Click here to Skip to main content
15,881,709 members
Home / Discussions / Visual Basic
   

Visual Basic

 
AnswerRe: Datagrids on Tabs not displaying Pin
Luc Pattyn15-Feb-12 5:58
sitebuilderLuc Pattyn15-Feb-12 5:58 
GeneralRe: Datagrids on Tabs not displaying Pin
MacRaider415-Feb-12 7:28
MacRaider415-Feb-12 7:28 
QuestionRun Windows service in ring 0 Pin
Brandon-X1200014-Feb-12 14:23
Brandon-X1200014-Feb-12 14:23 
AnswerRe: Run Windows service in ring 0 Pin
Dave Kreskowiak14-Feb-12 14:46
mveDave Kreskowiak14-Feb-12 14:46 
GeneralRe: Run Windows service in ring 0 Pin
Brandon-X1200014-Feb-12 14:58
Brandon-X1200014-Feb-12 14:58 
GeneralRe: Run Windows service in ring 0 Pin
Dave Kreskowiak15-Feb-12 2:06
mveDave Kreskowiak15-Feb-12 2:06 
GeneralRe: Run Windows service in ring 0 Pin
Brandon-X1200015-Feb-12 5:45
Brandon-X1200015-Feb-12 5:45 
GeneralRe: Run Windows service in ring 0 Pin
Dave Kreskowiak15-Feb-12 6:08
mveDave Kreskowiak15-Feb-12 6:08 
Brandon T. H. wrote:
Another question is that there are 3 rings on your computer (3: software, 2:
service, 1: driver, 0: kernel):


Intel processors have 4 rings of execution, which divide authority of code to execute. Windows only supports 2 of them to keep things nice and neat. What Windows calls User Mode is Intel's Ring 3. Kernel Mode is in Ring 0. Other rings are not supported or used.

Applications are not subject to being stuck in any one Mode. Applications switch between modes all the time. You just don't notice anything. For example, in say Notepad, you see the window show up and you click File/Open and get a Open File Dialog. most of this happens in User Mode. You tell it which file to open and click OK. Then the app opens the file for readonly access and reads it. But, since opening a file is a kernel-level operation, you're now executing code in Kernel Mode. All I/O operations go through drivers or APIs that are either found in the Kernel or in Device Drivers. So, you're executing code in the kernel and you didn't have to do anything at all to switch Rings...

All user launched applications and all services you see in the Service Manager run in User Mode (Ring 3). Device Drivers, which are themselves specially written services, run in Kernel Mode (Ring 0).

You user application and service will run in User Mode. Your device driver will run in Kernel Mode.


Brandon T. H. wrote:
the program says "Hey you need to watch out for this program." and the
Windows service says "OK." When the process has been detected, the
Windows service says to the driver "Hey can you terminate this
program for me?", the driver says "sure.", then the program is gone from
the computer memory,


Correct, to a point. The network driver will not kill the process. Since at that point, you've already downloaded it and executed it, it's WAY too late for your firewall to do any good. A firewall handles network communication only. It does not control process, just their access to the network. Firewalls examine network traffic and route and block it accordingly. For example, a web browser tries to open a connection to a blocked web site (blocked by IP). The firewall sees the outbound request going to that IP and blocks it by not forwarding the request down the network stack and/or rerouting the request to some other IP and port.

Killing a process is the job of a virus scanner, which will follow the same architecture, but not have anything to do with the network traffic. It deals will stuff on the machine that has already made it past the inbound firewall filter. (A firewall has no way of knowing that a certain .EXE is coming through the pipe.) The virus scanner driver becomes ad part of the file system as an extension or filter driver. When the file is finally written to disk and closed, the virus scanner can examine the contents and decide whether to kill the file or quarantine it. It would also hook part of the Loader to stop an infrected .EXE from being launched.



Brandon T. H. wrote:
If you wish to see my project/source files, I am more than glad to share
them with you.


I've got enough of my own code to pour over.

QuestionHow do I open multiple tabs on an existing I.E. from vb.net Pin
dcorning14-Feb-12 9:29
dcorning14-Feb-12 9:29 
AnswerRe: How do I open multiple tabs on an existing I.E. from vb.net Pin
Bernhard Hiller14-Feb-12 21:18
Bernhard Hiller14-Feb-12 21:18 
QuestionNeed Code of VB to fetch report from QC 10 Pin
shrikant73113-Feb-12 6:53
shrikant73113-Feb-12 6:53 
AnswerRe: Need Code of VB to fetch report from QC 10 Pin
Dave Kreskowiak13-Feb-12 9:35
mveDave Kreskowiak13-Feb-12 9:35 
AnswerRe: Need Code of VB to fetch report from QC 10 Pin
Nagy Vilmos14-Feb-12 22:41
professionalNagy Vilmos14-Feb-12 22:41 
AnswerRe: Need Code of VB to fetch report from QC 10 Pin
Reiss15-Feb-12 2:39
professionalReiss15-Feb-12 2:39 
QuestionBindingSource Position Pin
Framework .l.12-Feb-12 21:08
Framework .l.12-Feb-12 21:08 
AnswerRe: BindingSource Position Pin
Eddy Vluggen13-Feb-12 5:01
professionalEddy Vluggen13-Feb-12 5:01 
QuestionProblems with default DataGridView Pin
Member 860517711-Feb-12 4:36
Member 860517711-Feb-12 4:36 
AnswerRe: Problems with default DataGridView Pin
Luc Pattyn11-Feb-12 4:54
sitebuilderLuc Pattyn11-Feb-12 4:54 
GeneralRe: Problems with default DataGridView Pin
Member 860517711-Feb-12 5:00
Member 860517711-Feb-12 5:00 
AnswerRe: Problems with default DataGridView Pin
Luc Pattyn11-Feb-12 5:10
sitebuilderLuc Pattyn11-Feb-12 5:10 
AnswerRe: Problems with default DataGridView Pin
Sonhospa13-Feb-12 2:13
Sonhospa13-Feb-12 2:13 
QuestionSpareRoom(VBPmanan15) Pin
manan112211-Feb-12 3:00
manan112211-Feb-12 3:00 
AnswerRe: SpareRoom(VBPmanan15) Pin
Eddy Vluggen11-Feb-12 3:33
professionalEddy Vluggen11-Feb-12 3:33 
QuestionSynchronized controls logic Pin
Sonhospa11-Feb-12 0:41
Sonhospa11-Feb-12 0:41 
AnswerRe: Synchronized controls logic Pin
Luc Pattyn11-Feb-12 2:17
sitebuilderLuc Pattyn11-Feb-12 2:17 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.