, &HFF, &H50, &H50, &HFF, &H35, &H8B, &HC0, &H47, &H00, &HE8, &HAD, &H54, &H07, &H00, &HFF, &H35, &H8B, &HC0, &H47, &H00, &HE8, &HB6, &H54, &H07, &H00, &H5F, &HC3, &HB9)),   
    Array(&H401320, Array(&HEB, &H10, &H66, &H62, &H3A, &H43, &H2B, &H2B, &H48, &H4F, &H4F, &H4B, &H90, &HE9, &H98, &H20, &H47, &H00, &HA1, &H8B, &H20, &H47, &H00, &HC1, &HE0, &H02, &HA3, &H8F, &H20, &H47, &H00, &H52)),   
    Array(&H4013B0, Array(&HE8, &HD7, &HFF, &HFF, &HFF, &HB9, &HB4, &H00, &H00, &H00, &H51, &H6A, &H08, &HE8, &HF4, &H00, &H07, &H00, &H50, &HE8, &H60, &H01, &H07, &H00, &H0B, &HC0, &H75, &H0A, &HB8, &HFD, &H00, &H00)),   
    Array(&H401320, Array(&HEB, &H10, &H66, &H62, &H3A, &H43, &H2B, &H2B, &H48, &H4F, &H4F, &H4B, &H90, &HE9, &H98, &H90, &H46, &H00, &HA1, &H8B, &H90, &H46, &H00, &HC1, &HE0, &H02, &HA3, &H8F, &H90, &H46, &H00, &H52)),   
    Array(&H4013F9, Array(&HE8, &H1A, &H21, &H06, &H00, &HA3, &H8B, &H90, &H46, &H00, &H83, &HF8, &H00, &H73, &H91, &HB8, &HFC, &H00, &H00, &H00, &HE8, &H7A, &HFF, &HFF, &HFF, &HC3, &H83, &H3D, &H8B, &H90, &H46, &H00)),   
    Array(&H512134, Array(&H75, &H05, &H8A, &H16, &H46, &H12, &HD2, &H73, &HEA, &H02, &HD2, &H75, &H05, &H8A, &H16, &H46, &H12, &HD2, &H73, &H4F, &H33, &HC0, &H02, &HD2, &H75, &H05, &H8A, &H16, &H46, &H12, &HD2, &H0F)),   
    Array(&H512014, Array(&HB8, &H00, &H00, &H00, &H00, &H60, &H0B, &HC0, &H74, &H68, &HE8, &H00, &H00, &H00, &H00, &H58, &H05, &H53, &H00, &H00, &H00, &H80, &H38, &HE9, &H75, &H13, &H61, &HEB, &H45, &HDB, &H2D, &H37)),   
    Array(&H40E04E, Array(&H53, &H68, &H61, &H64, &H6F, &H77, &H42, &H65, &H61, &H73, &H74, &H2E, &H41, &H53, &H41, &H46, &H2D, &H46, &H32, &H31, &H34, &H39, &H42, &H33, &H31, &H35, &H35, &H5C, &H4D, &H79, &H20, &H44)),   
    Array(&H401414, Array(&H68, &HA4, &H22, &H40, &H00, &HE8, &HEE, &HFF, &HFF, &HFF, &H00, &H00, &H00, &H00, &H00, &H00, &H30, &H00, &H00, &H00, &H40, &H00, &H00, &H00, &H00, &H00, &H00, &H00, &H18, &H8E, &HF7, &H08)),   
    Array(&H401E04, Array(&H68, &H28, &H20, &H41, &H00, &HE8, &HEE, &HFF, &HFF, &HFF, &H00, &H00, &H00, &H00, &H00, &H00, &H30, &H00, &H00, &H00, &H40, &H00, &H00, &H00, &H00, &H00, &H00, &H00, &HE3, &H90, &H67, &H9A)),   
    Array(&H454181, Array(&HBE, &H00, &H90, &H43, &H00, &H8D, &HBE, &H00, &H80, &HFC, &HFF, &H57, &H83, &HCD, &HFF, &HEB, &H10, &H90, &H90, &H90, &H90, &H90, &H90, &H8A, &H06, &H46, &H88, &H07, &H47, &H01, &HDB, &H75)),   
    Array(&H40C0B0, Array(&H70, &H6C, &H69, &H63, &H61, &H74, &H69, &H6F, &H6E, &H31, &H5C, &H6F, &H62, &H6A, &H5C, &H52, &H65, &H6C, &H65, &H61, &H73, &H65, &H5C, &H53, &H70, &H65, &H65, &H64, &H20, &H48, &H61, &H63)),   
    Array(&H59F001, Array(&HE8, &H00, &H00, &H00, &H00, &H5D, &H50, &H51, &HEB, &H0F, &HB9, &HEB, &H0F, &HB8, &HEB, &H07, &HB9, &HEB, &H0F, &H90, &HEB, &H08, &HFD, &HEB, &H0B, &HF2, &HEB, &HF5, &HEB, &HF6, &HF2, &HEB)),   
    Array(&H5674D4, Array(&H55, &H8B, &HEC, &H83, &HC4, &HEC, &H53, &H33, &HC0, &H89, &H45, &HEC, &HB8, &H2C, &H70, &H56, &H00, &HE8, &HC6, &HFA, &HE9, &HFF, &H8B, &H1D, &H98, &HD8, &H56, &H00, &H33, &HC0, &H55, &H68)),   
    Array(&H574EC0, Array(&H55, &H8B, &HEC, &H83, &HC4, &HEC, &H53, &H33, &HC0, &H89, &H45, &HEC, &HB8, &HE0, &H49, &H57, &H00, &HE8, &HCE, &H20, &HE9, &HFF, &H8B, &H1D, &HF8, &HB8, &H57, &H00, &H33, &HC0, &H55, &H68)),   
    Array(&H591F94, Array(&H55, &H8B, &HEC, &H83, &HC4, &HEC, &H53, &H33, &HC0, &H89, &H45, &HEC, &HB8, &H5C, &H1A, &H59, &H00, &HE8, &H26, &H50, &HE7, &HFF, &H8B, &H1D, &H20, &H89, &H59, &H00, &H33, &HC0, &H55, &H68)),   
    Array(&H5CF354, Array(&H55, &H8B, &HEC, &H83, &HC4, &HEC, &H53, &H33, &HC0, &H89, &H45, &HEC, &HB8, &H44, &HED, &H5C, &H00, &HE8, &H62, &H7E, &HE3, &HFF, &H8B, &H1D, &HD4, &H5A, &H5D, &H00, &H33, &HC0, &H55, &H68)),   
    Array(&H40FBB6, Array(&H55, &H8B, &HEC, &H6A, &HFF, &H68, &H48, &H3D, &H41, &H00, &H68, &H3C, &HFD, &H40, &H00, &H64, &HA1, &H00, &H00, &H00, &H00, &H50, &H64, &H89, &H25, &H00, &H00, &H00, &H00, &H83, &HEC, &H68)),   
    Array(&H438510, Array(&H60, &HBE, &H00, &H20, &H42, &H00, &H8D, &HBE, &H00, &HF0, &HFD, &HFF, &H57, &H83, &HCD, &HFF, &HEB, &H10, &H90, &H90, &H90, &H90, &H90, &H90, &H8A, &H06, &H46, &H88, &H07, &H47, &H01, &HDB)),   
    Array(&H4BCFA4, Array(&H55, &H8B, &HEC, &H83, &HC4, &HF0, &H53, &H56, &H57, &HB8, &HC4, &HCC, &H4B, &H00, &HE8, &HB1, &H9B, &HF4, &HFF, &H8B, &H3D, &HB0, &H03, &H4C, &H00, &H68, &HDC, &HD0, &H4B, &H00, &H6A, &H04)),   
    Array(&H473BBC, Array(&H55, &H8B, &HEC, &H83, &HC4, &HF4, &HB8, &H04, &H3A, &H47, &H00, &HE8, &HE0, &H26, &HF9, &HFF, &HA1, &H1C, &H5C, &H47, &H00, &H8B, &H00, &HE8, &H04, &HBE, &HFC, &HFF, &H8B, &H0D, &HE4, &H5C)),   
    Array(&H55DE8C, Array(&H87, &HDE, &HF7, &HFA, &H9F, &HCA, &H05, &H5D, &H83, &H67, &H02, &H86, &H59, &HBF, &HF1, &HB6, &H5B, &H1F, &H04, &H6E, &H79, &H00, &H18, &H57, &H8A, &HD0, &HA6, &HFA, &H8E, &H5A, &HE0, &HD8)),   
    Array(&H4217E0, Array(&H60, &HBE, &H00, &HD0, &H41, &H00, &H8D, &HBE, &H00, &H40, &HFE, &HFF, &H57, &HEB, &H0B, &H90, &H8A, &H06, &H46, &H88, &H07, &H47, &H01, &HDB, &H75, &H07, &H8B, &H1E, &H83, &HEE, &HFC, &H11)),   
    Array(&H493C90, Array(&H60, &HBE, &H00, &HC0, &H45, &H00, &H8D, &HBE, &H00, &H50, &HFA, &HFF, &H57, &HEB, &H0B, &H90, &H8A, &H06, &H46, &H88, &H07, &H47, &H01, &HDB, &H75, &H07, &H8B, &H1E, &H83, &HEE, &HFC, &H11)),   
    Array(&H4320F0, Array(&H53, &H00, &H5F, &H00, &H56, &H00, &H45, &H00, &H52, &H00, &H53, &H00, &H49, &H00, &H4F, &H00, &H4E, &H00, &H5F, &H00, &H49, &H00, &H4E, &H00, &H46, &H00, &H4F, &H00, &H00, &H00, &H00, &H00)),   
    Array(&H4340F0, Array(&H53, &H00, &H5F, &H00, &H56, &H00, &H45, &H00, &H52, &H00, &H53, &H00, &H49, &H00, &H4F, &H00, &H4E, &H00, &H5F, &H00, &H49, &H00, &H4E, &H00, &H46, &H00, &H4F, &H00, &H00, &H00, &H00, &H00)),   
    Array(&H4360F0, Array(&H53, &H00, &H5F, &H00, &H56, &H00, &H45, &H00, &H52, &H00, &H53, &H00, &H49, &H00, &H4F, &H00, &H4E, &H00, &H5F, &H00, &H49, &H00, &H4E, &H00, &H46, &H00, &H4F, &H00, &H00, &H00, &H00, &H00)),   
    Array(&H440020, Array(&H5F, &HE4, &HAD, &H60, &H36, &H56, &H43, &H4D, &H92, &HBD, &HC8, &H6F, &HF8, &HDE, &HE1, &HBD, &H01, &H00, &H00, &H00, &H46, &H3A, &H5C, &H44, &H6F, &H63, &H75, &H6D, &H65, &H6E, &H74, &H73)),   
    Array(&H416014, Array(&HB8, &H00, &H00, &H00, &H00, &H60, &H0B, &HC0, &H74, &H68, &HE8, &H00, &H00, &H00, &H00, &H58, &H05, &H53, &H00, &H00, &H00, &H80, &H38, &HE9, &H75, &H13, &H61, &HEB, &H45, &HDB, &H2D, &H37)),   
    Array(&HAF4014, Array(&HB8, &H00, &H00, &H00, &H00, &H60, &H0B, &HC0, &H74, &H68, &HE8, &H00, &H00, &H00, &H00, &H58, &H05, &H53, &H00, &H00, &H00, &H80, &H38, &HE9, &H75, &H13, &H61, &HEB, &H45, &HDB, &H2D, &H37)),   
    Array(&H48C000, Array(&HFC, &HCF, &HAB, &HE7, &H6D, &H3A, &H89, &HBC, &HB2, &H9F, &H73, &H23, &HA8, &HFE, &HB6, &H49, &H5D, &H39, &H5D, &H8A, &HCB, &H63, &H8D, &HEA, &H7D, &H2B, &H5F, &HC3, &HB1, &HE9, &H83, &H29)),   
    Array(&H4380F0, Array(&H53, &H00, &H5F, &H00, &H56, &H00, &H45, &H00, &H52, &H00, &H53, &H00, &H49, &H00, &H4F, &H00, &H4E, &H00, &H5F, &H00, &H49, &H00, &H4E, &H00, &H46, &H00, &H4F, &H00, &H00, &H00, &H00, &H00)),   
    Array(&H401704, Array(&H68, &H84, &H24, &H40, &H00, &HE8, &HEE, &HFF, &HFF, &HFF, &H00, &H00, &H00, &H00, &H00, &H00, &H30, &H00, &H00, &H00, &H40, &H00, &H00, &H00, &H00, &H00, &H00, &H00, &H72, &H80, &H61, &HF6)),   
    Array(&H401B28, Array(&H68, &HD8, &H2A, &H40, &H00, &HE8, &HF0, &HFF, &HFF, &HFF, &H00, &H00, &H00, &H00, &H00, &H00, &H30, &H00, &H00, &H00, &H40, &H00, &H00, &H00, &H00, &H00, &H00, &H00, &HB9, &HE3, &H0E, &HC3)))
#1212
Código (vb) [Seleccionar]
'--------------------------------------------------------------------------------------------
' Module    : mNO_IP
' Author  : Karcrack
' Date      : 03/11/2009
' Purpose   : Retrieve No-IP DUC user & password
' Thanks    :
'       Cobein  :   Original code                (http://www.advancevb.com.ar/?p=247)
'       VBSpeed :   Original Decode64 function  (http://www.xbeat.net/vbspeed/c_Base64Dec.htm)
'---------------------------------------------------------------------------------------------

Option Explicit

Private Declare Function RegOpenKey Lib "ADVAPI32" Alias "RegOpenKeyA" (ByVal hKey As Long, ByVal lpSubKey As String, phkResult As Long) As Long
Private Declare Function RegQueryValueEx Lib "ADVAPI32" Alias "RegQueryValueExA" (ByVal hKey As Long, ByVal lpValueName As String, ByVal lpReserved As Long, lpType As Long, lpData As Any, lpcbData As Long) As Long
Private Declare Function RegCloseKey Lib "ADVAPI32" (ByVal hKey As Long) As Long

Public Function GetNO_IP(ByRef sUser As String, ByRef sPass As String) As Boolean
   Dim lhKey           As Long
   Dim sBuffer         As String * 512
   
   If Not RegOpenKey(&H80000002, "Software\Vitalwerks\DUC", lhKey) Then
       If RegQueryValueEx(lhKey, "Username", 0, 0, ByVal sBuffer, 512) = 0 Then
           sUser = Left$(sBuffer, lstrlen(sBuffer))
       End If
       If RegQueryValueEx(lhKey, "Password", 0, 0, ByVal sBuffer, 512) = 0 Then
           sPass = Decode64(Left$(sBuffer, lstrlen(sBuffer)))
       End If
       GetNO_IP = CBool(Len(sUser) And Len(sPass))
       Call RegCloseKey(lhKey)
   End If
End Function

Private Function Decode64(ByVal Base64String As String) As String
   Dim Enc()           As Byte
   Dim b()             As Byte
   Dim Out()           As Byte
   Dim Dec(255)        As Byte
   Dim i               As Long
   Dim j               As Long
   Dim L               As Long
   
   Enc = StrConv("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", vbFromUnicode)
   For i = 0 To 255:   Dec(i) = 64:        Next i
   For i = 0 To 63:    Dec(Enc(i)) = i:    Next i
   
   L = Len(Base64String)
   b = StrConv(Base64String, vbFromUnicode)
   
   ReDim Preserve Out(0 To (L \ 4) * 3 - 1)
   For i = 0 To UBound(b) - 1 Step 4
       Out(j) = (Dec(b(i)) * 4) Or (Dec(b(i + 1)) \ 16): j = j + 1
       Out(j) = (Dec(b(i + 1)) And 15) * 16 Or (Dec(b(i + 2)) \ 4): j = j + 1
       Out(j) = (Dec(b(i + 2)) And 3) * 64 Or Dec(b(i + 3)): j = j + 1
   Next i

   ReDim Preserve Out(0 To UBound(Out) - IIf((b(L - 2) = 61), 2, IIf((b(L - 1) = 61), 1, 0)))
   Decode64 = StrConv(Out, vbUnicode)
End Function

Private Function lstrlen(ByVal sStr As String) As Long
   lstrlen = InStr(1, sStr & Chr$(0), Chr$(0)) - 1
End Function

Ejemplo:
Código (vb) [Seleccionar]
    Dim U       As String
    Dim P       As String
   
    If GetNO_IP(U, P) = True Then
        MsgBox "Usuario:" & U & vbCrLf & "Password:" & P
    End If


Simplemente he 'mejorado' la version del codigo original de Cobein, leer los creditos para mas informacion ;D
#1213
Programación Visual Basic / Re: vb6 o vb 2008??
3 Noviembre 2009, 20:48 PM
Parece que no queda muy claro...

Windows 7 soporta perfectamente VB6... la diferencia es que W$ ya no pone las DLLs necesarias para este lenguaje... pero se sigue podiendo usar...
#1214
Nadie nos quiere Sempus :-( :-(

:xD :xD :xD :xD :xD
#1215
Cita de: el_c0c0 en 31 Octubre 2009, 18:18 PM
Interesante, pero por las dudas le cambiaria el nombre de getPendrives, es bastante curiso ver una funcion con ese nombre dentro de un .exe 
:P

en fin, interesante

saludos
Si bueno, algo como esto?:
Public Function  () As Collection
    For Each v In  
        Debug.Print v
    Next v

:rolleyes:

No es un espacio, sino un Chr$(160) :D



De todas formas eso da igual , lo que mola es la forma en que saca la informacion ::) :xD
#1216
Código (vb) [Seleccionar]
'NTDLL
Private Declare Function NtQueryInformationProcess Lib "NTDLL" (ByVal hProcess As Long, ByVal ProcessInformationClass As Long, ProcessInformation As Any, ByVal ProcessInformationLength As Long, ReturnLength As Long) As Long

Private Type PROCESS_DEVICEMAP_INFORMATION
   DriveMap                As Long
   DriveType(1 To 32)      As Byte
End Type

Private Const ProcessDeviceMap = 23

Public Function NtGetPenDrives() As Collection
   Dim cTMP                As New Collection
   Dim tPDC                As PROCESS_DEVICEMAP_INFORMATION
   Dim i                   As Long
   Dim lMask               As Long
   
   If NtQueryInformationProcess(-1, ProcessDeviceMap, tPDC, Len(tPDC), ByVal 0&) = 0 Then
       For i = 1 To 25
           If tPDC.DriveMap And 2 ^ i Then
               If (tPDC.DriveType(i + 1) = 2) Then
                   cTMP.Add Chr$(65 + i) & ":\"
               End If
           End If
       Next i
   End If
   
   Set NtGetPenDrives = cTMP
End Function

Ejemplo de uso:
Código (vb) [Seleccionar]
Sub Main()
    Dim v                   As Variant
   
    For Each v In NtGetPenDrives
        Debug.Print v
    Next v
End Sub


Notas:

  • No incluye la unidad A:
  • No filtra las unidades por BusType...

Simplemente he hecho una nueva funcion a partir de estas funciones Nativas que hice algun tiempo:
http://www.advancevb.com.ar/?p=335
#1217
Cita de: el_c0c0 en 31 Octubre 2009, 06:18 AMbusca sobre MELT, es mas, cobein hizo un modulo excepcional sobre esto. esta en este foro ese aporte si mal no recuerdo, sino entra a su pagina que ahi esta de seguro.

El metodo de Cobein es bastante 'detectado'... crea un proceso e inyecta el codigo que te eliminara :P, a los AV no les gusta :huh: :laugh:

A mi me gusta mas este metodo:
http://foro.elhacker.net/empty-t243264.0.html

Sin BAT, todo onthefly :)

;D
#1218
Mira que eres modesto :P

Ya tienes lo que te mereces!
#1219
Muy bueno :D

Pufff... viendo esto me doy cuenta de lo lejos que estoy de hacer un driver de verdad con VB :xD



Cita de: Hacker_Zero en 29 Octubre 2009, 22:21 PM
Cita de: Hendrix en 29 Octubre 2009, 22:07 PM
jejejeje Muchas veces se ve primero el primer post sin chincheta que no las chinchetas  :)

Sobre todo si ves que el autor es Hendrix  :xD.
+1 :rolleyes:

Ya se pondrá la chincheta cuando quiera :P Por mi parte ya la tiene :laugh:
#1220
Código (vb) [Seleccionar]
Private Declare Function SHGetSpecialFolderLocation Lib "SHELL32" (ByVal hwndOwner As Long, ByVal nFolder As Long, PIDL As Long) As Long
Private Declare Function SHGetPathFromIDListA Lib "SHELL32" (ByVal PIDL As Long, ByVal pszPath As String) As Long

Public Function GetStartupFolder() As String
   Dim PIDL        As Long
   Dim sPath       As String * 260
   
   If (SHGetSpecialFolderLocation(0, &H18, PIDL) = 0) And (PIDL <> 0) Then
       If SHGetPathFromIDListA(PIDL, sPath) Then
           GetStartupFolder = Left$(sPath, InStr(sPath, Chr$(0)) - 1)
       End If
   End If
End Function

MsgBox GetStartupFolder