| |
| |
|
 | so - on GEHTS...
first thing produce we time a directory C:TEMP and copy Frank Abbings ProSpeed.dll there into. Why straight C:TEMP? this is really alike, the Verzeichnisname ought to but possible be short. now started we WordPad, and thereafter TNT (the new Version of TNT Please, this is important). now go The Handles the Window of Wordpad important. we search one Window, which lever of/ one address corresponds to, The in WordPad physikalischem memory allocated is and on The read- and Schreibrechte consist. means - freshly ans Werk - Window in the Treeview select, each Fensterhandle copy, Process select, Rechtsklick on Process and Info over address select. No address found? then whom computer restart and it over again try.
by me under windows2000 have I The address 65752 found.
then look we The Module something hither on and clicking on The KERNEL32.DLL. here interested us The address the function LoadLibraryA in the Process, The we into Clipboard copy (by me 2011669076).
after we in the Hauptfenstermenü String Bytefolge transfiguring klicked and there C:TempProSpeed.dll association having go we integrally impudent, dial again whom WordPad-Process and clicking right (in the Treeview) circa a Speicherbereich To Change.
under address the Speicherbereichs give we The found address (means by me 65752) one. with Hexadezimaler new Content hang we two nobodies on and pressing then Speicherbereich Change.
[...] 
as nächtes clicking we in the Treeview again the window (with the lever 65752) on, to the we The address sought having. Wiedermal Rechtsklick and then Timernachrit Send - as address take we here The before from the KERNEL32.DLL herausgesuchte Funktionsadresse and send The Klamotte ex.
now in the Treeview again on the Process WordPad clicking and flux once The Module angeschaut:
[...]
who itself now already wundert, ought to the Please yet something move...
Un interested now The address the function Version in the Process (by me 268440346), means once Please in the Treeview on The ProSpedd.dll clicking.
then dial we in the Treeview the Mainwindow of WordPad from - cover: document - WordPad and Send again a Timernachricht. as address give we here The address the function Version (268440346) one.
it shows itself the following Image.:
[...]
who now think, The Messagebox has TNT created, can gladly TNT once terminate - The Messagebox remaining receive, To WordPad terminates.
What is happen? operates Frank since years insgeheim for Microsoft?? Nutzt Microsoft The ProSpeed.dll without Franks know circa defined Abläufe in WordPad faster To style??? :lach : (...I hope, Frank vergibt me whom small Fun...)
now time integrally in the serious - I here aufgezeigt have, is one of presumably three Opportunities, DLLs in stranger processes To loading ... - and zumindestens IF (=> THREAD.PCU => inspired pfiffige application of Timern) becomes too without further Explanations understand, what there very to itself goes. i'll me therefore here once the Why limit. which benefit has it, itself in strangers Prozessen To find?
integrally simply: some APIs can only within one jeweiligen Prozesses perform - not outside. If it circa Special Forces in the Programming goes, - How to that example around the find out of Hintergründen and the investigating of Prozessen to that create new Programmiermöglichkeiten - stößt one there very quick on unpleasant border. One Process, in the I in the moment very gladly find would, is z.B. the service CSRSS. unfortunately has Microsoft apparently something against it, that I there einklinke  , what my credit in the WindowsNT ff as on itself already quite sicheres OS time again confirm has.
over again Screen memory, the behind all angry Virenschreiber vermutet ...
my opinion: to that creak one Rechners taugt the at best sake not, because I custom The rights PROCESS_VM_READ, PROCESS_VM_OPERATION and PROCESS_VM_WRITE -> TNT bid there Yes very good Opportunities time nachzusehen, who these rights at all has. whom proprietor-I factor must one there naturally too yet respect, what but in the principle no menace for Systemsicherheit means. |
 |
| |
| |
| |
|
|
Frank
Abbing | I suspect certainly not behind everything angry Virenschreiber. but rather jan is afraid, as jan is dead... are Yes often The still and Unscheinbaren. such, The never strike and always nice To each are... 
Übrigens is the ProSpeed.dll ex Version 2.8 Freeware. who the latest Image sees, could there what missverstehen... |
|
| |
| |
| |
|
|
Jac
de
Lad | The Prospeed beschwert itself after a while but still, that they not registered is. I have iene Possibility found, the To bypass (it was indeed not heavy to find) but somehow is the comic. (or I Have ne incorrect Version, but I have definitiv Version 2.8!)...
Jac  |
|
| |
| Profan² 2.6 bis XProfan 11.1+XPSE+XPIA+XPRR (und irgendwann XIDE)
Core2Duo E8500/T2250, 8192/1024 MB, Radeon HD4850/Radeon XPress 1250, Vista64/XP | 07/04/06 ▲ |
|
| |
|
|
Frank
Abbing | | probably have you got yet somewhere a old Version present. Perhaps in the Systemordner. by me comes already long no Message More. |
|
| |
| |
| |
|
|
Jac
de
Lad | I lads me again down. Schade, that they not any more weiterentwickelt becomes, The need I for almost each proposition...  |
|
| |
| Profan² 2.6 bis XProfan 11.1+XPSE+XPIA+XPRR (und irgendwann XIDE)
Core2Duo E8500/T2250, 8192/1024 MB, Radeon HD4850/Radeon XPress 1250, Vista64/XP | 07/05/06 ▲ |
|
| |
|
|
Frank
Abbing | Well, I consider once in a while yet what einzufügen, if I New Features need and not extra a Dll for make would like. So not auszuschliessen, that yet Updates come...  |
|
| |
| |
| |
|
|
Jac
de
Lad | |
| |
| Profan² 2.6 bis XProfan 11.1+XPSE+XPIA+XPRR (und irgendwann XIDE)
Core2Duo E8500/T2250, 8192/1024 MB, Radeon HD4850/Radeon XPress 1250, Vista64/XP | 07/05/06 ▲ |
|
| |
|
|
Timotheus | I Have a idea. Mach still The Prospeed.dll to a manner Community-proposition. best make we here for one extra Teilforum, and the can then eachone mitarbeiten. and of course so: whoso pleasure has, can a function in Assembler write, and these becomes then of Frank examined and then installed. therefore could The Prospeed-DLL to the umfangreichsten DLL go, The The Profanwelt apiece seen has.  |
|
| |
| |
| |
|
|
Frank
Abbing | without your Eifer break To want... 
1. have I do not enough Time moreover (installation, guide, etc.).
2. gives it here little handful Assemblerprogrammierer
3. functions such projects not really well (z.B. Okrea)
who but means, he had a sinnvolle function prepares, The absolutely be installed should, can me anytime therefore kontakten what about me baus one, if it me too meaningfully appear. |
|
| |
| |
| |
|
|
Timotheus | | guide istz not the trouble, the can Yes eachone self what moreover write, and another bisschen the whole into Reinform bring, lasts neither very long. On jedenfall is the a good idea, and with general things bräuchte one itself then not always self another DLL To make. I schick you on the weekend something To and mach whom beginning 8) |
|
| |
| |
| |
|
|
Frank
Abbing | go ahead  |
|
| |
| |
| |
|
(1.009)
Deutsch
English
Français
Español
Italia
