|
i have no more ideas, i lodge! Here's what i want to do:
Every time the kernel32.dll is loaded, it should load a arbitrary dll, which then should create a log file to capture the name and the process id of the process which has loaded the kernel32.dll (and so the injected dll).
Here's a brief summary of what my code does:
It searches for the section which can be executed, copies my code to the end of this section and changes the entry point in order to jump to my code, and after my code has been executed (and the dll has been loaded - which only should happen if the dllmain retrieves DLL_PROCESS_DETACH) it jumps back to the original entry point (which has been saved before).
The difference between a normal dll and the kernel32.dll is the calculation of the address of the LoadLibraryA function!
I have tried this whole thing with Windows 98, and if someone now says that i am crazy and the stuff mentioned before won't work, even not if a miracle happens, i can say you are wrong. Windows 98 executes my infected kernel32.dll like it does with the original one, without a sinlge error. And YES, my code is executed too, BUT and that's my problem, the injected code doesn't load the DLL, and I DON'T KNOW WHY!!!!!!!!!!!!
Can someone help me ?
Thanks in advance!
|
|
|
|
|
|
|
|
I hope u have gone through article below:
"Three Ways to Inject Your Code into Another Process"
By Robert Kuster
The chosen One 
|
|
|
|
|
Yes, i did!
But my problem is that the LoadLibraryA function doesn't load the dll!!
|
|
|
|
|
hello, im very new to .NET. i started a new VC++ project (No MFC) and now i want to design an about-dialog.
so in my resources i add a new dialog and i want to put buttons, text-labels, etc. on it. but my toolbox is empty.
what can i do?
thanks!
|
|
|
|
|
I've been using VS.NET 2003 for over 6 months now without any problems. Over the last few days I've noticed that the output window is refusing to stay undocked between sessions. It doesn't matter what solution I load the output window always defaults to being docked when VS.NET loads. It will stay undocked for the duration of the session. Does anybody have any suggestions what might be causing the problem or know where the setting is stored?
Systems AXIS Ltd - Software for Business ...
|
|
|
|
|
I've managed to rectify the problem by using the 'reset window layout' button from the options dialog.
Systems AXIS Ltd - Software for Business ...
|
|
|
|
|
Hi All,
How to write a antivirus program in vc++..
Regards,
A.Ilamparithi
|
|
|
|
|
First find some virus, study how they function, and how they infect the system, Then figure out how to reverse its action, And there you have an antivirus.
|
|
|
|
|
Ilamparithi wrote:
How to write a antivirus program in vc++..
Wow - that's a tall order. I would suggest that you actually need to actually design and write one, and then ask for help on more specific issues.
But for starters, I would guess you need to find out how to:
* Hook the filesystem (so you know when files are being changed)
* Storage and update mechanisms for virus signatures
* Heuristics to detect new viruses
* Efficiently scan the changes to see if they match known virus signatures
* Isolate infected files and/or revert the changes being made (for isolation, you probably want a storage environment where files cannot be directly accessed or executed, like an encrypted virtual file system?)
* Internally validate your code to ensures it isn't infected by malicious code or otherwise affected by somethign trying to undermine it (man-in-the-middle attacks, shutting down components, outright replacing them, etc)
That's a big job, so I wish you good luck.
--
Ian Darling
"The moral of the story is that with a contrived example, you can prove anything." - Joel Spolsky
|
|
|
|
|
OK look at one I wrote and see if this would help you.
If so I can post the source.
http://www.digitaltcp.com
Please remember I just check for one virus at a time at this point.
To do it properly you are going to have to do some array work.
Also may have a leak or two.
Wrote it in one night for a buddy the got WelchWorm.
Used a great deal of code off this site.
Best Wishes,
ez_way
|
|
|
|
|
I want to get the driver as listed in title .But I can't do it with GetDriverType because it's parameter can only indicate the cd-rom.And with
GetVolumeInformation I can't get more useful infomation.please give me some suggestion.
thank you!
Happy Gemini
|
|
|
|
|
When I call UpdateData(TRUE) on my non-modal dialog, a box pops up saying that this action is not supported.
Is UpdataData() strictly for modal dialogs?
I have several textfields linked to some UINT variables.
using: [VISUAL STUDIO 6.0 sp5] [WIN98/2]
|
|
|
|
|
UpdateData works on modeless dialogs (and property pages). You probably have removed a control associated to a variable...
|
|
|
|
|
Hi,
Is there some document or thing that explains how to build an Ms Project Add-in using Visual C++ 6.0 ?
Bye
Braulio
|
|
|
|
|
Yes! Search codeproject & assciated web sights.
INTP
|
|
|
|
|
How to Convert the Gerber Files into Enhanced MetaFIles?
dadsadasd
|
|
|
|
|
hello my question is i am trying to make this little project to when i click on a button it will make a web page or text document load up i am still a bit new to C++ so i am not realy sure about how to go about this
any help will be very appriciated
thanks
nate
"Effort within the mind further limits the mind, because effort implies struggle towards a goal and when you have a goal, a purpose, an end in view, you have placed a limit on the mind"
|
|
|
|
|
There you go :
strFileName can be of any file type. The right exe will be launched according to the extension.
<br />
HINSTANCE nResult = ::ShellExecute(NULL,_T("open"),strFileName,NULL,NULL, SW_SHOW );<br />
if ( (int) nResult < 32 )<br />
{<br />
AfxMessageBox(_T("Cannot open file");<br />
}<br />
|
|
|
|
|
perfect thank you so much
"Effort within the mind further limits the mind, because effort implies struggle towards a goal and when you have a goal, a purpose, an end in view, you have placed a limit on the mind"
|
|
|
|
|
I am tring to create a groupbox on the client window
in a wtl project. I can not get it to work, it creates
a window the right size but does not paint the text
or the group outline. I have created buttons and checkboxes
and all work fine painting and all.
Here is the code for the groupbox I am tring to create.
hWndGroup = ::CreateWindow(WC_STATIC, _T("Check Item(s) to Disable."),
WS_CHILD | WS_VISIBLE | BS_GROUPBOX | BS_LEFTTEXT | BS_TEXT,
70, 50, 200, 130, m_hWnd, (HMENU)ID_GROUPBOX,
((LPCREATESTRUCT)lParam)->hInstance, NULL);
Thank You
Bo Hunter
|
|
|
|
|
hWnd = CreateWindow (WC_STATIC,_T("Check Item(s) to Disable."),WS_CHILD |..., 0, 0, width, 30+gHeight + WINDOWHEIGHT, NULL, NULL, ghInst, tData);
Best Wishes,
ez_way
|
|
|
|
|
Try WC_BUTTON for the window class.
Best regards
Oliver
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
