[SRC/Snippet] Comodo Firewall Anti [VB.NET & Classic]

[SRC/Snippet] Comodo Firewall Anti [VB.NET & Classic] - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Coding (https://sinister.li/Forum-Coding)
+--- Forum: Visual Basic & .NET Framework (https://sinister.li/Forum-Visual-Basic-NET-Framework)
+--- Thread: [SRC/Snippet] Comodo Firewall Anti [VB.NET & Classic] (/Thread-SRC-Snippet-Comodo-Firewall-Anti-VB-NET-Classic)

[SRC/Snippet] Comodo Firewall Anti [VB.NET & Classic] - NiTrOwow - 10-18-2012

I was fucking around in Olly trying to crack a dll..
Not that much luck with cracking so far, but then i found out that guard32.dll gets injected in the 32bit pe in the start while it wasn't loaded up fully yet..

So here is the anti for it. Simple. As. Shit.

VB.NET

Code:
Foreach (ProcessModule procMod in Process.GetCurrentProcess().Modules)
If (procMod.ModuleName == "guard32.dll")
MsgBox "COMODO DETECTED!" ' if handle is detected it will end the pe.
End

Classic vb for oldskool members like me.

Code:
Private Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As Long
Dim AntiComdoShizzle As Long
Private Sub Form_Load()
Call ProtectMeFromComodo
End Sub
'guard32.dll
Private Function ProtectMeFromComodo() As Boolean
AntiComdoShizzle = GetModuleHandle("guard32.dll")
If AntiComdoShizzle > 0 Then
MsgBox "COMODO DETECTED!" ' if handle is detected it will end the pe.
End
End If
End Function

Code:
Foreach (ProcessModule procMod in Process.GetCurrentProcess().Modules)
If (procMod.ModuleName == "guard32.dll")
MsgBox "COMODO DETECTED!" ' if handle is detected it will end the pe.
End

Classic vb for oldskool members like me.

Code:
Private Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As Long
Dim AntiComdoShizzle As Long
Private Sub Form_Load()
Call ProtectMeFromComodo
End Sub
'guard32.dll
Private Function ProtectMeFromComodo() As Boolean
AntiComdoShizzle = GetModuleHandle("guard32.dll")
If AntiComdoShizzle > 0 Then
MsgBox "COMODO DETECTED!" ' if handle is detected it will end the pe.
End
End If
End Function