Results 1 to 3 of 3
  1. #1
    SirHumpAlots's Avatar
    Join Date
    Apr 2013
    Gender
    male
    Posts
    12
    Reputation
    10
    Thanks
    1
    My Mood
    Amazed

    DLL cloak/ DLLhelper issue/attempt

    I'm trying to make a dLL cloak/helper for DLL's injected into AVA. (UAV,farmer, etc) I attached the DLL cloak with my injector so as I inject it will cloak the DLL hopefully making it undetectable. My problem is that when I inject the DLL my DLL helper won't recognize the DLL automatically. What do I have to do? Is XIGNCODE the issue? Do I have to make a program to disable XIGNCODE first before I try to cloak the DLL so it won't get a 3rd party program error after the cloaking issue is resolved?

    This is a part of my code.


    Code:
    #pragma comment(lib, "advapi32.lib")
    #pragma comment(lib, "shlwapi.lib")
    #include<windows.h>
    #include <stdio.h>
    #include <tlhelp32.h>
    #include <shlwapi.h>
     
    typedef struct _UNICODE_STRING
    {
        USHORT Length;
        USHORT MaximumLength;
        PWSTR Buffer;
    } UNICODE_STRING, *PUNICODE_STRING;
     
    typedef struct _LDR_MODULE
    {
        LIST_ENTRY              InLoadOrderModuleList;
        LIST_ENTRY              InMemoryOrderModuleList;
        LIST_ENTRY              InInitializationOrderModuleList;
        PVOID                   BaseAddress;
        PVOID                   EntryPoint;
        ULONG                   SizeOfImage;
        UNICODE_STRING          FullDllName;
        UNICODE_STRING          BaseDllName;
        ULONG                   Flags;
        SHORT                   LoadCount;
        SHORT                   TlsIndex;
        LIST_ENTRY              HashTableEntry;
        ULONG                   TimeDateStamp;
    } LDR_DATA_ENTRY , *PLDR_DATA_ENTRY;
     
    typedef struct _PEB_LDR_DATA
    {
        ULONG               Length;
        BOOLEAN             Initialized;
        PVOID               SsHandle;
        LIST_ENTRY          InLoadOrderModuleList; 
        LIST_ENTRY          InMemoryOrderModuleList;
        LIST_ENTRY          InInitializationOrderModuleList;
    
    }

  2. #2
    Predator's Avatar
    Join Date
    Mar 2011
    Gender
    male
    Location
    君の名は。🌸
    Posts
    11,989
    Reputation
    3064
    Thanks
    5,164
    My Mood
    Yeehaw
    First of all you need to research: Is it possible to cloak the .dll an will it work in this case. If your answer i YES then proceed to create this. I suggest you look on MPFGH for already pre made codes.





    MPGH Member Since: 2011
    AVA Minion Since: 7.14.2013 - 7.4.2014

    ⎳ℴ ⎷ ℯ
    進撃の巨人

    私は武器販売業者と一緒に旅行した

    犬の日が終わった


     


    MPGH Relic, Full-time Lurker.

    Join Anime Force, take over the world.

    ✘✘✘













  3. #3
    Riddick's Avatar
    Join Date
    Oct 2012
    Gender
    male
    Location
    Delusional
    Posts
    7,704
    Reputation
    529
    Thanks
    5,193
    My Mood
    Devilish
    You don't need to do this now we have stopped the new xhunter1.sys driver. See my thread on "Xingcode bypass for injectors". Or try in the Programming section for help.
    Last edited by Riddick; 04-15-2013 at 06:43 PM.

Similar Threads

  1. For those of you with the msvcr100.dll issue
    By satindemon4u in forum Combat Arms Help
    Replies: 7
    Last Post: 10-05-2010, 02:38 PM
  2. [HELP] Injector's Dll's And Other issues?
    By mccallybum in forum Combat Arms EU Discussions
    Replies: 5
    Last Post: 06-12-2010, 09:44 AM
  3. ATTN: Everyone with "Missing DLL Issues"
    By McGinley in forum Combat Arms Help
    Replies: 1
    Last Post: 05-19-2010, 11:44 PM
  4. .DLL issue
    By gwentravolta in forum Visual Basic Programming
    Replies: 3
    Last Post: 09-06-2009, 10:59 PM
  5. TNT Hack.dll issue
    By moneydonkey in forum Combat Arms Hacks & Cheats
    Replies: 32
    Last Post: 08-19-2009, 01:07 PM