gamedevlists-general

[GD-General] Spy on windows 2k &Xp

[Vincent D. <sco...@ho...>]

This french article :
http://www.generation-nt.com/index.php?cat=astuces&id=38

talks about integrated spy in windows 2000 & Xp which take your Microsoft ID
& Hardware ID through regwizc.dll.
The command :
regsvr32.exe -u c:\windows\system32\regwizc.dll
will unload from system the DLL & spy.
Source code to unload will looks like :

OleInitialize(NULL);
HINSTANCE hLib = ::LoadLibraryEx (oTmp.c_str (), NULL,
LOAD_WITH_ALTERED_SEARCH_PATH);
if (hLib)
{
    HRESULT (STDAPICALLTYPE * lpDllEntryPoint)(void);
    (FARPROC&)lpDllEntryPoint = GetProcAddress(hLib, "DllUnregisterServer");
    if (lpDllEntryPoint)
    {
        if (FAILED((*lpDllEntryPoint)()))
        {
            // Error
        }
        else
        {
            // Ok
        }
     }
    FreeLibrary(hLib);
    OleUninitialize();
}

But how determine is DLL already unloaded ?

Thanks

Vincent.

Re: [GD-General] Spy on windows 2k &Xp

[Javier A. <ja...@py...>]

Vincent DUVERNET wrote:
> But how determine is DLL already unloaded ?

I'm not sure if you really need to know that previously, because I don't
understand the nature of the task you're trying to achieve. Any process can
load a DLL regardless whether it's already loaded. These two pieces from
MSDN might shed more light into your problem.

"Each process maintains a reference count for each loaded library module.
This reference count is incremented each time LoadLibrary is called and is
decremented each time FreeLibrary is called."
-------
"The GetModuleHandle function returns a handle to a mapped module without
incrementing its reference count. Therefore, use care when passing the
handle to the FreeLibrary function, because doing so can cause a DLL module
to be unmapped prematurely."

  Javier Arevalo
  Pyro Studios

Re: [GD-General] Spy on windows 2k &Xp

[Vincent D. <sco...@ho...>]

I'm not very familiar with DLL, so I may have a problem which isn't one :)
"regwizc.dll" seams to run like a spy on local computer, getting private
informations & resend it without agreement.
the DEPENDS.EXE tools included in Visual Studio 6, found 4 functions & some
dependencies to Winsock32.dll, wininet.dll.

Is this DLL (ie : "regwizc.dll") est a spy, there is 2 solutions :
changing/destroying file to be sure no process to load it OR doing an
application which automaticaly unload it for all process.
So the real problem is : A process can unload a DLL for all process ?

----- Original Message ----- 
From: "Javier Arevalo" <ja...@py...>
To: <gam...@li...>
Sent: Monday, June 23, 2003 6:46 PM
Subject: Re: [GD-General] Spy on windows 2k &Xp


> Vincent DUVERNET wrote:
> > But how determine is DLL already unloaded ?
>
> I'm not sure if you really need to know that previously, because I don't
> understand the nature of the task you're trying to achieve. Any process
can
> load a DLL regardless whether it's already loaded. These two pieces from
> MSDN might shed more light into your problem.
>
> "Each process maintains a reference count for each loaded library module.
> This reference count is incremented each time LoadLibrary is called and is
> decremented each time FreeLibrary is called."
> -------
> "The GetModuleHandle function returns a handle to a mapped module without
> incrementing its reference count. Therefore, use care when passing the
> handle to the FreeLibrary function, because doing so can cause a DLL
module
> to be unmapped prematurely."
>
>   Javier Arevalo
>   Pyro Studios
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: INetU
> Attention Web Developers & Consultants: Become An INetU Hosting Partner.
> Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
> INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
> _______________________________________________
> Gamedevlists-general mailing list
> Gam...@li...
> https://lists.sourceforge.net/lists/listinfo/gamedevlists-general
> Archives:
> http://sourceforge.net/mailarchive/forum.php?forum_id=557
>

Re: [GD-General] Spy on windows 2k &Xp

[Javier A. <ja...@py...>]

Vincent DUVERNET wrote:

> So the real problem is : A process can unload a DLL for all process ?

No. Anyway, the problem has nothing to do with games development, so this is
the end of the thread.

  Javier Arevalo
  Pyro Studios