TEST DGINA.DLL (CTRL+ALT+SUPPR SOUS NT ET PLUS....)

Commentaire de yoman64 le 20/03/2003 18:14:07

C'est cool et utile pour les trojan    :D
Ou pour empecher son petit frere d'utiliser l'ordinateur ou l'empecher de fermer un espion :D

Commentaire de Carnage le 28/03/2003 20:24:39

tout marche parfaitement, exepté l'anti ctrl alt suppr pour xp

CaRnAgE

Commentaire de Cyberdevil le 14/07/2003 10:34:01

c possible d'avoir la source de la dll ?

Commentaire de Derrick soft le 04/08/2003 03:15:27

Bonjour,

Pour le CTRL+ALT+SUPPR cela doit corresponde à ceci :
-------------------------------- mygina.c --------------------------------
#include <windows.h>
#include <winwlx.h>

struct {
HMODULE hDll;
BOOL (WINAPI *WlxNegotiate)();
BOOL (WINAPI *WlxInitialize)();
VOID (WINAPI *WlxDisplaySASNotice)();
int (WINAPI *WlxLoggedOutSAS)();
BOOL (WINAPI *WlxActivateUserShell)();
int (WINAPI *WlxLoggedOnSAS)();
VOID (WINAPI *WlxDisplayLockedNotice)();
int (WINAPI *WlxWkstaLockedSAS)();
BOOL (WINAPI *WlxIsLockOk)();
BOOL (WINAPI *WlxIsLogoffOk)();
VOID (WINAPI *WlxLogoff)();
VOID (WINAPI *WlxShutdown)();
BOOL (WINAPI *WlxScreenSaverNotify)();
BOOL (WINAPI *WlxStartApplication)();
BOOL (WINAPI *WlxNetworkProviderLoad)();
} MsGina;

BOOL WINAPI WlxNegotiate(DWORD dwWinlogonVersion, PDWORD pdwDllVersion)
{
MsGina.hDll = LoadLibrary("msgina.dll");
if(MsGina.hDll == NULL) return FALSE;

MsGina.WlxActivateUserShell = GetProcAddress(MsGina.hDll, "WlxActivateUserShell");
MsGina.WlxDisplayLockedNotice = GetProcAddress(MsGina.hDll, "WlxDisplayLockedNotice");
MsGina.WlxDisplaySASNotice = GetProcAddress(MsGina.hDll, "WlxDisplaySASNotice");
MsGina.WlxInitialize = GetProcAddress(MsGina.hDll, "WlxInitialize");
MsGina.WlxIsLockOk = GetProcAddress(MsGina.hDll, "WlxIsLockOk");
MsGina.WlxIsLogoffOk = GetProcAddress(MsGina.hDll, "WlxIsLogoffOk");
MsGina.WlxLoggedOnSAS = GetProcAddress(MsGina.hDll, "WlxLoggedOnSAS");
MsGina.WlxLoggedOutSAS = GetProcAddress(MsGina.hDll, "WlxLoggedOutSAS");
MsGina.WlxLogoff = GetProcAddress(MsGina.hDll, "WlxLogoff");
MsGina.WlxNegotiate = GetProcAddress(MsGina.hDll, "WlxNegotiate");
MsGina.WlxScreenSaverNotify = GetProcAddress(MsGina.hDll, "WlxScreenSaverNotify");
MsGina.WlxShutdown = GetProcAddress(MsGina.hDll, "WlxShutdown");
MsGina.WlxStartApplication = GetProcAddress(MsGina.hDll, "WlxStartApplication");
MsGina.WlxWkstaLockedSAS = GetProcAddress(MsGina.hDll, "WlxWkstaLockedSAS");

return MsGina.WlxNegotiate(dwWinlogonVersion, pdwDllVersion);
}

BOOL WINAPI WlxInitialize(
LPWSTR lpWinsta,
HANDLE hWlx,
PVOID pvReserved,
PVOID pWinlogonFunctions,
PVOID *pWlxContext)
{
return MsGina.WlxInitialize(
lpWinsta,
hWlx,
pvReserved,
pWinlogonFunctions,
pWlxContext);
}

VOID WINAPI WlxDisplaySASNotice(PVOID pWlxContext)
{
MsGina.WlxDisplaySASNotice(pWlxContext);
}

int WINAPI WlxLoggedOutSAS(
PVOID pWlxContext,
DWORD dwSasType,
PLUID pAuthenticationId,
PSID pLogonSid,
PDWORD pdwOptions,
PHANDLE phToken,
PWLX_MPR_NOTIFY_INFO pNprNotifyInfo,
PVOID *pProfile)
{
return MsGina.WlxLoggedOutSAS(
pWlxContext,
dwSasType,
pAuthenticationId,
pLogonSid,
pdwOptions,
phToken,
pNprNotifyInfo,
pProfile);
}

BOOL WINAPI WlxActivateUserShell(
PVOID pWlxContext,
PWSTR pszDesktopName,
PWSTR pszMprLogonScript,
PVOID pEnvironment)
{
return MsGina.WlxActivateUserShell(
pWlxContext,
pszDesktopName,
pszMprLogonScript,
pEnvironment);
}

int WINAPI WlxLoggedOnSAS(PVOID pWlxContext, DWORD dwSasType, PVOID pReserved)
{
HANDLE hMutex;

if(dwSasType == WLX_SAS_TYPE_CTRL_ALT_DEL) {
hMutex = OpenMutex(MUTANT_QUERY_STATE, FALSE, "mygina mutex");
if(hMutex != NULL) {
CloseHandle(hMutex);
return WLX_SAS_ACTION_NONE;
}
}

return MsGina.WlxLoggedOnSAS(pWlxContext, dwSasType, pReserved);
}

VOID WINAPI WlxDisplayLockedNotice(PVOID pWlxContext)
{
MsGina.WlxDisplayLockedNotice(pWlxContext);
}

int WINAPI WlxWkstaLockedSAS(PVOID pWlxContext, DWORD dwSasType)
{
return MsGina.WlxWkstaLockedSAS(pWlxContext, dwSasType);
}

BOOL WINAPI WlxIsLockOk(PVOID pWlxContext)
{
return MsGina.WlxIsLockOk(pWlxContext);
}

BOOL WINAPI WlxIsLogoffOk(PVOID pWlxContext)
{
return MsGina.WlxIsLogoffOk(pWlxContext);
}

VOID WINAPI WlxLogoff(PVOID pWlxContext)
{
MsGina.WlxLogoff(pWlxContext);
}

VOID WINAPI WlxShutdown(PVOID pWlxContext, DWORD ShutdownType)
{
MsGina.WlxShutdown(pWlxContext, ShutdownType);
}

BOOL WINAPI WlxScreenSaverNotify(PVOID pWlxContext, BOOL *pSecure)
{
return MsGina.WlxScreenSaverNotify(pWlxContext, pSecure);
}

BOOL WINAPI WlxStartApplication(
PVOID pWlxContext,
PWSTR pszDesktopName,
PVOID pEnvironment,
PWSTR pszCmdLine)
{
return MsGina.WlxStartApplication(pWlxContext, pszDesktopName, pEnvironment, pszCmdLine);
}

BOOL WINAPI WlxNetworkProviderLoad(PVOID pWlxContext, PWLX_MPR_NOTIFY_INFO pNprNotifyInfo)
{
return MsGina.WlxNetworkProviderLoad(pWlxContext, pNprNotifyInfo);
}

-------------------------------- mygina.def --------------------------------
EXPORTS
WlxActivateUserShell
WlxDisplayLockedNotice
WlxDisplaySASNotice
WlxInitialize
WlxIsLockOk
WlxIsLogoffOk
WlxLoggedOnSAS
WlxLoggedOutSAS
WlxLogoff
WlxNegotiate
WlxScreenSaverNotify
WlxShutdown
WlxStartApplication
WlxWkstaLockedSAS

Pour les autres touche ce doit être le principe standard.

Commentaire de Derrick soft le 04/08/2003 06:20:22

Re,

Voici un code complet pour une autre DLL pGina.dll, toujours en C. Tous est incorporé, il existe même la version 1.3.0 qui est trafuite en Français.

Commentaire de JLN le 04/08/2003 11:28:35

Chouette ! un grand MERCI à Derrick Soft, ca c'est du super et je ne crois pas me tromper si je dis que là nous avons quelqu'un qui sait faire profiter les autres de son savoir. Merci encore.

JLN

Commentaire de Douns le 05/04/2004 14:44:02

Chapeau, c'est trop fort! Un grand merci, c'est exactement ce que je rechechais! Si je pouvais, 15/10!!!