Software Protection Kill CRACK Related Processes
Sunhai
Development Tools: Microsoft Visual Studio .NET 2003 operating system: Windows XP
The three eternal themes developed by procedures: 1. The function of the program and creative two. The promotion of the program is three. The protection of the program is theoretical, there is no program that cannot be Crack. The so-called anti-CRACK, just increasing the difficulty of CRACK.
Using the Process class management process
The Process class provides access to local and remote processes and enables you to start and stop local system processes.
The Process component provides access to a process that is running on your computer. In the shortcoming words, the process is the currently running application. The thread is the basic unit of the operating system to assign the processor time. Thread executable of any part of the code, including the portion currently executed by another thread.
For tasks such as start, stop, control, and monitor applications, the Process component is a useful tool. Using the Process component, you can get a list of currently running processes, or start a new process. The Process component is used to access system processes. After initializing the Process component, you can use this component to get information about the currently running process. Such information includes thread sets, loaded modules (.dll, and .exe files) and performance information (as the amount of memory currently used).
If a path variable is declared with quotation marks in the system, the path must be fully qualified when any process in this location is started. Otherwise, the system will not find the path. For example, if c: / mypath is not in your path, you use quotation marks to add it (PATH =% PATH%; "C: / mypath"), you must completely Limit them.
The process component simultaneously obtains information about a set of properties. After obtaining the information about one member of any group, it will cache the values of other attributes in the group, and do not get new information about other members of the group before calling the Refresh method. Therefore, it is not guaranteed that the attribute value is more than the last call update of the Refresh method. The component is related to the operating system.
The system process is uniquely identified by its process identifier on the system. Like many Windows resources, the process is also identified by its handle, and the handle may not be unique on the computer. The handle is a general term indicating the resource identifier. Even if the process has exited, the operating system still holds the process handle, which is accessed through the Handle property of the Process component. Therefore, you can obtain management information of the process, such as EXITCODE (usually, or a zero means success, or is a non-zero error code) and EXITTIME. The handle is a very valuable resource, so the handle leak is more harmful than the memory leakage.
Automatically stop CRACK related processes
We can use the Process class detection process to discover the CRACK-related processes to make corresponding measures. For example, stop CRACK-related processes, exit software, give a warning, change the official version into a trial version ... (Don't tell me you will call Format D :).
Process components can be stopped using the Process component to stop the process. Which way to use depends on the type of process stopped:
If the process has a graphical user interface, call the ClosemainWindow method. This method sends a shutdown request to the main window of the process, and its behavior is the same as the "Off" command from the user interface. Use this method to enable the target program to prompt the user to save any no saved data in the clear operation. If the process does not have a user interface, call the Kill method. WARNING Call the Kill method will stop the process immediately without prompting the changed data. Any data that is not saved will be lost.
I divide the CRACK-related process into four categories: anti-compilation tracking debugging monitoring other real crack masters really know how to prevent CRACK. We must first know that common CRACK-related software and its process names, especially CRACK related software under .NET. I don't understand Crack, here I only list some of the situations I have, I hope everyone will add to improve.
Here mainly use the Process.mainWindowTitle property to get the main window title of the process. [Visual Basic]
Public Readonly Property Mainwindowtitle As String
This process has a main window associated with it only when the process has a graphical interface. If the association process does not have a main window (thus mainwindowhandle is zero), mainwindowtitle is an empty string (""). If you have just launched a process and want to use its main window title, consider using the waitforInputIdle method to make the process complete the start to ensure that the main window handle is created. Otherwise, the system will trigger an exception.
Windows 98 Platform Description: If ProcessStartInfo.uShellexecute is set to TRUE when the process is started, this property is not available on this platform.
Private subclose () DIM PPROCESS () AS process pprocess = process.getProcesses () Get all current process DIM All as integer Dim MyArray () as string = _ {"assembly view", "anakrino", "borg", " Pebrowse, "ProcessDasm", "Virtualcode", "Dasm", "Ida", _ "Frogsice", "DRIVERWORKBENCH", "Ollydbg", "TWX", "TRW", "Softice", "Ntice", "SICE" ", _" API Monitor "," APIHOKS "," APIS "," API-LOG "," ApiSPY "," EXESPY "," File Monitor "," RegistryMonitor "," MemoryMonitor "," Regshot "," Regshot " , "Regsnap", "Regspy", "RES SPY", _ "CRACK", "Crack", "SN", "SN"} for all = 0 to PPROCESS.LENGTH () - 1 for kill as integer = 0 to MyArray.Length - 1 IF INSTR (PPRocess (all) .mainwindowtitle, MyArray (Kill) .tostring) Then PPRocess (all) .Kill () kills the CRACK related process END 'exits software. Here you can also add other measures' msgbox (pprocess (all) .mainwindowtitle) end if Next Next 2004 May 11, 2004
My QQ: 26624998 My website: http://blog.9cbs.net/2066/
