First release

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 Alberto Strappazzon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,26 @@
+# SCAM Lock Tool
+![SCAM Lock Tool](https://puu.sh/BnTGm.png)
+
+This is a fake SAM Lock Tool (known as syskey). Scammers use it to lock their victims out of their computers, encrypting the credentials stored inside the SAM file with a password. This version is virtually identical to the original syskey, the only difference is that scammers won't be able to encrypt SAM.
+
+## How to replace syskey
+Replacing a system file is not as easy as a copy and paste, you need to take ownership over the file. To do so:
+ - Go to `C:\Windows\System32\` and right click `syskey.exe`
+ - Click **Properties**, open the **Security** tab, click the **Advanced** button, then open the **Owner** tab
+ - As you can see the owner of the file is **TrustedInstaller** and not your current account
+ - Click on the **Edit** button (in Windows 10, it’s **Change**) and select the *Administrators* group
+ - Click **OK**. The current owner is now the **Administrators** group (which includes your account assuming you are an administrator)
+ - Click **OK** until you have closed all properties windows and are back to the Explorer screen
+ - Right-click on **syskey.exe** and click **Properties > Security tab > Advanced button** again
+ - Click the **Change permissions...** button, select **Administrators** from the list and then click the **Edit...** button
+ - Now tick the box next to **Full Control** and click **OK** until you close all the dialogs
+ - Windows will ask you: "*You are about to change the permission settings on system folders* [...] *Do you want to continue?*", confirm with **Yes**
+
+![File Permissions](https://puu.sh/BnUcQ.png)
+
+Now you can rename **syskey.exe** in **syskey.exe.bak** to make a backup. At this point all you have to do is paste my syskey.exe inside system32.
+
+## Preview
+You can see the fake syskey in action below. An higher quality video is available [here on puush](https://puu.sh/By2sw.mp4).
+
+![SCAM Lock Tool Preview](https://puu.sh/By2SK.gif)

SCAM Lock Tool.sln

@@ -0,0 +1,25 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio 15
+VisualStudioVersion = 15.0.28010.2003
+MinimumVisualStudioVersion = 10.0.40219.1
+Project("{F184B08F-C81C-45F6-A57F-5ABD9991F28F}") = "SCAM Lock Tool", "SCAM Lock Tool\SCAM Lock Tool.vbproj", "{17EE8E7F-AF46-49C2-B2D5-EECD904FE465}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{17EE8E7F-AF46-49C2-B2D5-EECD904FE465}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{17EE8E7F-AF46-49C2-B2D5-EECD904FE465}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{17EE8E7F-AF46-49C2-B2D5-EECD904FE465}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{17EE8E7F-AF46-49C2-B2D5-EECD904FE465}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+	GlobalSection(ExtensibilityGlobals) = postSolution
+		SolutionGuid = {BBE53B7D-E040-402A-97B9-ABD326A591B5}
+	EndGlobalSection
+EndGlobal

SCAM Lock Tool/ApplicationEvents.vb

@@ -0,0 +1,10 @@
+Namespace My
+    ' The following events are available for MyApplication:
+    ' Startup: Raised when the application starts, before the startup form is created.
+    ' Shutdown: Raised after all application forms are closed.  This event is not raised if the application terminates abnormally.
+    ' UnhandledException: Raised if the application encounters an unhandled exception.
+    ' StartupNextInstance: Raised when launching a single-instance application and the application is already active. 
+    ' NetworkAvailabilityChanged: Raised when the network connection is connected or disconnected.
+    Partial Friend Class MyApplication
+    End Class
+End Namespace