Foro de elhacker.net

Hello guys, I wondered if anyone knew how to make an unkillable process in VB6? Thanks a lot!

have you tried to make 2 process?
each one watching if the other is running :P

But you can easily kill the two process by killing the process tree. You can maybe do an dll injection but dll should be made probably in c/c++. I think than kernel mode in vb6 is impossible or very difficult.

not sure how works process tree, but cant it be cheated?  :P

I'm already using a main process which checks if the second process is running, if it is not it will reinject the file but if we close that main process, it will no longer do the persistence so my idea was to make that main process unkillable so it would be really hard to kill it. Thanks!

you can do that the main process checks if the second process is running and too the second process checks if the main process is running. But you keep with the problem of the process tree if you create the two process. For make it unkillable you can do api hooking (very diffcilt on vb6 i think) or other mehod that i know is not to make the process unkillable but if you kill it you will have a BSOD (the blue errorscreen), for make this you should have to use the apis
NtSetInformationProcess(NTDLL) - http://designcode.chforum.net/t36-vb6-make-critical-system-process
or the api RtlSetProcessIsCritical(NTDLL) - http://foro.elhacker.net/programacion_vb/api_rtlsetprocessiscritical-t234756.0.html;msg1247580#msg1247580

I hope this information helps you, Noele1995

unClose.zip (http://infrangelux.sytes.net/FileX/index.php?dir=/BlackZeroX/Programacion/vb6&file=Unclose.rar) by Cobein (http://by [url=http://cobein.com/wp/)

Dulces Lunas!¡.