madshi.net

I am trying to prevent my program from being closed. So, I hooks TerminateProcess etc.

DLL:
if myprogram then
dontkill
else
goahead

What is the best way to check "myprogram" is really my program?
File name?
Hash?? It can make system slower if the file size is big..
Any idea?

Wait, my english is bad, I'm little a confused The point is even I call CreateIpcQueue in the main thread, the IPC queue callback function is *always* called in a *secondary* thread created by the IPC queue. So I don't have to create a new thread to call CreateIpcQueue. My purpose is to make sure ca...

Thanks for your explanation about IPC. But, sorry for stupid question, if I call CreateIpcQueue in a thread, does callback function will run in thread too?

Can I call CreateIpcQueue (for callback function) in a thread (TThread)? Is there any risk? I want to avoid my gui from hang.

Thanks Madshi for your reply.

Its seems there is a non thread safe somewhere in my component. I"ll have to digging it. Thanks.

Thanks moz. This is confusing me, that's way I use MadExcept to find the error :cry: :blush: Anyway, I guess EStringList is caused by TStringList, what about EListError? Is it same? There are many TStringLisy in my code and they are thread-safe already. Maybe using locklist is not enough :confused:

Madshi, my multithread app have an error. The steps to produce error is unknown. The time to produce error is unpredictable. I use MadExcept to find the cause of error. The error is list index out of bounds. Right now MadExcept only show error in thread code. I can't find the bad listview. callstack...

Madshi,

i've installed madCollection, I don't find madExcept in Project menu. madExcept menu only appear in D2010, in D2007 it not exists.

How do I install madExcept to IDE manually ?

alright I'll your tricks. FYI, my program can hook text file successfully on XP and got no luck in 7.

My program can hook text file which opened in Notepad. The way is by hooking the first parameter of created process. The problem is my program can not hook text file contain space.

c:\file.txt << hooked succesfully
c:\new file.txt << failed

Any suggestion?

Cool!
Can't wait for the (old) source

I think that many applications are using FindFirst/Next internally and probably also rather often, so I'm not sure if it's a good idea to base your malware monitoring on that Thanks for the advices. I think it would be better to try to detect situations where the *user* really opens a folder. Right...

Hi I want to make simple malware monitoring, I want if user open folder then my program will check all files in current folder. I guess I have to hook FindFirst/FindNext or NTQueryDirectoryFile. Can you give me some clues/steps to do this with mch?

thx.

I want make my exe smaller because other similar programs have small size. Sure coz they use c++ / asm and I use D2010 with unicode pack

Yeah you're right hardisks are so big today, the problem is not about hardware but my eyes prefer to see my program with small size than big size

I use UPX to my program (using madshi injection) and it give me error to os when running the program.

Is there any exe compressor to handle this problem? The point is I want to make my exe smaller.

Thx.