Login Register






Thread Rating:
  • 0 Vote(s) - 0 Average


Anti Avast 5 SandBox Example C++ filter_list
Author
Message
Anti Avast 5 SandBox Example C++ #1
Well, after a long stupid discussion and noobies that need help. Screw it.


Lets change the game a bit.

snxhk.dll is the dll that gets injected by the process of comodo to be able to sandbox a file that you selected or a suspicious file that comodo sandboxed for you.


In this example code i will test it on Sandboxie because i don't have avast anymore in my vm. Just change the dll and change the code to your needs. Done.

Code:
#include "stdafx.h"
#include "windows.h"

int main()
{
    HMODULE hDll = GetModuleHandle("SbieDll.dll");
    printf ("hDll: 0x%08X\n", hDll);
  
    if (NULL != hDll) {
    printf("sanboxed\n");
    return 0;
    }
    else {
    printf("no sandbox handle detected!\n");
    return 0;
    }
}

[Image: iL1reR8ptsnhy.jpg]

As simple as fucking that.

Reply

Anti Avast 5 SandBox Example C++ #2
Well, after a long stupid discussion and noobies that need help. Screw it.


Lets change the game a bit.

snxhk.dll is the dll that gets injected by the process of comodo to be able to sandbox a file that you selected or a suspicious file that comodo sandboxed for you.


In this example code i will test it on Sandboxie because i don't have avast anymore in my vm. Just change the dll and change the code to your needs. Done.

Code:
#include "stdafx.h"
#include "windows.h"

int main()
{
    HMODULE hDll = GetModuleHandle("SbieDll.dll");
    printf ("hDll: 0x%08X\n", hDll);
  
    if (NULL != hDll) {
    printf("sanboxed\n");
    return 0;
    }
    else {
    printf("no sandbox handle detected!\n");
    return 0;
    }
}

[Image: iL1reR8ptsnhy.jpg]

As simple as fucking that.

Reply

RE: Anti Avast 5 SandBox Example [VB5/6 / VB.NET] #3
help me pleaes

[Image: 1170343848.png]

Reply

RE: Anti Avast 5 SandBox Example [VB5/6 / VB.NET] #4
help me pleaes

[Image: 1170343848.png]

Reply

RE: Anti Avast 5 SandBox Example [VB5/6 / VB.NET] #5
ultra64: Looks to me like you're missing a reference to some assembly.

It would help to show the messages in English though this is an English speaking forums, so you're most likely to get help. I don't understand what the messages say for example.
I love creativity and creating, I love science and rational thought, I am an open atheist and avid self-learner.

Reply

RE: Anti Avast 5 SandBox Example [VB5/6 / VB.NET] #6
ultra64: Looks to me like you're missing a reference to some assembly.

It would help to show the messages in English though this is an English speaking forums, so you're most likely to get help. I don't understand what the messages say for example.
I love creativity and creating, I love science and rational thought, I am an open atheist and avid self-learner.

Reply

RE: Anti Avast 5 SandBox Example [VB5/6 / VB.NET] #7
ultra64, Op: That's C# not VB.Net.

Here it is in VB.Net:
Code:
For Each procMod As ProcessModule In Process.GetCurrentProcess().Modules
            If procMod.ModuleName = "snxhk.dll" Then Debug.Print("I'm sandboxed by Avast Sandbox")
        Next
[Image: rytwG00.png]
Redcat Revolution!

Reply

RE: Anti Avast 5 SandBox Example [VB5/6 / VB.NET] #8
ultra64, Op: That's C# not VB.Net.

Here it is in VB.Net:
Code:
For Each procMod As ProcessModule In Process.GetCurrentProcess().Modules
            If procMod.ModuleName = "snxhk.dll" Then Debug.Print("I'm sandboxed by Avast Sandbox")
        Next
[Image: rytwG00.png]
Redcat Revolution!

Reply

RE: Anti Avast 5 SandBox Example [VB5/6 / VB.NET] #9
(12-20-2012, 01:08 PM)Coder-san Wrote: ultra64, Op: That's C# not VB.Net.

Here it is in VB.Net:
Code:
For Each procMod As ProcessModule In Process.GetCurrentProcess().Modules
            If procMod.ModuleName = "snxhk.dll" Then Debug.Print("I'm sandboxed by Avast Sandbox")
        Next

Well sorry to bump this up but indeed it was my mistake. It is .NET but not VB. Sorry, changing OP now.

Reply

RE: Anti Avast 5 SandBox Example [VB5/6/C#,VB.NET] #10
Can you explain this a bit , I didn't get much in my head , but I know its something cool
[Image: OilyCostlyEwe.gif]

Reply







Users browsing this thread: 1 Guest(s)