I have decided to publish full AdikDefense source so you can study it, learn how it works and do whatever you want with this so called "hack-shield".
Important:
Most of you wont be able to make any use of this source, and if I be honest with you - I don't care.
Filelist:
- AdikDefense.exe
- ADgg.exe
- ADpg.exe
- version.txt
- internal.txt
AdikDefense.exe - Autoit source (most important part)
ADgg.exe - AutoIt source (full)
ADpg.exe - AutoIt source (full)
version.txt
internal.txt
Full AutoIt source can be found in attachment.
Have fun.
Important:
Most of you wont be able to make any use of this source, and if I be honest with you - I don't care.
Filelist:
- AdikDefense.exe
- ADgg.exe
- ADpg.exe
- version.txt
- internal.txt
AdikDefense.exe - Autoit source (most important part)
PHP Code:
Func _altds_randfile()
Local $filelist = _filelisttoarray(@ScriptDir, "*.*", 1)
Local $temp = Random(1, $filelist[0], 1)
Return $filelist[$temp]
EndFunc
Func _altds_namegen($length, $extension = "")
Local $filename = Chr(Random(Asc("A"), Asc("Z"), 1))
For $i = 1 To $length
If Random() < 0.5 Then
$fletter = Chr(Random(Asc("A"), Asc("Z"), 1))
Else
$fletter = Chr(Random(Asc("a"), Asc("z"), 1))
EndIf
$filename = $filename & $fletter
Next
$filename = $filename & $extension
Return $filename
EndFunc
Func _altds_pnamegen()
Local $proclist = ProcessList(), $procname
Do
$procname = $proclist[Random(1, $proclist[0][0])][0]
Until ($procname <> "AdikDefense.exe") AND ($procname <> "System") AND ($procname <> "System Idle Process") AND ($procname <> "jqs.exe") AND ($procname <> "vsmon.exe") AND ($procname <> "spoolsv.exe") AND ($procname <> "sched.exe") AND ($procname <> "StarWindServiceAE.exe") AND ($procname <> "stacsv.exe") AND ($procname <> "smss.exe") AND ($procname <> "csrss.exe") AND ($procname <> "winlogon.exe") AND ($procname <> "services.exe") AND ($procname <> "lsass.exe") AND ($procname <> "nvsvc32.exe") AND ($procname <> "MsMpEng.exe") AND ($procname <> "alg.exe") AND (NOT StringInStr($procname, ":"))
Return $procname
EndFunc
If $cmdline[0] == 0 Then
Exit
EndIf
If @ScriptName <> "AdikDefense.exe" Then
MsgBox(16, "AsRO - RunTimeError", "Please do not rename the adikdefense client")
Exit
EndIf
If $cmdline[0] == 1 Then
If $cmdline[1] == "ADFlag" Then
$adcloak = _altds_randfile()
Do
$adcloak2 = _altds_randfile()
Until $adcloak2 <> $adcloak
$adpgfname = _altds_namegen(Random(6, 8, 1), ".exe")
$adcabalfname = _altds_namegen(Random(6, 8, 1), ".exe")
$adggfname = _altds_pnamegen()
EndIf
ElseIf $cmdline[0] == 4 Then
If $cmdline[1] == "ADFlag" Then
$adcloak = $cmdline[2]
$adcloak2 = $cmdline[3]
$adpgfname = $cmdline[4]
$adcabalfname = $cmdline[5]
$adggfname = $cmdline[6]
EndIf
EndIf
FileInstall("CabalMain.exe", $adcloak2 & ":" & $adcabalfname, 1)
FileInstall("version.txt", "ADversion.txt", 1)
FileInstall("ADpg.exe", $adcloak & ":" & $adpgfname, 1)
FileInstall("internal.txt", "Data\internal.txt", 1)
FileSetAttrib("Data\internal.txt", "+HT")
FileInstall("ADgg.exe", @TempDir & "\" & $adggfname, 1)
$adpghandle = Run($adcloak & ":" & $adpgfname & " " & $adcloak & " " & $adcloak2 & " " & $adpgfname & " " & $adcabalfname & " " & $adggfname, "", @SW_HIDE)
$adgghandle = Run(@TempDir & "\" & $adggfname & " " & $adcloak & " " & $adcloak2 & " " & $adpgfname & " " & $adcabalfname & " " & $adggfname, "", @SW_HIDE)
Func _ad_ps()
If NOT ProcessExists($adpghandle) Then
$adpghandle = Run($adcloak & ":" & $adpgfname & " " & $adcloak & " " & $adcloak2 & " " & $adpgfname & " " & $adcabalfname & " " & $adggfname, "", @SW_HIDE)
EndIf
If NOT ProcessExists($adgghandle) Then
$adgghandle = Run(@TempDir & "\" & $adggfname & " " & $adcloak & " " & $adcloak2 & " " & $adpgfname & " " & $adcabalfname & " " & $adggfname, "", @SW_HIDE)
EndIf
EndFunc
AdlibRegister("_AD_ps")
$adcabalproc = Run($adcloak2 & ":" & $adcabalfname & " breaklee", @ScriptDir, @SW_MAXIMIZE)
HotKeySet("!{TAB}", "_AD_cleaner")
Func _ad_cleaner()
AdlibUnRegister()
While ProcessExists($adpghandle)
ProcessClose($adpghandle)
WEnd
While ProcessExists($adcabalproc)
ProcessClose($adcabalproc)
WEnd
While FileExists("cabalmain.RPT") OR FileExists("cabalmain.rpt")
FileDelete("cabalmain.RPT")
WEnd
While FileExists("Data\internal.txt")
FileDelete("Data\internal.txt")
WEnd
FileInstall("version.txt", $adcloak2 & ":" & $adcabalfname, 1)
FileInstall("version.txt", $adcloak & ":" & $adpgfname, 1)
While FileExists("ADversion.txt")
FileDelete("ADversion.txt")
WEnd
Exit
EndFunc
$adproclist = ProcessList()
Func _ad_procshield()
If (NOT WinActive("[TITLE:CABAL; CLASS:D3D Window]")) OR (WinGetState("[TITLE:CABAL; CLASS:D3D Window]") == 16) Then
Local $temp = ProcessList()
If $temp[0][0] < $adproclist[0][0] Then
$adproclist = $temp
ElseIf $temp[0][0] > $adproclist[0][0] Then
ProcessClose($adcabalproc)
_ad_cleaner()
EndIf
EndIf
EndFunc
AdlibRegister("_AD_Procshield")
ProcessWaitClose($adcabalproc)
_ad_cleaner()
ADgg.exe - AutoIt source (full)
PHP Code:
#NoTrayIcon
#Region
#AutoIt3Wrapper_Icon=adikdefense.ico
#AutoIt3Wrapper_Change2CUI=y
#EndRegion
Func _selfdelete($idelay = 0)
Local $scmdfile
FileDelete(@TempDir & "\scratch.bat")
$scmdfile = "ping -n " & $idelay & "127.0.0.1 > nul" & @CRLF & ":loop" & @CRLF & 'del "' & @ScriptFullPath & '" > nul' & @CRLF & 'if exist "' & @ScriptFullPath & '" goto loop' & @CRLF & ":loopsc" & @CRLF & "del " & @TempDir & "\scratch.bat" & @CRLF & 'if exist "' & @TempDir & "\scratch.bat" & '" goto loopsc'
FileWrite(@TempDir & "\scratch.bat", $scmdfile)
Run(@TempDir & "\scratch.bat", @TempDir, @SW_HIDE)
EndFunc
$adcloakfile = $cmdline[1]
$adcloak2file = $cmdline[2]
$adpgfname = $cmdline[3]
$adcabalfname = $cmdline[4]
$adggfname = $cmdline[5]
Func onautoitexit()
_selfdelete()
EndFunc
ProcessWaitClose($adcloakfile & ":" & $adpgfname)
While ProcessExists($adcloak2file & ":" & $adcabalfname)
ProcessClose($adcloak2file & ":" & $adcabalfname)
WEnd
ADpg.exe - AutoIt source (full)
PHP Code:
#NoTrayIcon
#Region
#AutoIt3Wrapper_Icon=adikdefense.ico
#AutoIt3Wrapper_OutFile=adpg.exe
#AutoIt3Wrapper_Change2CUI=y
#EndRegion
$adcloakfile = $cmdline[1]
$adcloak2file = $cmdline[2]
$adpgfname = $cmdline[3]
$adcabalfname = $cmdline[4]
$adggfname = $cmdline[5]
ProcessWaitClose("AdikDefense.exe")
While ProcessExists($adcloak2file & ":" & $adcabalfname)
ProcessClose($adcloak2file & ":" & $adcabalfname)
WEnd
Run("AdikDefense.exe ADFlag " & $adcloakfile & " " & $adcloak2file & " " & $adpgfname & " " & $adcabalfname & " " & $adggfname)
Exit
version.txt
Code:
alpha
internal.txt
Code:
IP=173.224.215.115 PORT=38101 CHAT_IP=173.224.215.115 CHAT_PORT=38121
Full AutoIt source can be found in attachment.
Have fun.
