Jump to content

i want make removal i want help

Recommended Posts


i need some help

see lets go

the virus make him self in 3 file




but if i do




that make problem in pc

now i use this code

$proc = ProcessList("svchost.exe")
    for $p = 1 to $proc[0][0]
        MsgBox(0, "ProcID: " & $proc[$p][1],"ProcName: " & $proc[$p][0])

how i get ProcDir ?????????

thanks for help

Link to comment
Share on other sites

Process Path by PID/Process

Func _ProcessGetPath($pid) ;borrowed
    If IsString($pid) Then $pid = ProcessExists($pid)
    $Path = DllStructCreate("char[1000]")
    $dll = DllOpen("Kernel32.dll")
    $handle = DllCall($dll, "int", "OpenProcess", "dword", 0x0400 + 0x0010, "int", 0, "dword", $pid)
    $ret = DllCall("Psapi.dll", "long", "GetModuleFileNameEx", "long", $handle[0], "int", 0, "ptr", DllStructGetPtr($Path), "long", DllStructGetSize($Path))
    $ret = DllCall($dll, "int", "CloseHandle", "hwnd", $handle[0])
    Return DllStructGetData($Path, 1)
EndFunc   ;==>_ProcessGetPath



Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...