madshi.net

Name: AntiVir PersonalEdition

Report:

Enthält Signatur des SPR/Tool.Madtol.D- Programmes!
C:\PROGRAMME\SPYCQ\MADCHOOK.DLL

Virendefinitionsdatei: 6.31.0.79, 17.06.2005

URL: http://www.antivir.de

Hello madshi. As of the 06/05/2005, Kaspersky AntiVirus identifies the HookTerminateAPI.dll (from madCodeHook demos) as a Backdoor.Win32.Delf.za trojan horse. Other files are (yet) not affected. http://www.viruslist.com/en/viruses/encyclopedia?virusid=80154 Just thought you'd like to know about that.

Perhaps this thread can be of some help to you: viewtopic.php?t=113

Good luck!

Thanks so much Walkman, but unfortunately, I'm doing something wrong. I just can't get it to work. I've placed the code inside the hook DLL, in the send callback function, and I used the CreateIPCQueue in the DLL, however I can't seem to get the sending working from the app. I get nothing sent. What...

Don't worry, Mathias, all legal. I wouldn't dream of doing something illegal with your wonderful code... When I asked my question, it was 3am, and I wasn't thinking clearly. I think it's should be the CreateIPCQueue inside an application, and I should use SendIPCMessage from the DLL to the applicati...

Hi all. I'm trying to follow Walkmans' suggestion ( http://forum.madshi.net/viewtopic.php?t=384 ) and create the IPC queue. My main goal is to pass the DLL some raw data, so it will be sent via the hooked application. Unfortunately, I have some difficulties to do so. Would anyone be kind enough (Wal...

Thanks, it was perfectly clear, as I already tried something similar myself, but with no apparent success. The thing is, the hooked application trough which I was trying to send the packet either didn't respond, and sometimes even crashed... :( So if it is possible, I will keep trying! :) Thanks! :c...

Walkman wrote:... I've also managed to be able to send my own packets through ipc queue's which calls a function in the DLL file; as if the application is sending the packets itself.

Could you please explain how did you manage to do this?

Thanks!

Hello all. I'm not sure if this is related to madCHook by itself, however I don't really know whom to ask. What I want to do, is build a Magnifier glass-like application, where I would magnify the areas of the screen that my mouse is at. This I have done already -> I am able to magnify the areas (mo...

I have googled 'net send api', and the 1st link that showed was a Delphi example of using the NET SEND API. Question: Is there an API-function for the console command NET SEND (from Windows NT) NET SEND {name | * | /DOMAIN[:name] | /USERS} message Answer: NET SEND uses named pipes. The sample progra...

Yup, that's exactly what I needed! Thank you madshi!

And if I may, another quick question (sorry for the spam )

Is there any way I can get the full hint, if it has more then 255 chars in length?

But yet another question (woo, what a morning )

Can I capture the hint off a program when it has no icon in the system tray (e.g. on the taskbar only)?

Thanks in advance

Never mind, found it :) I was trying to access the wrong process. The Azureus BitTorrent client is java-based, so the main executable is basically 'javaw.exe' instead of 'Azureus.exe'. So if anyone wonders, I did it like this: var s: string; begin s:= Process('javaw.exe').TrayIcons.Items[0].Hint; en...

Hello. I wonder if it is possible to capture the hint that is appearing when a mouse moves over a tray icon? I would like to get, for example, the hint of Azureus BitTorrent client, which shows the current download/upload speed. Is there any way to do it with? I'm thinking: Process("azureus.exe...

I've written one too, a long time ago

It is using BlockRead, and it works really fast, too