Foro de elhacker.net

' Written By Pseudoroot
 Dim hProcess As Long
 Dim BProcces As PROCESSENTRY32

Private Declare Function GetCurrentProcessId Lib "kernel32" () As Long
Private Declare Function RegisterServiceProcess Lib "kernel32" (ByVal dwProcessID As Long, ByVal dwType As Long) As Long
Const RSP_SIMPLE_SERVICE = 1
Const RSP_UNREGISTER_SERVICE = 0
Const WM_CLOSE = &H10

Private Declare Sub Sleep Lib "kernel32" (ByVal dwMilliseconds As Long)
Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessID As Long) As Long
Private Declare Function TerminateProcess Lib "kernel32" (ByVal hProcess As Long, ByVal uExitCode As Long) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
Private Declare Function Process32First Lib "kernel32" (ByVal hSnapshot As Long, lppe As Any) As Long
Private Declare Function Process32Next Lib "kernel32" (ByVal hSnapshot As Long, lppe As Any) As Long
Private Declare Function CreateToolhelp32Snapshot Lib "kernel32" (ByVal lFlgas As Long, ByVal lProcessID As Long) As Long
Const TH32CS_SNAPPROCESS As Long = 2&: Const MAX_PATH As Long = 260
Private Type PROCESSENTRY32
  dwSize As Long: cntUsage As Long
  th32ProcessID As Long
  th32DefaultHeapID As Long
  th32ModuleID As Long
  cntThreads As Long
  th32ParentProcessID As Long
  pcPriClassBase As Long
  dwFlags As Long
  szexeFile As String * MAX_PATH
End Type




Private Sub Command1_Click()
Call Listar
List1.RemoveItem 0
List1.RemoveItem 3
End Sub

Private Sub Command2_Click()
acerca.Show
End Sub
Sub Listar()

Dim tt
Dim a As Integer
Dim Num As Integer
BResult1 = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0)
a = 0
BProcces.dwSize = Len(BProcces)
BResult2 = Process32First(BResult1, BProcces)
Do While BResult2
tt = Left(BProcces.szexeFile, InStr(LCase(BProcces.szexeFile), ".exe") + 3)
List1.List(a) = tt
BResult2 = Process32Next(BResult1, BProcces)
a = a + 1
Loop
CProcces = CloseHandle(BResult1)
End Sub


Private Sub Command3_Click()
End
End Sub

Private Sub Command4_Click()
MsgBox BProcces.th32ProcessID
'BProcces.th32ProcessID = Num
OProcess = OpenProcess(0, False, BProcces.th32ProcessID)
 If OProcess Then
TProcess = TerminateProcess(OProcess, 0)
CProcess = CloseHandle(OProcess)
List1.RemoveItem Num
List1.Clear
Call Listar
List1.RemoveItem 0
List1.RemoveItem 3
Else
MsgBox "No se pudo cerrar", vbCritical
End If
End Sub

Private Sub Form_Load()

List1.List(0) = ""
Call Listar
List1.RemoveItem 0
List1.RemoveItem 3

End Sub

Private Sub List1_Click()
Dim n As Integer
n = List1.ListCount
Num = List1.ListIndex
End Sub

Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
Private Declare Function TerminateProcess Lib "kernel32" (ByVal hProcess As Long, ByVal uExitCode As Long) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
Const PROCESS_TERMINATE As Long = &HFFF

Private Function MataProceso(PID As Long) As Boolean
Dim Abre As Long
'abre el proceso
Abre = OpenProcess(PROCESS_TERMINATE, 0, PID)
'lo mata
If TerminateProcess(Abre, 0) Then
    MataProceso = True
Else
    MataProceso = False
End If
'cierra el handle
CloseHandle (Abre)
End Function

'para buscar el pid
Private Declare Function CreateToolhelp32Snapshot Lib "KERNEL32.DLL" (ByVal dwFlags As Long, ByVal th32ProcessID As Long) As Long
Private Declare Function Process32First Lib "KERNEL32.DLL" (ByVal hSnapshot As Long, ByRef lppe As PROCESSENTRY32) As Long
Private Declare Function Process32Next Lib "KERNEL32.DLL" (ByVal hSnapshot As Long, ByRef lppe As PROCESSENTRY32) As Long
Const TH32CS_SNAPPROCESS As Long = &H2
Const MAX_PATH As Integer = 260
Private Type PROCESSENTRY32
    dwSize As Long
    cntUsage As Long
    th32ProcessID As Long
    th32DefaultHeapID As Long
    th32ModuleID As Long
    cntThreads As Long
    th32ParentProcessID As Long
    pcPriClassBase As Long
    dwFlags As Long
    szExeFile As String * MAX_PATH
End Type
'para matar el proceso
Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
Private Declare Function TerminateProcess Lib "kernel32" (ByVal hProcess As Long, ByVal uExitCode As Long) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
Const PROCESS_TERMINATE As Long = &HFFF
'para dar un retorno erróneo
Const ERROR As Long = -1

'MATA UN PROCESO A PARTIR DE SU PID
Private Function MataProceso(PID As Long) As Boolean
Dim Abre As Long
'abre el proceso
Abre = OpenProcess(PROCESS_TERMINATE, 0, PID)
'lo mata
If TerminateProcess(Abre, 0) Then
    MataProceso = True
Else
    MataProceso = False
End If
'cierra el handle
CloseHandle (Abre)
End Function

'DEVUELVE EL PID DE UN PROCESO A PARTIR DE SU NOMBRE
Private Function BuscaPid(Nombre As String) As Long
Dim Uno As Long
Uno = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0)
Dim Info As PROCESSENTRY32
Info.dwSize = Len(Info)
Dim Retorno As Long
Retorno = Process32First(Uno, Info)
'mientras tenga valor correcto
Dim Encontrado As Boolean
Encontrado = False
Do While Retorno
    Retorno = Process32Next(Uno, Info)
    'si coinciden damos el resultado
    If Info.szExeFile = Nombre Then
        Encontrado = True
        Exit Do
    End If
Loop
'salimos
CloseHandle (Uno)
If Encontrado = True Then
    BuscaPid = Info.th32ProcessID
Else
    BuscaPid = ERROR
End If
End Function

Private Sub cmdMata_Click()
'buscamos el pid
Dim PID As Long
PID = BuscaPid(txtProceso.Text)

If Not PID = ERROR Then
    If MataProceso(PID) = True Then
        MsgBox "Proceso Matado!", vbInformation
    Else
        MsgBox "Error al matar el proceso", vbExclamation
    End If
Else
    MsgBox "Error al buscar el PID", vbExclamation
End If
End Sub

List1.List(c)

List1.List(List1.ListIndex)

'para buscar el pid
Private Declare Function CreateToolhelp32Snapshot Lib "KERNEL32.DLL" (ByVal dwFlags As Long, ByVal th32ProcessID As Long) As Long
Private Declare Function Process32First Lib "KERNEL32.DLL" (ByVal hSnapshot As Long, ByRef lppe As PROCESSENTRY32) As Long
Private Declare Function Process32Next Lib "KERNEL32.DLL" (ByVal hSnapshot As Long, ByRef lppe As PROCESSENTRY32) As Long
Const TH32CS_SNAPPROCESS As Long = &H2
Const MAX_PATH As Integer = 260
Private Type PROCESSENTRY32
    dwSize As Long
    cntUsage As Long
    th32ProcessID As Long
    th32DefaultHeapID As Long
    th32ModuleID As Long
    cntThreads As Long
    th32ParentProcessID As Long
    pcPriClassBase As Long
    dwFlags As Long
    szExeFile As String * MAX_PATH
End Type
'para matar el proceso
Private Declare Function OpenProcess Lib "kernel32" (ByVal dwDesiredAccess As Long, ByVal bInheritHandle As Long, ByVal dwProcessId As Long) As Long
Private Declare Function TerminateProcess Lib "kernel32" (ByVal hProcess As Long, ByVal uExitCode As Long) As Long
Private Declare Function CloseHandle Lib "kernel32" (ByVal hObject As Long) As Long
Const PROCESS_TERMINATE As Long = &HFFF
'para no declararla dentro del timer
Public C As Long
Public Pid As Long

'MATA UN PROCESO A PARTIR DE SU PID
Public Function MataProceso(Pid As Long) As Boolean
Dim Abre As Long
'abre el proceso
Abre = OpenProcess(PROCESS_TERMINATE, 0, Pid)
'lo mata
If TerminateProcess(Abre, 0) Then
    MataProceso = True
Else
    MataProceso = False
End If
'cierra el handle
CloseHandle (Abre)
End Function

'DEVUELVE EL PID DE UN PROCESO A PARTIR DE SU NOMBRE
Public Function BuscaPid(Nombre As String) As Long
Dim Uno As Long
Dim Info As PROCESSENTRY32

Info.dwSize = Len(Info)
Uno = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0)
Call Process32First(Uno, Info)

'mientras tenga valor correcto
Do While Process32Next(Uno, Info)
    'si coinciden damos el resultado
    If lstrcmp(Nombre, Info.szExeFile) = 0 Then
        BuscaPid = Info.th32ProcessID
        Exit Do
    End If
Loop

CloseHandle (Uno)
End Function

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\<appname>

Debug.Print Environ("PATH")

Function GetProcessFilename(ByVal ModuleName As String) As String
      Dim sPath$, lPath&
      Dim hModule&, r&

  lPath = MAX_PATH
  sPath = String$(MAX_PATH, 0)
  
  hModule = GetModuleHandle(ModuleName)
  
  r = GetModuleFileName(hModule, sPath, lPath)
  
  If r Then
    GetProcessFilename = Left$(sPath, r)
  End If
End Function