|
Is it possible to bring mdi child frame to top without
activating the frame?
CChildFrame * pChildFrame = ( CChildFrame *)pView ->GetParent();
|
|
|
|
|
Hey everyone,
is it possible, unload any dll module (not my) from any strong system process e.g.
rundll32 or svchost.
How can I do it ?
Sorry for my english and thanks for advice
Mila
|
|
|
|
|
I do not know of a way of telling another process to unload its dynamicly linked binaries. In fact if you could tell any arbitrary binary to load and unload dynamic bindings outside of the process that could be an exploit (tell it to unload svchost, put the malicious version in, tell it to load it).
Why do you want to unload rundll32 or svchost? Instead of asking a specific question maybe you should step back and see what you are really trying to solve.
|
|
|
|
|
I'm trying write some little application whereby I can unloading and deleting malicious modules - dll's like keyloggers or adware components. Part of that pests are loaded when starts OS and are modules of e.g. rundll32.exe.
What can I do, to delete thats dll's ?
Mila
|
|
|
|
|
Unfortunately Windows has a habbit of locking files mapped into memory. Why it does this I'm not sure since it shouldn't matter what happens to the binary after it is read into memory.
One thing I've been meaning to look into is how to hook into the pre-boot and boot process. For instance when a kernel patch is applied to the OS you have the very same problem (you can't copy the new kernel bins while the kernel is running). What happens is you tell the boot loader to copy and configure files before the kernel is fully loaded. Especially with some classes of malware you really need a "true" single user mode where one can make manipulations to the system by hand without fully initalizing the kernel.
I like the fact that anti-virus software is starting to key into the fact that malware and spyware are just as bad as any virus (in fact one could term them as trojans). I'm not trying to discourage you but some of this stuff is real harry stuff requiring knowledge of the internals to fight.
|
|
|
|
|
Tom Larsen wrote:
Unfortunately Windows has a habbit of locking files mapped into memory. Why it does this I'm not sure since it shouldn't matter what happens to the binary after it is read into memory.
That's because windows creates a file mapping to the executables instead of reading it all into memory in one sweep.
"After all it's just text at the end of the day. - Colin Davies
"For example, when a VB programmer comes to my house, they may say 'does your pool need cleaning, sir ?' " - Christian Graus
|
|
|
|
|
Have you any idea, how am I do it ?
Mila
|
|
|
|
|
If you want to know how to map a file, look up the methods CreateFileMapping and MapViewOfFile in the Win32 API.
But Tom was right about your original question, you can't tell a process to unload dll's.
"After all it's just text at the end of the day. - Colin Davies
"For example, when a VB programmer comes to my house, they may say 'does your pool need cleaning, sir ?' " - Christian Graus
|
|
|
|
|
Most of the time I insert an Active X control on my DIalog or FormView . Now i want to create these components dynamically at run time based on an configuration file . I am unsure as to how I would write Event handlers for the same as for pre-existing objects the DDX call is hardcoded ! Please help
|
|
|
|
|
Howdy
An app I have inherited at work seems to have a strange problem, but one that may occur (it already has once)
While the app is a Windows-only program, people with unix/linux can share a folder using Samba and that can be mapped into a Windows users computer. It is also possible that a unix user has a symbolic link in a folder that points back to a parent directory, creating a looping directory structure.
On unix, I could detect this pretty easily using stat(), however on Windows, these symbolic links appear exectly the same as the original file/folder, making it possible for the app to get caught in a never ending cycle of directory scanning.
Is there any way to pick this up in windows?
Cheers
|
|
|
|
|
Hi all,
I need to know what is the future of COM in the presence of .Net architecture. Will COM survive or not? I need to know it so that I put my learning efforts in right directions.
Thanks for all those who ll take some time to answer this question.
Regards
|
|
|
|
|
Learn COM first. Once you know COM, .NET is easy.
It is similar to learning C and C++. Other high-level languages including Java, C#, VB, etc. are simple.
Kuphryn
|
|
|
|
|
kuphryn wrote:
Learn COM first. Once you know COM, .NET is easy.
I am learning COM these days. I am learning it from 2 books.
1. Inside COM
2. Inside ATL
I have not developed any COM server yet. As I am reading "Inside ATL" and other stuff on COM on web, I foung that this path will lead to MTS (Microsoft Transaction Server) programming. (I dont know whether i m right or wrong, it is only my guess.)
The thing i need to know is whether COM is alive in today world. i.e. are new projects being implemented using COM or .Net has obsoleted COM since .Net's component model is much simpler.
|
|
|
|
|
It's hard to tell. .NET is still young.
Kuphryn
|
|
|
|
|
Hey everyone,
Since I started studing MFC I am starting to read alot on UNICODE. I read a few pages in my book about it and I also read an article on this site about it. I understand the conscept, I am just not sure on if I should use it and how to use it. Is there a library that chances everything into Unicode at compile time or do I have to change all my variables to unicode?
Thanks for your help!
|
|
|
|
|
When working in MFC applications and your not sure whether you will need UNICODE or not, you just need to be carful in your string handling. Declare characters etc using the TCHAT type. This will resolve to either char or wchar depending on whether you have UNICODE defined. This will make all your types switch automatically.
After that, your big concern will be string manipulation functions. strlen() etc. They all have an equivalent beginning with _tcs which resolves to either the ANSI or UNICODE versions of the functions depending on the UNICODE define.
The MFC CString class is automatically UNICODE complaint if your build for UNICODE.
Roger Allen - Sonork 100.10016
Roger Wright: Remember to buckle up, please, and encourage your friends to do the same. It's not just about saving your life, but saving the quality of life for those you may leave behind...
|
|
|
|
|
Is the UNICODE only when dealing with strings and char? What kind of concerns will I have when I am manipulating strings? Is there functions like strlen() designed for UNICODE? Is this a good practice to get into when coding in MFC and is there a library I have to use?
Thanks for your all of your help!!
|
|
|
|
|
For the manipulation you use the equivalent _tcs... version of the function.
If your have MSDN, just type _tcs... into the index option and it will give you a list of all the vaailable functions. There should be an equivalent for all the standard C runtime string functions.
e.g. strlen -> _tcslen
strcpy -> _tcscpy
Roger Allen - Sonork 100.10016
Roger Wright: Remember to buckle up, please, and encourage your friends to do the same. It's not just about saving your life, but saving the quality of life for those you may leave behind...
|
|
|
|
|
The string functions are the only ones I am going to have to worry about correct?? If I am going to start to write a piece of software would you advise to use the UNICODE instead of regular char? That is all I have to worry about correct, just strings??!
Again did you mention anything about a include file for UNICODE?
I caught that type and just figured it was TCHAR.
Thanks Roger, you have been a great help!!!!!!!! Just as everyone else at this site!!
|
|
|
|
|
BrockVnm wrote:
If I am going to start to write a piece of software would you advise to use the UNICODE instead of regular char?
If you are positive that your application is not going to be used in an environment that uses double-byte characters, then using char types and the related strxxx() functions is fine. However, using TCHAR types, and the related _tcsxxx() functions does not cost any extra as the preprocessor resolves them accordingly.
A rich person is not the one who has the most, but the one that needs the least.
|
|
|
|
|
|
I spotted it just as I hit submit
Buts whats more annoying is that I had gone and tried to fix it once already and typed in the same mistake again!
Roger Allen - Sonork 100.10016
Roger Wright: Remember to buckle up, please, and encourage your friends to do the same. It's not just about saving your life, but saving the quality of life for those you may leave behind...
|
|
|
|
|
If there's one thing I hate more than making typos in replies is having some moron pointing out the bleedin' obvious.
/ravi
My new year's resolution: 2048 x 1536
Home | Articles | Freeware | Music
ravib@ravib.com
|
|
|
|
|
In addition to Roger's good summary, you should also wrap any string constants with the _T() macro.
A rich person is not the one who has the most, but the one that needs the least.
|
|
|
|
|
would you type the _T with any function that you are using that UNICODE variable with. What kind of enviornments would I need UNICODE for....i.e. windows xp, etc. Or is this something that I would use if I was gonna try and use the software on linux, unix, windows, etc???
|
|
|
|