2009年10月13日
#
https://addons.mozilla.org/en-US/firefox/addon/tab-mix-plus/
https://addons.mozilla.org/en-US/firefox/addon/firegestures/
http://code.google.com/p/gmarks/downloads/detail?name=GMarks-1.0.3.xpi&can=2&q=
http://www.firefox.net.cn/forum/viewtopic.php?t=29894
as3优化总结
有意思的一条：
10) 寻找局部变量(this方法同with方法比较)
局部变量的定位方法很多。我们发现用with比用this更加有优势！
今天项目Milestone3的review
总体各方面来说还挺满意
最近不少wower包括我自己都碰到了wow目录下出现危险dll文件而可能遭木马窃取资料的情况，
做了个小工具，与大家分享，欢迎交流意见建议。
[::艾泽拉斯国家地理 BBS.NGACN.CC::]
在对于那些dll文件的最后修改时间与标准版本最后修改时间比较，我不太清楚大家手头的dll文件如何， 希望大家能把使用中出现的情况反馈给我，在此感谢。
在您wow前、wow时打开WowDLLChecker，它将帮助您找出并保持检测扫描：
wow.exe和目录下DLL等被修改过的文件、危险的多余DLL文件、以及缺失的文件。
不用担心有dll文件属性是只读或隐藏或系统，工具是会扫描到的。
同时还为你检查是否有wow,laucher的映像劫持。
使用：放置到你的wow文件夹并执行。
PS. 此程序无任何对网络的访问。
这个链接应该可以吧
猛击此处下载→ [ WowDLLChecker_20100921_1.0.3.22.rar] 59.3 KB
缺少.Net库的童鞋请下载[ http://www.microsoft.com/downloads/details.aspx?FamilyID=0856EACB-4362-4B0D-8EDD-AAB15C5E04F5&displaylang=zh-cn Microsoft .NET Framework Version 2.0 组件包(x86) ]
== Log ==
20091103 1.0.2.0 new features: MD5 check;
Tool self check result;
Wow.exe and Launcher.exe check;
Colorized rows to indicate file status.
20091104 1.0.2.1 new features: Changed last modified time judgement;
Configuration of keep checking;
Fixed language setting;
Minimized tray has a balloon tooltip now.
20091113 1.0.2.2 new features: Disabled the judgement for last modified time;
Fixed the colorize process.
20091114 1.0.2.3 new features: Looped in repair.exe;
Indicates wow client version the tool is based on;
Added suggestion message;
Adjusted the colorize process.
20091208 1.0.2.4 new features: Now concerns some DLLs of vc7 env;
Prepare checking system for multi regions.
20100202 1.0.3.0 new features: Now supports examination for WOW.TW;
Supports region selection between: zhCN, zhTW;
Supports language selection between: simplified Chinese, traditional Chinese, english;
Auto check your region for first running this app;
Auto saves/loads your changed settings.
20100915 1.0.3.20 Updated for CWOW WLK.
Sorry that in this version, TW info is wrong.
20100916 1.0.3.21 Bug fix.
20100921 1.0.3.22 Enhanced security check with MD5 and Exe Dll FileVersion.
Compatible with different versions of msvc dlls.
Info of zhCN 3.2.2.12484 added.
Info of zhTW 3.3.5.12340 added.
WowDLLChecker.exe
Size: 69645 bytes
File Version: 1.0.3.22
Modified: Tuesday, September 21, 2010, 11:03:05
MD5: 9ADC90F7AA797F19C76EF5AF0D8AD74F
SHA1: EAC9FA7ABA22534D2E9CEEE87C8E37AA281E9CD2
CRC32: 43D7A492
WowDLLChecker_20100921_1.0.3.22.rar
Size: 61572 bytes
Modified: Tuesday, September 21, 2010, 11:05:47
MD5: E15F7C16B908A2BE4FC3E80B9ED1694B
SHA1: 3D736739890938C9AF85A0D4B6914D024613D0CE
CRC32: CA778324
LOG.
--DONE
多余非官方文件√
文件大小比较√
最后修改时间比较√
MD5√
IFEO of wow.exe, launcher.exe√
支持台服√
支持多语言√
自检测结果√
--TODO
被加载DLL
1 // #pragma comment(linker, "/subsystem:\"windows\" /entry:\"mainCRTStartup\"")
2
3 #include "GL\glut.h"
4 #include <iostream>
5
6 static GLfloat fSpin = 0.0;
7 static GLfloat fClearBlue = 0.2;
8 static bool bRotating = false;
9
10 void display(void)
11 {
12 // clear
13 glClear(GL_COLOR_BUFFER_BIT);
14
15 glPushMatrix();
16 glRotatef(-fSpin, 0.0, 0.0, 1.0);
17 glColor3f(1.0, 1.0, 1.0);
18 glRectf(-25.0, -25.0, 25.0, 25.0);
19
20 glColor3f(1.0, 0.0, 0.0);
21
22 glBegin(GL_POLYGON);
23 glVertex3i(-16, 18, 0);
24 glVertex3i(16, 18, 0);
25 glVertex3i(16, 10, 0);
26 glVertex3i(-16, 10, 0);
27 glEnd();
28
29 glBegin(GL_POLYGON);
30 glVertex3i(-4, 10, 0);
31 glVertex3i(4, 10, 0);
32 glVertex3i(4, 5, 0);
33 glVertex3i(-4, 5, 0);
34 glEnd();
35
36 glBegin(GL_POLYGON);
37 glVertex3i(-20, 5, 0);
38 glVertex3i(20, 5, 0);
39 glVertex3i(20, -3, 0);
40 glVertex3i(-20, -3, 0);
41 glEnd();
42
43 glBegin(GL_POLYGON);
44 glVertex3i(0, 2, 0);
45 glVertex3i(18, -16,0);
46 glVertex3i(13, -21,0);
47 glVertex3i(0, -8,0);
48 glEnd();
49
50 glBegin(GL_POLYGON);
51 glVertex3i(0, 2, 0);
52 glVertex3i(-18, -16,0);
53 glVertex3i(-13, -21,0);
54 glVertex3i(0, -8,0);
55 glEnd();
56
57 glPopMatrix();
58
59 glutSwapBuffers();
60 }
61
62 void spinDisplay(void)
63 {
64 // change the params for displaying the squre
65 fSpin += 0.05;
66 if (fSpin > 360.0) {
67 fSpin -= 360.0;
68 }
69 glutPostRedisplay();
70 }
71
72 void reshape(int w, int h)
73 {
74 glViewport(0, 0, (GLsizei) w, (GLsizei) h);
75 glMatrixMode(GL_PROJECTION);
76 glLoadIdentity();
77 glOrtho(-50.0, 50.0, -50.0, 50.0, -1.0, 1.0);
78 glMatrixMode(GL_MODELVIEW);
79 glLoadIdentity();
80 }
81
82 void mouse(int button, int state, int x, int y)
83 {
84 switch(button) {
85 case GLUT_LEFT_BUTTON:
86 // start or stop the rotating square
87 if (state == GLUT_DOWN && !bRotating) {
88 bRotating = true;
89 glutIdleFunc(&spinDisplay);
90 }
91 else if (state == GLUT_DOWN && bRotating) {
92 bRotating = false;
93 glutIdleFunc(NULL);
94 if ((GLint)(fSpin+0.5)%90 == 0) {
95 fClearBlue = 1.0 - fClearBlue;
96 glClearColor(0.0, 0.0, fClearBlue, 0.0);
97 }
98 }
99 break;
100 case GLUT_RIGHT_BUTTON:
101 break;
102 default:
103 break;
104 }
105 }
106
107 void init(void)
108 {
109 // select the clearing color
110 glClearColor(0.0, 0.0, fClearBlue, 0.0);
111
112 glShadeModel(GL_FLAT);
113 }
114
115 void idle(void)
116 {
117 if (glutGetWindow() == 0) {
118 exit(0);
119 }
120 }
121
122 /*
123 * Declare display mode, window size, position,
124 * open a window titled,
125 * call init routines,
126 * register display, reshape, mouse callback function
127 * enter main loop
128 */
129 int main( int argc, char * argv[] )
130 {
131 glutInit(&argc, argv);
132
133 // GLUT_DOUBLE - double buffer
134 glutInitDisplayMode(GLUT_RGB | GLUT_DOUBLE);
135 glutInitWindowPosition(100, 100);
136 glutInitWindowSize(400, 400);
137 glutCreateWindow("DoNeY's first OpenGL app");
138
139 init();
140
141 glutDisplayFunc(&display);
142 glutReshapeFunc(&reshape);
143 glutMouseFunc(&mouse);
144 glutIdleFunc(&idle);
145
146 glutMainLoop();
147 return 0;
148 }
149
1 1
2 2 #include "GL\glut.h"
3 3
4 4 void Render()
5 5 {
6 6 glClearColor(0.0, 0.0, 0.3, 0.0);
7 7 glClear(GL_COLOR_BUFFER_BIT);
8 8 glColor3f(1.0, 0.5, 0.5);
9 9 glOrtho(0.0, 1.0, 0.0, 1.0, -1.0, 1.0);
10 10 glBegin(GL_POLYGON);
11 11 {
12 12 glVertex3f(0.5, 0.75, 0.0);
13 13 glVertex3f(0.8, 0.25, 0.0);
14 14 glVertex3f(0.2, 0.25, 0.0);
15 15 }
16 16 glEnd();
17 17
18 18 //glRectf(-0.5f,-0.5f,0.5f,0.5f);
19 19
20 20 glFlush();
21 21 }
22 22
23 23 int main( int argc, char * argv[] )
24 24 {
25 25 glutInit(&argc, argv);
26 26 glutInitDisplayMode(GLUT_RGB | GLUT_SINGLE);
27 27 glutInitWindowPosition(100, 100);
28 28 glutInitWindowSize(400, 400);
29 29 glutCreateWindow("DoNeY's first OpenGL app");
30 30 glutDisplayFunc(&Render);
31 31 glutMainLoop();
32 32 return 0;
33 33 }
34 34
35
大部分的病毒和木马都是通过加载系统启动项来运行的，也有一些是注册成为系统服务来启动，他们主要通过修改注册表来实现这个目的，主要有以下几个键值：
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsCurrent\Version\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsCurrent\Version\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsCurrent\Version\RunServicesOnce
但是与一般的木马，病毒不同的是，就有一些病毒偏偏不通过这些来加载自己，不随着系统的启动运行。木马病毒的作者抓住了一些用户的心理，等到用
户运行某个特定的程序的时候它才运行。因为一般的用户，只要发觉自己的机子中了病毒，首先要察看的就是系统的加载项，很少有人会想到映像劫持，这也是这种病毒高明的地方。
映像劫持病毒主要通过修改注册表中的
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\
项来劫持正常的程序，比如有一个病毒 vires.exe 要劫持qq程序，它会在上面注册表的位置新建一个qq.exe项，再在这个项下面新建一个字符串的键 debugger把其值改为C:\WINDOWS\SYSTEM32\VIRES.EXE(这里是病毒藏身的目录)即可。
摘要: WowDLLChecker (c) Ouditian [rev.20091208] ver 1.0.2.4 for CWOW 3.1.3
Put this checker into your World of Warcraft directoy and execute it to check dangerous DLLs.
WowDLLChecker.exe
阅读全文
Where is Form's Loaded event?
[FW]http://weblogs.asp.net/kennykerr/archive/2004/11/26/where-is-form-s-loaded-event.aspx
Wow, it’s been a while since I last posted something here. We’ve recently moved to BC so I’ve been pretty distracted. I hope to be able to post more regularly in the coming weeks.
This is a bit off-topic for me but here goes.
Recently I needed to run some code right after a form is displayed for the first time. The Form.Load
event is handy for performing various tasks when a form is loading but
before it is displayed for the first time. Unfortunately there is no
corresponding Form.Loaded event to notify the application that the form
has actually loaded and is visible.
Fortunately it’s quite easy to pull it off without resorting to the WaitForInputIdle function. All you need to do is override Form’s OnLoad method and add an event handler for the Application.Idle
event. Since we only want to be notified a single time that the form is
loaded, we immediately remove the delegate in the event handler. You
can of course register the event handler earlier in the form or
application’s lifetime but I prefer to keep delegates registered for as
short a period as possible.
Here’s a simple example:
1 protected override void OnLoad(EventArgs args)
2 {
3 base.OnLoad(args);
4
5 Application.Idle += new EventHandler(OnLoaded);
6 }
7
8 private void OnLoaded(object sender,
9 EventArgs args)
10 {
11 Application.Idle -= new EventHandler(OnLoaded);
12
13 // TODO: add relevant code here
14 }
15
This
might be useful, for example, if you need to prompt the user (the
horror!) for something but would prefer the dialog box to appear in the
context of your application’s main window.
© 2004 Kenny Kerr
摘要: UltraEdit 允许在搜索菜单下面列出了的许多搜索和替换功能中使用正则表达式。正则表达式能让更多的复杂的搜索和替换功能变成简单的操作。（中文版界面上显示为“正规表达式”）
有两个可使用的语法集合。下面的第一表显示出在 UltraEdit 的更早的版本被使用的原来的 UltraEdit 句法。第二表给出了可选的"Unix"类型的正则表达式。这可以从配置单元启用。
&n...
阅读全文