Relax, I have already made another bypass, I will post it this weekend.
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
i try it but not work sir. and there is 2 code like "if (!lstrcmpiA(mEntry.szModule, DLLNAME))", mEntry.hModule" in your source code.Quote:
Inside my code, on "if (!lstrcmpiA(mEntry.szModule, DLLNAME))", mEntry.hModule ir what you need to do it.
Just do some like:
And it is done.PHP Code:void* ptr = GetProcAddress(LoadLibraryA("kernel32.dll"), "FreeLibrary");
CreateRemoteThread(hProcess, 0, 0, (LPTHRE....)ptr, (void*)mEntry.hModule, 0 0);