Now THIS is what I'm talking about! =)

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Oh, here's another question: What 
skin/XP style are you using?

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Does this work in 9x ? 

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

heres another GURU. 5* 

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

It doesn't work in 9X yet, there are 
some hidden API calls to do this, but I 
haven't gotten around to them yet. If 
there is a lot of demand for a 
9x-compatible version I might try to 
work on it. The problem is that I don't 
have 9x anymore, so it would be really 
hard for me to debug. Ultimatum: I am 
using the skin from Windows 
Longhorn..Plex.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

He owe's you nothing Dream.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Thnaks for demo. Search for Plugins on 
PSC and you will also see some ideas on 
how to do the same. 5 from here

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Dream, perhaps you had trouble reading 
the comments in the code that say 
"NT-Based system" and "I'm trying to 
get this to work under 9x." Besides, 
some research on msdn.microsoft.com and 
looking for the requirements for some 
of the API calls would clearly show you 
that it's NT-only for now.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Eagle, I find plugins to be something 
totally different. While the concept 
would work for adding new features to 
an application, it doensn't have the 
advantage of totally hiding your 
code...plugins still need a file, and 
run in your application's memory.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

umm.... how come the zip only contained 
a module file....

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Alek you need his first submission for 
the rest of the files. ALEXANDRU: READ 
WHAT I TYPED, you made no mention of 
the fact it does not work on 9x systems 
in the first version, so not 
suprisingly I overlooked your comment 
about it in the second version, thus I 
spent considerable time trying to get 
this to work. Pay Attention.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Oh and Alek Kwok... check out last 
months contest winners for the first 
version!

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Hi Dream..I've just noticed that PSC 
took out my other files...very weird. 
I'll try to re-upload, altough yes, 
using the old ones will work. Once 
compiled, the app should run on any NT+ 
machine with msvbvm60.dll (the VB 
runtime).

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

gr8 work Alex.  5* from me.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Great Job man !!
Abs(5) from me ;)

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Very Very VERY Tight (5/5)

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Isnt msvbvm60dll installed with windows 
on NT based systems ie: 2kpro, 
longhorn, and xp ? p.s. Im installing 
XP on another terminal to get a look at 
this!

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

The Idea isn't bad..So there is 
problem
what you'll encount:
1--IF 
BASE ADDRESS NAMED WITH VirtualAllocEx 
is in USE BY ANOTHER MODULE AND KERNEL 
ALLOCATE FIRST HIGHER
FREE BASE 
ADDRESS
2--WHAT'S THAT MEANS?
YOUR 
EXE DS:[] IS STILL ON LOWER 
ADR..
Example:
BASE 
MODULE=1000000
push ds:[1001000] 
(REFERENCE ADDRESS USE)
with Dinamic 
linking (dll)
if kernel load DLL on 
higher address
your code will 
be:
BASE MODULE=C200000
push 
ds:[C201000] (REFERENCE ADDRESS 
USE)
---------------
In your 
case:
CODE SEGMENT WILL BE ON PREVIOUS 
BASE
ADDRESS AND YOU'LL ENCOUNT 
EXCEPTION_ACCESS_VIOLATION,or 
else
EXCEPTION....
.................
...................
Conclusion:
Your 
example works only if BASE 
ADDRESS
isn't in use by another 
module,also
your STACK is to small and 
pushing more
than 10-20 parameters on 
it also 
cause
EXCEPTION...
-------------------
-----------------
I suggest you to 
Execute DLL through Remote Thread 
insted of EXE...
GRETZ

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

i see your project is progressing. 
unfortunately it's still not possible 
to run "normal" VB code in the host 
process.
if you are wondering the 
reason for GPFs it is that COM 
libraries are not initialized on the 
remote thread! neither is the VB 
runtime! 
the same problem is faced 
when using CreateThread API function 
for in-process multi-threading in a VB 
application. you can find my solution 
here 
http://www.planet-source-code.com/vb/scr
ipts/ShowCode.asp?txtCodeId=36373&lngWId
=1
i'm quite intersting in the 
progress of the injection attempt, 
ultimately would like to be able to 
execute fully fledged VB code 
"remotely".
keep up the good 
work,
</wqw>

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Alexandru Ionescu, another TERRIFIC 
program, i liked the other one you 
posted, keep me informed of any new 
releases 5 globes! 

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

vf-fcro: you're right about that, there 
is a risk that 0x13140000 might already 
be taken...however, since i randomly 
chose that number, and i've ran it on 
many many computers, as well as all the 
PSC users, I haven't found a case of 
something like that happening. Also, I 
can't really allocate anything else 
then taht address if it fails, since 
the base address of the EXE will still 
be the same. IF it doesn't work on 
someone's computer, they will have to 
recompile it.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Vlad: I will take a look at your code. 
However, it is possible to run some VB 
functions as you've seen (Instr, left, 
mid). However I think you were 
referring to using forms and class 
modules, etc, instead of relying on 
pure API. Thanks for the link.
Thank 
you everyone for your appreciation 
=)
It's a great birthday present (26th 
april 86).

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Dream: The VB Runtime is not installed 
by default on NT systems...maybe on XP. 
However, I can try to include it and 
compress it into the exe. It would then 
extract itself when it's run, removing 
the need for you to install it on every 
computer.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Its Great use if u are a hacker other 
that that no use for it...

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Actually, it can have many other 
usages:
Self-modidying code for 
auto-updates
Running a file only once, 
and then deleting itself
Adding new 
modules to an application that doesn't 
support plugins
Crash recovery 
(reloading the program from 
memory)
And accessing/reading memory 
from other processes for debugging 
purposes. =)

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

I believe this is a very nice code, but 
I can't run it because the 
CompileControl doesn't seem to work. It 
says it can't find the 

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

"Make" menu. So i changed the "Make" 
thing to "Crea" in the compiler 
control, cause i have the Italian VB. 
Nothing happened. Please help...

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Loopz: The line Set cbFileMenu = 
mIDE.CommandBars(1).Controls("File")..."
File" should be in Italian, the name of 
the first menu in VB, where you have 
open/save. If Left$(cbMakeMenu.Caption, 
4) = "Make" should be the first four 
characters of the make command.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Yes, i changed it, but nothing still 
happens

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Which error do you get? Cannot find 
"File" or cannot find "make"?

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

cannot find make

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Explorer.exe crashes when I run 
pscinject.exe. I'm using windows XP pro.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Force Linker to make an Exe with 
Exports
with Realocation 
Table..
Pushing exe on STATIC BASE 
ADDRESS expose too many 
problems!
Knowing how NTDLL.DLL load 
modules you
can avoid many troubles 
like Loading Dependent DLL or 
Drivers.
I suggest you to Use 
LdrLoadDll API from NTDLL which Loads 
all FORWARDS DLL (indenpendenies) 
unlike LoadLibrary KERNEL API which 
load only named Module in Virtual 
Address Space!
i think VB isn't 
right place to do as you try....
Maybe 
you should try  to use a debugger Loop 
instead of this approach.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

loopz's problem was fixed...if you have 
another version of VB, simply remove 
the "for..next" loop in 
compilecontroler (where it gives the 
error) and set the index to 13.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

While this can be used for malicious 
purposes, it's of great use in other 
situations. great code. 5 globe

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Real good work! Nice to use for most 
"interesting" things. Difficult to 
understand but iam growing on the 
challenge.... ;) 5*4u

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

nice code your a genius 5/5 lets hope 
we can get some vb functions working 
soon ? :P

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Happend to find something that may be 
of interest and use for making it 9x 
compatible. Use EliCZ's RT.DLL library. 
It is a 2.5kb ASM DLL that emulates NT 
functions for 9x. His homepage is 
http://elicz.cjb.net/

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

To Alexandru Ionescu -
I received 
your email, downloaded both the version 
and it ROCKS.
Thank you,

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

***** Globes From me,

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

why are you all bashing his program...? 
 great piece of code,  didn't think 
someone would take the time to do this 
in VB ;] 

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Why is it that I'm worrying about 
lamers using this code to create 
another 

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Good work,but Win98(95) does not have 
CreateRemoteThread/VirtualAllocEx/Virtua
lFreeEx.But you can download special 
DLL(which these API contain) here 
http://www.anticracking.sk/EliCZ/export/
EliRT.zip.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Thanks for the elirt link Libor and 
Novasoft. I'll try to incorporate the 
DLL in the next version.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Can you make one demostration of your 
code..like you said it can be used 
for..like crash recovery..? self 
destroy?.. this will only work for the 
programs that are created in vb right?  
can you do this remotely in a lan? like 
a remote guardian or something like 
that (hope you get the idea)?

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

He doesn't have to make a demonstration 
to prove his statements. ALL code can 
be used for something bad. KILL can 
delete files, or it can delete the 
programs preference file safely. In 
real life a pencil can write or if the 
user decides to use it as a weapon, 
it's his choice just as the code here 
is. 

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

I saw your script on IRC and i must say 
i was very impressed with the work you 
have done with it. Excellent, keep up 
the good work.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Great code, hope that the next version 
will support COM and win9x

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

To:Alexandru Ionescu
Hi, I think many 
users have Win98/95 which don't contain 
CreateRemoteThread. I have from the 
Internet good articles and 
sources(C,Delphi,ASM not VB :-( ) about 
API hooking and Code injection, if you 
want it I can send it.(I don't have 
time and experience to rewrite it to 
VB). I'm looking forward to your API 
hooking code.
Libor

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

To Dream: The VB runtime is installed 
on Windows 2000 Pro.   Sandele, pare ca 
i-ai dat gata :)

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

5* for you
The code might be used for 
destroy, but this comunity is rather 
for learn, and this is really 
interesting job!
Thanks for your code, 
and keep improving it, there are 
beginners, like me, that can´t do this 
work.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Why not use compile control to make a 
dll... Add in some blank functions then 
edit them to be this 
format
pushad
pushfd
; set up the 
function parameters
call 
realFunction
popfd
popad
also... 
why not just come up with the asm 
machine code for calling LoadLibrary to 
load a vb DLL -- then you could write 
that as your 

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Excellent piece of code here!! Please 
can you submit a win9x version in the 
near future. 5 globes from me!

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Excellent Work!! **5** from 
me...
Put how to open system process 
or get the window handle of it to 
inject our code in the system 
process,
any way in c++ i could open 
any 
system process as the same way 
u
are using, i don`t know way
i 
hope you can find a way,
thanks for 
sharing it.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Win9x will be coming up soon, I'm 
currently in exam period and haven't 
had the time to update the code.
As 
for hijacking system processes, you'll 
need to use the SetDebugPrivileges 
Token. I'll add that in the next 
edition of the code as well.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

okay thanks a lot,
and i am watting 
the next version.
i hope it will not 
be long time,
take care, thanks 
again,

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

hi again,
heay look i can now inject 
my code 
into nt system processes but 
they
all crashed after creating 
remote
thread i don`t know why,
so 
please help me i need your help
really 
i need to run this work.
thanks,

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Win2003 looks alot better than XP for 
sure

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Wow. I didn't even think this was 
possible before seeing this submission. 
5 globes from me.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

HELP!!!
i'm not able to get this code 
run!
error: explorer.exe: 

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

i don't know, why the rest has not been 
submitted:
the error is: explorer.exe: 
process "written" on memory is 
illegal
i have windows xp
thanx
  agent

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

i would give you 5 but, all it does is 
crash explorer..no 
injection..boring..yawn..back to asm

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

rae: What version of Windows are you 
running? Did you properly set up the 
Imagebase with compile controller and 
read the instructions?
agent: Did you 
properly set up the imagebase with 
compile controller and read all the 
instructions?

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

Wow, this is going to provide learning 
material for quite some time.  Thanks.  
Please keep up the excellent work, I 
look forward to the next version.  Best 
Regards.

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason:
 

windows xp 2600 sp1
yes i followed 
the instructions but after restarting 
my pc and running it again, it worked 
=] *****

Keep the Planet clean! If this comment was disrespectful, please report it:
Reason: