亚洲国产成人久久综合野外,伊人伊成久久人综合网777,久久大香香蕉国产

100行代码去除QQ�q�告

��子 — Sun, 26 Oct 2008 12:18:00 GMT

��Z��么写�q�个:
     1�Q�像我这么爱�q�净的�h�Q�当然不能容忍和MM聊天的时候，看到一个内��广告在上面一闪一闪，�q�不引诱老纳么；
     2�Q��ؓ什么不用其它外挂？珊瑚虫已S�Q�再没用�q�其它。现有的外挂实现了一些我不想要的功能�Q�看IP也没必要�Q�聊天的都是熟�h。另外，不知道它做了些什么事情；
     3�Q�打发这个无聊的周末�?br>
怎样实现�Q?br>     1�Q�万能的HOOK

现在用到的是全局的SHELL HOOK�Q�Hook的是�H�口创徏完成的消息；

    g_hShellHook = SetWindowsHookEx( WH_SHELL,
                (HOOKPROC)ShellHook,
                g_hInstance,
                0);

ShellHook 的实现如�?

static LRESULT CALLBACK ShellHook(UINT nCode, WPARAM wParam, LPARAM lParam)
{
    if(nCode < 0)
        goto CallOrg;

    if( HSHELL_WINDOWCREATED == nCode )
    {
        if( !isQQWnd( (HWND)wParam ) )
            goto CallOrg;

        EnumChildWindows( (HWND)wParam, EnumChildProc, (LPARAM)0 );
    }

CallOrg:
    return CallNextHookEx( g_hShellHook, nCode, wParam, lParam);
}

在收到窗口创建后的消息时�Q�就判断�q�个�H�口是不是QQ�?�q�里用到�?GetWindowThreadProcessId �Q�它�q�回�H�口相关的进�E�ID

BOOL isQQWnd(HWND hWnd)
{
    if( g_pContext == NULL )
        return FALSE;

    if( g_dwQQProcessID == 0 )
        g_dwQQProcessID = GetQQProcessID();

    DWORD dwWndProcessID;
    if( GetWindowThreadProcessId( hWnd, &dwWndProcessID ) == 0 )
        return FALSE;

    return dwWndProcessID == g_dwQQProcessID;

}

然后枚�D它的子窗口，看它的子�H�口有没有广告控�Ӟ��有的话就�l�子控�g发送个WM_CLOSE的消�?

BOOL CALLBACK EnumChildProc(HWND hwnd, LPARAM lParam  )
{
    DWORD dwID = GetDlgCtrlID( hwnd );
    if( dwID == 0x3e9 )
    {
        HWND hPrarent = GetParent( hwnd );
        PostMessage(hwnd, WM_CLOSE, 0, 0 );
        Sleep( 10 );
        PostMessage(hPrarent, WM_PAINT, 0, 0 );
    }
    else if( dwID == 0x643f )
    {
        PostMessage(hwnd, WM_CLOSE, 0, 0 );
    }

    return TRUE;
}

其中的两个硬�~�码是用 spy++ 分析出来的，可能因�ؓ版本的不同，会有差异。所以我不确定能不能关闭其它版本的QQ�q�告。我使用的版本是QQ2008贺岁版�?br>
--------------------------------------------------------------------------

后记:
   ��管实现的技术很��?但还是花了我大半天的旉��. 写完之后觉得枚�D子窗口的方式太低�? 或者还有其它高效点的方式。另外还有全局钩子,可能没有必要。如果下午周末持�l�无聊，我会��试改进一下�?br>
   QQ的聊天对话框很简�?不像MSN的对话框,铁板一�?用spy++啥都看不�?但是可以�?AccExplorer 分析.惛_��MSN的对话框上加点东西进去，实现��h��很困难。对�q�方面有研究的同学不妨与我讨��Z��下实玎ͼ�一起学习、进步�?br>
   代码的行数没敎ͼ�有效代码估计也就百把行吧�Q�呵呵，我承认我是标题党�?br>
�?   源代�?+ bin

��子 2008-10-26 20:18 发表评论

搜烦内存取得QQ��L��

��子 — Tue, 12 Dec 2006 16:36:00 GMT

�q�样的帖�?不知道可不可以放到首��?.如果不行,�ȝ��理员清�? 谢谢.

HANDLE GetQQProcess();
bool SeachQQNumber(HANDLE _hProcess, string & strQQ);
int _tmain( int argc, _TCHAR * argv[])
{
    HANDLE hProces = GetQQProcess() ;
     if (hProces == NULL)
        cout << " No run QQ! " << endl;

     string strQQ;
    SeachQQNumber(hProces,strQQ);
    cout << strQQ << endl;
    system( " pause " );
     return 0 ;
}

bool SeachQQNumber(HANDLE _hProcess, string & strQQ)
{
    SuspendThread(_hProcess);

    DWORD dwBaseAddress;
    MEMORY_BASIC_INFORMATION mbi;
     char   process_mem[ 4096 ] = { 0 } ;
    DWORD number_of_bytes_read = 0 ;
    SYSTEM_INFO si;
    GetSystemInfo( & si);
    dwBaseAddress = (DWORD)si.lpMinimumApplicationAddress;
     while (dwBaseAddress < (DWORD)si.lpMaximumApplicationAddress)
     {
        mbi.BaseAddress = (LPVOID)dwBaseAddress;
        VirtualQueryEx(_hProcess, (LPVOID)dwBaseAddress, & mbi, sizeof (mbi));
        dwBaseAddress = (DWORD)mbi.BaseAddress + mbi.RegionSize;
         if (mbi.State != MEM_COMMIT || mbi.AllocationProtect != PAGE_READWRITE) // 跌��未分配或不可��d��的区域�?/span>
         {
             continue ;
        }

         // 搜烦
         for (DWORD i = (DWORD)mbi.BaseAddress; i < dwBaseAddress; i += 4096 )
         {
             if ( ! ReadProcessMemory(_hProcess,LPCVOID(i),process_mem, 4096 , & number_of_bytes_read))
                 break ;
             for ( int j = 0 ;j < 4096 - 9 ;j ++ )
             {
                 if ( ! memcmp( & process_mem[j], " \\MsgEx.db " , 9 ) )
                 {
                     // printf("begin\n");
                     for ( int k = j - 1 ; k > j - 12 ; k -- )
                     {
                         if (process_mem[k] >= ' 0 ' && process_mem[k] <= ' 9 ' )
                         {
                            strQQ =   process_mem[k] + strQQ;
                        }
                         else
                             break ;
                    }
                     if (strQQ.length())
                     {
                        ResumeThread(_hProcess);
                         return true ;
                    }
                }
            }
        }
    }
    ResumeThread(_hProcess);
     return false ;
}

HANDLE GetQQProcess()
{
    PROCESSENTRY32 pe;
    pe.dwSize = sizeof (PROCESSENTRY32);
    HANDLE hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0 );
    Process32First(hSnapshot, & pe);
     do {
         if ( ! _tcsicmp(pe.szExeFile,_T( " qq.exe " )))
         {
            CloseHandle(hSnapshot);
             return OpenProcess(PROCESS_ALL_ACCESS,FALSE,pe.th32ProcessID);
        }
        pe.dwSize = sizeof (PROCESSENTRY32);
    } while (Process32Next(hSnapshot, & pe));
    CloseHandle(hSnapshot);
     return NULL;
}

��子 2006-12-13 00:36 发表评论

��子 — Wed, 13 Sep 2006 09:41:00 GMT

t _tmain(int argc, _TCHAR* argv[])
{

typedef int (WINAPI *myMsg)( IN HWND hWnd,IN LPCSTR lpText, IN LPCSTR lpCaption,IN UINT uType);
HANDLE m_hDLL = ::LoadLibrary("user32.dll");
myMsg msg = (myMsg)GetProcAddress((HMODULE)m_hDLL, "MessageBoxA");
(*msg)(NULL,"TEST","TEST",0);

return 0;
}

int _tmain(int argc, _TCHAR* argv[])
{
MessageBoxA(NULL,"test","test",0);
return 0;
}

A生成的exe 的大��?< B

��子 2006-09-13 17:41 发表评论

�q�程�U�程插入,获得其它�q�程ListCtrl信息

��子 — Sun, 25 Jun 2006 18:07:00 GMT

摘要: 因�ؓ�q�浩方玩星际,每次都要挤房�?所以做了一个挤戉K��的小工具.VC7.1 工程下蝲关键代码如下: 1 typedef struct _remoteparameter 2 { ... 阅读全文

��子 2006-06-26 02:07 发表评论

��子 — Sat, 01 Apr 2006 01:55:00 GMT

/**
W32Server.h
http://www.shnenglu.com/lovelypig ��子
*/
#ifndef _CW32SERVER_H
#define _CW32SERVER_H
#include
#include

class CW32Server
{
TCHAR  m_szServerName[MAX_PATH];
SC_HANDLE   m_hService;
SC_HANDLE   m_hScm;
SERVICE_STATUS ServiceStatus;
BYTE  m_cfgBuf[4096];
public:

CW32Server(void);
CW32Server(const TCHAR *strServerName);
BOOL Open(const TCHAR *strServerName);

/** �q�回状�?
  SERVICE_CONTINUE_PENDING The service continue is pending.
  SERVICE_PAUSE_PENDING The service pause is pending.
  SERVICE_PAUSED The service is paused.
  SERVICE_RUNNING The service is running.
  SERVICE_START_PENDING The service is starting.
  SERVICE_STOP_PENDING The service is stopping.
  SERVICE_STOPPED The service is not running.
*/
DWORD GetState();
BOOL    SetState(DWORD state);
BOOL    Start();
BOOL    Stop();

/**
  SERVICE_AUTO_START  A service started automatically by the service control manager during system startup.
  SERVICE_BOOT_START  A device driver started by the system loader. This value is valid only for driver services.
  SERVICE_DEMAND_START A service started by the service control manager when a process calls the StartService function.
  SERVICE_DISABLED  A service that cannot be started. Attempts to start the service result in the error code ERROR_SERVICE_DISABLED.
  SERVICE_SYSTEM_START
*/
BOOL    GetConfig();   //如果�q�回真，配置状态填充在 m_config �?
SC_HANDLE    GetHandle();  //需要禁用、启动服务，使用 ChangeServiceConfig(GetHandle(),...)   查看MSDN
~CW32Server(void);

QUERY_SERVICE_CONFIG *m_config;
};

#endif

/**
W32Server.cpp
http://www.shnenglu.com/lovelypig ��子
*/
#include ".\w32server.h"
#include

CW32Server::CW32Server(void)
{
memset((char*)&m_szServerName,0,sizeof(TCHAR)*MAX_PATH);
memset((char*)&m_config,0,sizeof(m_config));
m_hService = 0;
m_hScm = 0;
m_config = (QUERY_SERVICE_CONFIG*)m_cfgBuf;
}

CW32Server::CW32Server(const TCHAR *strServerName)
{
assert(strServerName);

CW32Server();
_tcscpy(m_szServerName,strServerName);

m_hScm=OpenSCManager(0,0,SC_MANAGER_CREATE_SERVICE);
if(!m_hScm)
{
  return ;
}
m_hService=OpenService(m_hScm,strServerName,SERVICE_ALL_ACCESS);
if(!m_hService)
{
  CloseServiceHandle(m_hScm);
  m_hScm = NULL;
    }
}
CW32Server::~CW32Server(void)
{
if( m_hScm )
{
  CloseServiceHandle(m_hScm);
  m_hScm = NULL;
}
if( m_hService )
{
  CloseServiceHandle(m_hService);
  m_hService = NULL;
}
}

BOOL CW32Server:: Open(const TCHAR *strServerName)
{
assert(strServerName);

if( m_hScm )
{
  CloseServiceHandle(m_hScm);
  m_hScm = NULL;
}
if( m_hService )
{
  CloseServiceHandle(m_hService);
  m_hService = NULL;
}

_tcscpy(m_szServerName,strServerName);
m_hScm=OpenSCManager(0,0,SC_MANAGER_CREATE_SERVICE);
if(!m_hScm)
{
  return FALSE;
}
m_hService=OpenService(m_hScm,strServerName,SERVICE_ALL_ACCESS);
if(!m_hService)
{
  CloseServiceHandle(m_hScm);
  m_hScm = NULL;
  return FALSE;
}
return TRUE;
}

DWORD CW32Server::GetState()
{
assert(m_hService);

    if(QueryServiceStatus(m_hService,&ServiceStatus))
{
  return ServiceStatus.dwCurrentState;
}
else
{
  return 0xffffffff;
}
}

BOOL CW32Server::SetState(DWORD state)
{
assert(m_hService);

return ControlService(m_hService,state,&ServiceStatus);
}

BOOL CW32Server::Start()
{
assert(m_hService);

return StartService(m_hService,0,NULL);

}

BOOL CW32Server::Stop()
{
assert(m_hService);

return ControlService(m_hService,SERVICE_CONTROL_STOP,&ServiceStatus);
}

BOOL CW32Server::GetConfig()
{
assert(m_hService);

DWORD cbBufSize = 4096;
DWORD pcbBytesNeeded = 4096;
return QueryServiceConfig(m_hService,m_config,cbBufSize, &pcbBytesNeeded);
}

SC_HANDLE CW32Server::GetHandle()
{
assert(m_hService);
return m_hService;
}

��子 2006-04-01 09:55 发表评论

��子 — Sat, 01 Apr 2006 01:46:00 GMT

//说明�Q��^时做更改�|�卡�Q�Ｐ�q�样的活挺多的，�_�来�_�去�ȝ��Q�简单的打了个包�Q?br />//引用�Q?font color="#000000">VCkbase�Q�不重�vWindows直接更改IP地址
//代码�Q?br />

//Adapter_.h
#ifndef _ADAPTER_H
#define _ADAPTER_H
#include
#include
#include
#include
#pragma comment(lib,"iphlpapi.lib")
#pragma comment(lib,"ws2_32.lib")
#include
#include
#include
using namespace std;

typedef int (CALLBACK* DHCPNOTIFYPROC)(LPWSTR, LPWSTR, BOOL, DWORD, DWORD, DWORD, int);

class CAdapter
{
private:
  class ADAPTER_INFO
  {
    string strName;   // 适配器名�U?br />    string strDriverDesc; // 适配器描�q?br />    string strIP;   // IP地址
    string strSubnetMask;  // 子网掩码
    string strNetGate;  // �|�关
    string strDNS;         //DNS
    string strMAC;
    ::MIB_IFROW IfRow;  //用于��量,状态显�C?/p>

    BOOL   RegSetIP();
    BOOL   ChangeSysSet();

   public:
    void   SetInx(DWORD _dwpIndex) { IfRow.dwIndex = _dwpIndex; }

    //取得IP信息
    string& GetName(){  return strName; }
    string& GetDriverDesc(){ return strDriverDesc; }
    string& GetIP(){ return strIP; }
    string& GetSubnetMask(){ return strSubnetMask; }
    string& GetNetGate(){ return strNetGate; }
    string& GetDNS(){ return strDNS; }
    string& GetMAC(){ return strMAC; }

    //取得状�?��量
    DWORD    GetState(){
     if(GetIfEntry(&IfRow) != NO_ERROR)
     {
      return 0;
     }
     /*
     #define MIB_IF_OPER_STATUS_NON_OPERATIONAL      0
     #define MIB_IF_OPER_STATUS_UNREACHABLE          1
     #define MIB_IF_OPER_STATUS_DISCONNECTED         2
     #define MIB_IF_OPER_STATUS_CONNECTING           3
     #define MIB_IF_OPER_STATUS_CONNECTED            4
     #define MIB_IF_OPER_STATUS_OPERATIONAL          5
     */
     return IfRow.dwOperStatus ;
    }

    DWORD    GetSendBytes(){
     if(GetIfEntry(&IfRow) != NO_ERROR)
     {
      return 0;
     }
     return IfRow.dwOutOctets;
    }
    DWORD    GetReceiveBytes(){
     if(GetIfEntry(&IfRow) != NO_ERROR)
     {
      return 0;
     }
     return IfRow.dwInOctets;
    }
    DWORD   GetSpeed(){
     if(GetIfEntry(&IfRow) != NO_ERROR)
     {
      return 0;
     }
     return IfRow.dwSpeed;
    }

    DWORD   GetOutUcastPkts(){
     if(GetIfEntry(&IfRow) != NO_ERROR)
     {
      return 0;
     }
     return IfRow.dwOutUcastPkts;
    }
    DWORD   GetOutNUcastPkts(){
     if(GetIfEntry(&IfRow) != NO_ERROR)
     {
      return 0;
     }
     return IfRow.dwOutNUcastPkts;
    }
    DWORD   GetInUcastPkts(){
     if(GetIfEntry(&IfRow) != NO_ERROR)
     {
      return 0;
     }
     return IfRow.dwInUcastPkts;
    }
    DWORD   GetInNUcastPkts(){
     if(GetIfEntry(&IfRow) != NO_ERROR)
     {
      return 0;
     }
     return IfRow.dwInNUcastPkts;
    }
    //讄��IP信息
    BOOL SetName(string _PstrName ,BOOL bChange = 0)  {
     strName = _PstrName ;
     if( bChange)
      return ChangeSysSet();
     return TRUE;
    }
    BOOL SetDriverDesc(string _PstrDriverDesc,BOOL bChange = 0){
     strDriverDesc = _PstrDriverDesc;
     if( bChange)
      ChangeSysSet();
     return TRUE;
    }
    BOOL SetIP(string _PstrIP,BOOL bChange = 0){
     strIP = _PstrIP ;
     if( bChange)
      ChangeSysSet();
     return TRUE;
    }
    BOOL SetSubnetMask(string _PstrSubnetMask,BOOL bChange = 0){
     strSubnetMask = _PstrSubnetMask;
     if( bChange)
      ChangeSysSet();
     return TRUE;
    }
    BOOL SetNetGate(string _PstrNetGate,BOOL bChange = 0){
     strNetGate = _PstrNetGate;
     if( bChange)
      ChangeSysSet();
     return TRUE;
    }
    BOOL SetDNS(string strSetDNS = ""){
     if( !strSetDNS.length() )
     {
      HKEY hKey;
      DWORD dwType;
      char szReadBuf[64];
      DWORD cbData = 64;
      string strKeyName ="SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Interfaces\\";
      strKeyName += this->strName;
      if(RegOpenKeyExA(HKEY_LOCAL_MACHINE,strKeyName.c_str(),0,
         KEY_READ,&hKey) != ERROR_SUCCESS)
      {
       return FALSE;
      }
      if( RegQueryValueExA(hKey,"NameServer",0,&dwType,(BYTE*)szReadBuf,&cbData) != ERROR_SUCCESS)
      {
       return FALSE;
      }
      RegCloseKey(hKey);
      strDNS = szReadBuf;
     }
     else
     {
      strDNS = strSetDNS;
      return ChangeSysSet();
     }
     return TRUE;
    }
    void SetMAC(BYTE *Address){
      char buf[6];
      for(int i= 0;i< 6;i++)
      {
       sprintf( buf,"%02x",Address[i]);
       strMAC += string(buf);
      }
      /*
      sprintf(pAI->mac, "%02X%02X%02X%02X%02X%02X",
       int (pAdapterInfo->Address[0]),
       int (pAdapterInfo->Address[1]),
       int (pAdapterInfo->Address[2]),
       int (pAdapterInfo->Address[3]),
       int (pAdapterInfo->Address[4]),
       int (pAdapterInfo->Address[5]));
      */
    }
  };
vector m_AdapterVec;
public:
  CAdapter(void);
  ~CAdapter(void);

  size_t GetAdapterCount ()
  {
   return m_AdapterVec.size();
  }

  ADAPTER_INFO& operator[](DWORD iInx)
  {
   assert(iInx < m_AdapterVec.size());
   return m_AdapterVec[iInx];
  }
};

#endif

//�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－�Q�－
//Adapter_.cpp
#include ".\adapter_.h"

CAdapter::CAdapter(void)
{
DWORD ulAdapterInfoSize = sizeof(IP_ADAPTER_INFO);
IP_ADAPTER_INFO *pAdapterInfo = (IP_ADAPTER_INFO*)new char[ulAdapterInfoSize];
if( GetAdaptersInfo(pAdapterInfo, &ulAdapterInfoSize) == ERROR_BUFFER_OVERFLOW ) // �~�冲��Z��够大
{
  delete pAdapterInfo;
  pAdapterInfo = (IP_ADAPTER_INFO*)new char[ulAdapterInfoSize];
}
if( GetAdaptersInfo(pAdapterInfo, &ulAdapterInfoSize) == ERROR_SUCCESS )
{
  do {
   if (pAdapterInfo->Type == MIB_IF_TYPE_ETHERNET)
   {
    ADAPTER_INFO *pAI = new ADAPTER_INFO;
    pAI->SetInx(pAdapterInfo->Index);
    pAI->SetName(pAdapterInfo->AdapterName);
    pAI->SetDriverDesc(pAdapterInfo->Description);
    pAI->SetMAC(pAdapterInfo->Address);
    pAI->SetIP(pAdapterInfo->IpAddressList.IpAddress.String);
    pAI->SetNetGate(pAdapterInfo->GatewayList.IpAddress.String);
    pAI->SetSubnetMask(pAdapterInfo->IpAddressList.IpMask.String);
    pAI->SetDNS();
    m_AdapterVec.push_back(*pAI);
   }
   pAdapterInfo = pAdapterInfo->Next;
  } while(pAdapterInfo);
}
delete pAdapterInfo;
}

CAdapter::~CAdapter(void)
{
m_AdapterVec.clear();
}

BOOL CAdapter::ADAPTER_INFO::ChangeSysSet()
{
//在注册表中修改信�?br /> if(!RegSetIP())
{
return FALSE;
}

HINSTANCE hDhcpDll;
DHCPNOTIFYPROC pDhcpNotifyProc;
WCHAR wcAdapterName[256];
MultiByteToWideChar(CP_ACP, 0, this->strName.c_str(), -1, wcAdapterName,256);

if((hDhcpDll = LoadLibraryA("dhcpcsvc")) == NULL)
{
return FALSE;
}

if((pDhcpNotifyProc = (DHCPNOTIFYPROC)GetProcAddress(hDhcpDll, "DhcpNotifyConfigChange")) != NULL)
{
  if((pDhcpNotifyProc)(NULL, wcAdapterName, TRUE,
   0,    //指明�W�几个IP地址�Q�如果只有该接口只有一个IP地址则�ؓ0
   inet_addr(strIP.c_str()), //
   inet_addr(strSubnetMask.c_str()),
   0    //对DHCP的操�?0:不修�? 1:启用 DHCP�Q?:��用 DHCP
   ) != ERROR_SUCCESS)
  {
   FreeLibrary(hDhcpDll);
   return FALSE;
  }
  FreeLibrary(hDhcpDll);
}
return TRUE;
}

BOOL CAdapter::ADAPTER_INFO::RegSetIP()
{
HKEY hKey;
string strKeyName ="SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Interfaces\\";
strKeyName += strName;

if(RegOpenKeyExA(HKEY_LOCAL_MACHINE,
  strKeyName.c_str(),
  0,
  KEY_WRITE,
  &hKey) != ERROR_SUCCESS)
{
  return FALSE;
}
strIP.push_back('\0');
strSubnetMask.push_back('\0');
strNetGate.push_back('\0');

RegSetValueExA(hKey, "IPAddress", 0, REG_MULTI_SZ, (unsigned char*)strIP.data(), (DWORD)strIP.length()+2);
RegSetValueExA(hKey, "SubnetMask", 0, REG_MULTI_SZ, (unsigned char*)strSubnetMask.data(),(DWORD)strSubnetMask.length()+2 );
RegSetValueExA(hKey, "DefaultGateway", 0, REG_MULTI_SZ, (unsigned char*)strNetGate.data(), (DWORD)strNetGate.length()+2);
RegSetValueExA(hKey, "NameServer", 0, REG_SZ, (unsigned char*)strDNS.data(),(DWORD) strDNS.length());
RegCloseKey(hKey);
return TRUE;
}

��子 2006-04-01 09:46 发表评论