|
Heya guys I work in a PC repair shop and we deal with a lot of customers that have alot of infections on their PC. I have been trying to create and application that will kill explorer but it doesnt not convince it to stay dead it will only restart, I understand microsoft made it this way to prevent any malicious activity dealt to the computer. My6 application normally scans a specified directory where most ransomware or desktop hijacks take place such as %USERPROFILE.\Local Settings\Application Data\<cryptic infection="" name="">, I know most of the time it will still execute even if explorer is not loaded 80% of the time it does not happen, But my Goal is to stop the explorer.exe from loading, I dont want to take the route of removing HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogo and changing its value, it is still a thought but not very professional IMO.
just from this snipper all i have is:
Imports System.Diagnostics.Process
Dim Proc() As Process = System.Diagnostics.Process.GetProcessesByName("explorer")
Dim ProcSeek As Process
For Each ProcSeek In Proc
ProcSeek.Kill()
Next
Any help to maybe would be appreciated. =)
|
|
|
|
|
Why do you need to keep explorer dead?
You should always perform really deep cleans while in safe mode. this prevents all the unnecessary apps and dlls from firing up, and helps to break the recursive loops that many malicious software uses. i.e. dll spawing clones and monitoring each other for being removed etc.
Dave
Find Me On: Web| Facebook| Twitter| LinkedIn
CPRepWatcher now available as Packaged Chrome Extension, visit my articles for link.
|
|
|
|
|
Screw stopping Explorer. Take off, nuke the machine from orbit. It's the only way to be sure.
Seriously, blow away the machine and rebuild from scratch. It's the only sure-fire way to get 'em all.
Then stay away from those "sites".
|
|
|
|
|
When I kill explorer.exe from task manager, it dosen't restart? The only time I have seen explorer.exe restart it's self is when it crashes
See if you can crack this: fb29a481781fe9b3fb8de57cda45fbef
The unofficial awesome history of Code Project's Bob!
"People demand freedom of speech to make up for the freedom of thought which they avoid."
|
|
|
|
|
explorer will not restart if killed from task manager, uts just how microsoft created it, but if killed from your ide's app it will restart. but I understand what your saying bout performing scans in safe mode, cause services that are required to keep windows stable without the unecessary programs are the best to run scans with windows at minimal resources. I was just hoping to create an app to avooid the delay when booting into safe mode. I am fmailair with explorer and I know people ask questions like "why on earth do you want to kill explorer?" I work in a repair shop I know what the outcome is heh, I just thought there was always a faster route, but sorry for the ruckus =)
|
|
|
|
|
I want to extract Red, Green and Blue values separately from value which return from Color.ToArgb function. How to do that.
|
|
|
|
|
Assuming VB.NET, the Color struct holds all that is required.
ToArgb() is the method that turns a Color into an Int32, that is quite the opposite of what you want. Have a look at the FromArgb(Int32) method and the R, G, B properties.
|
|
|
|
|
I think you don't undetstand what i meant. Consider following code.
1 Dim img As New Bitmap(PictureBox1.Image)
2 Dim col As Integer = d.GetPixel(x, y).ToArgb
Variable col will hold some value that return from GetPixel function. Now I want to extract R value, G value and B value separately from variable col. That's what i want.
|
|
|
|
|
See the Color[^] methods for extraction of individual parts.
Just say 'NO' to evaluated arguments for diadic functions! Ash
|
|
|
|
|
At the risk of repeating myself: Dim Red As Integer = Color.FromArgb(col).R
|
|
|
|
|
Just kidding.
|
|
|
|
|
To be absolutely sure, I also gave an alternative that does not rely on the features of the Color type. See below message.
|
|
|
|
|
Thank you so much. Now i can understand it
|
|
|
|
|
The mathematical alternative is:
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
showColorComponents(Color.LightYellow)
showColorComponents(Color.FromArgb(11, 22, 33, 44))
End Sub
Private Sub showColorComponents(ByVal col As Color)
log("col=" & col.ToString & " = " & col.A & "," & col.R & "," & col.G & "," & col.B)
Dim I As Int32 = col.ToArgb()
log("I=0x" & I.ToString("X8"))
Dim B As Int32 = I And 255
Dim G As Int32 = (I >> 8) And 255
Dim R As Int32 = (I >> 16) And 255
Dim A As Int32 = (I >> 24) And 255
log("ARGB=" & A & "," & R & "," & G & "," & B)
End Sub
|
|
|
|
|
I'm kinda stumped on this one. I've been reading for a few hours now and still can't seem to figure out what the problem is. I'm working on a remote desktop tool that consists of a parent mdi form and child forms that contain an AxMSTSCLib control. Everything works great on my machine (Win 7), but when I attempt to run this on a Windows 2003 or XP box, the app crashes when it tries to close the form. At first I thought it was due to me trying to dispose the control, but even removing the dispose step makes no difference. I've included the error message along with some info from the immediate window and a dump analysisy showing the function call causing the access violation. I'm not sure what I have to do to keep this from throwing the error and crashing the app.
An unhandled exception of type 'System.AccessViolationException' occurred in System.Windows.Forms.dll
Additional information: Attempted to read or write protected memory. This is often an indication that other memory is corrupt.
Step into: Stepping over non-user code 'System.Windows.Forms.Form.Close'
First-chance exception at 0x59366b49 in RDPConnectionManager.exe: 0xC0000005: Access violation reading location 0x00000000.
mstscax!CMsTscAx::OnCoreApiDisconnected+87
mstscax!CTSWin32CoreApiNotifySink::OnCoreApiDisconnectedUiThreadWorker+19
mstscax!CTSWin32CoreApiNotifySink::OnCoreApiDisconnectedUiThreadWorkerAsyncCallback::Invoke+16
mstscax!CTSMsg::Invoke+44
mstscax!CTSThread::RunQueueEvent+73
mstscax!CTSThread::RunAllQueueEvents+57
mstscax!CTSThread::OnNotifyThreadEventQueue+7
mstscax!CTSThread::OnNotifyThreadMessage+24
mstscax!PAL_System_Win32_ThreadWndProc+1b
user32!InternalCallWinProc+28
user32!UserCallWinProcCheckWow+150
user32!DispatchMessageWorker+306
user32!DispatchMessageW+f
Let me know if you need any additional information on this problem and I appreciate any input on this.
|
|
|
|
|
OK, I figured out the reason for the exception. I was closing/disposing of the form within an eventhandler for a control on that form. So basically, I killed the form and then the event tried to finish running and threw the exception.
This leads me to another question though. How do I close this form outside of this event? The event in question is OnDisconnected event of the AxMsRdpClient4 class. I want to close the form after disconnecting, but it seems like any attempt I make to close the form within that event will result in the exception.
|
|
|
|
|
|
Hi,
I have a DataGridView on form, I set MultiSelect = false.
By default, the DataGridView always has top left cell selected, is it possible that the DataGridView has nothing be selected by default?
Thanks!
|
|
|
|
|
you can undo any selection by calling ClearSelection().
What I do for DGV-based viewers that never want anything selected is add a handler (C# code alert):
private void dgv_SelectionChanged(object sender, EventArgs e) {
dgv.ClearSelection();
}
|
|
|
|
|
Luc,
Working great, Thank you very much.
|
|
|
|
|
How to bound this grid using ADODC Control? As well the help file is given with the mdb file examples. By which I came to know that this supports only MS Access file. But I've Database in Ms Sqlserver 2000. Can Any one help me in this regard. So far I found the grids but in which I can't add combo box except MKGrid.
Reply please
Yaseen
M. YASEEN
Software Engineer
MN Textiles
Karachi
|
|
|
|
|
How about asking the people who made MKGrid.
It's very unlikely anyone who still uses VB6 is ever going to see your question, let alone have any experience with that control.
|
|
|
|
|
<TestCase>
<Sequences>
<Sequence>
<Request>CMD_Connect</Request>
<Responce>POSITIVE</Responce>
</Sequence>
<Sequence>
<Address>400026F8</Address>
<Request>CMD_SHORT_UPLOAD</Request>
<Responce>POSITIVE</Responce>
</Sequence>
<Sequence>
<Address>400026F8</Address>
<Request>CMD_SHORT_UPLOAD</Request>
<Responce>POSITIVE</Responce>
</Sequence>
</Sequences>
<Recursions>
<Recursion>
<Address>400026F8</Address>
<Request>CMD_SHORT_UPLOAD</Request>
<Responce>POSITIVE</Responce>
</Recursion>
<Recursion>
<Address>400026F8</Address>
<Request>CMD_SHORT_UPLOAD</Request>
<Responce>POSITIVE</Responce>
</Recursion>
<Recursion>
<Address>400026F8</Address>
<Request>CMD_SHORT_UPLOAD</Request>
<Responce>POSITIVE</Responce>
</Recursion>
</Recursions>
<Sequences>
<Sequence>
<Request>DAQ_START_STOP_DAQ_LIST</Request>
<Responce>POSITIVE</Responce>
</Sequence>
<Sequence>
<Request>CMD_Disconnect</Request>
<Responce>POSITIVE</Responce>
</Sequence>
<Sequences>
</TestCase>
I have this type of xml. "Sequences" and "Recursions" are the elements occuring multiple times under "Test Case" node.Now I have to read this xml such that I have the knowledge of "Sequences" and "Recursions" nodes that how many "Sequence" nodes and "Recursions" nodes are there and I have to visit these nodes also.
I used the
Dim objXMLDOM As New MSXML2.DOMDocument26
Dim objxmlNode As IXMLDOMNode
Dim objNodes As IXMLDOMNodeList
But it is not clear which method I have to use to achieve the goal.
Please guide me to read the xml.
Thanks in adv..
|
|
|
|
|
When adding new references in visual studio, the 'Specific Version' property defaults to True. Makes sense when you want to compile against specific versions for side by side deployments.
We have several projects that reference assembly .dlls that are just dumped into a common folder. So the latest .dll overrides the previous version. Next time developer goes to compile, the build fails because VS is looking for a specific version of the .dll.
Is there a way to override this default value to false when adding new references? So when adding a new reference by using the Add Reference popup, the default value to Specific Value defaults to false instead of true.
"There's no such thing as a stupid question, only stupid people." - Mr. Garrison
|
|
|
|
|
Jon_Boy wrote: Is there a way to override this default value to false when adding new references?
I don't know, but I'd like to suggest using the project-templates. Create a new application, add all the desired references, and export it as a new template. Also helps in getting a decent default for the Assembly.cs file
I are Troll 
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
