禁止SnagIt截图软件抓取视频问题的解决办法

禁止SnagIt截图软件抓取视频问的解决办法 ?ûÖ?SnagIt?ØÍ?Èí?þ×?È?ÊÓƵÎÊÌâ ???ñÌì?ò?ªÒ??öÊÓƵ?Ì?Ì,Ïë?ØÈ????ʵÄÊÓÆÁ??µ?ÎÒÓÃSnagit×?È?ÆÁÄ?ÊÓÆÁÊ??? ?ÃexeÊÓÆÁÈí?þµ??ö:?ì?âµ?Â?ÏñÈí?þsnagit32.exe...È?ºóÍ?ÁË.... ÄѵÀ??ÒªÄÃÊÖ?úÅÄÂð???Ï?????É??ÓеçÄÔ??ÓÃÊÖ?ú??Ð??û????ºÃ... ÆÆÖ?.... ?ì?âÎÄ?þ?º??ÏÖÔÚ C:\Documents and Settings\Administrator\Local Settings\Application Data\libÏÂ?àÁË C:\Documents and Settings\Administrator\Local Settings\Application Data\lib µÄÄ?Â? 2015-01-31 10:29 . 2015-01-31 10:29 .. 2015-01-30 17:18 299,864 cuspro.dll 2015-01-30 17:18 55,264 EDOG.dll 2015-01-30 17:18 39,256 global.dll 2015-01-30 17:18 3,054,128 libwzplayer2.dll 2013-08-05 15:04 7,419,224 Player.dll 2015-01-30 13:10 6,899,120 temp.dll 2015-01-30 17:18 58,712 WzPlayerControl.dll 2015-01-30 17:18 274,608 wzplayerExt.dll ?ì?â?ø?Ì????ÏÖ?àÁË?öplayer.dll?ø?Ì,HookÆäEnumWindows,È?ºó?Í?????æÁË, snagitÔËÐÐÕý?? µ??ò?ª????ÓÐÉùÒôÎÞÍ?Ïñ.ÓÃPrintScreen?ü??×?È?Í?Æ???×?È?µÄÍ?Æ?ÊǺÚÉ?µÄ???????ù???? ÐÐ?? ?Ù?ÈÁËÒ?ÏÂ???â?ö?ì??ÈçÏÂ: ?ØÖÆÃæ?å-->ÏÔÊ?-->ÉèÖÃ-->?ß??-->ÒÉÄÑ?â?ð-->Ó??þ?ÓËÙ-->ÎÞ,Ò?ÇÐOK!!! ??MASMÔ??úÂë: .486 .model flat,stdcall option casemap:none include d:\masm32\include\windows.inc include d:\masm32\macros\macros.asm include d:\masm32\include\kernel32.inc include d:\masm32\include\ws2_32.inc includelib d:\masm32\lib\ws2_32.lib includelib d:\masm32\lib\kernel32.lib include d:\masm32\include\user32.inc includelib d:\masm32\lib\user32.lib HOOKAPI struct a byte ? PMyapi DWORD ? d BYTE ? e BYTE ? HOOKAPI ends WriteApi proto:DWORD,:DWORD,:DWORD,:DWORD .data .data? NID dd ? WProcess dd ? hacker HOOKAPI <> CommandLine LPSTR ? Papi1 DWORD ? ApiBak1 db 10 dup(?) Apinew db 10 dup(?) hwnd dd ? snum db ? .code F2 proc b1:DWORD,b2:DWORD mov eax,TRUE ret F2 endp DllEntry proc hInst:HINSTANCE, reason:DWORD, reserved1:DWORD .if reason==DLL_PROCESS_ATTACH ;µ?DLL?ÓÔØÊ??úÉú?ËÊÂ?þ mov eax,5000 mov NID,eax invoke GetForegroundWindow invoke SetWindowText,eax,SADD("?ÓÔØDLL?É??") invoke GetCommandLine mov CommandLine,eax mov hacker.a,0B8h mov hacker.d,0FFh ;jmp mov hacker.e, 0E0h ;eax invoke GetCurrentProcess ;È??ø?ÌÎ??ä?ú mov WProcess ,eax ;?ÀÖ?Ã??ÓÔØÒªÔ?ÏÈ?ÓÔØDLL invoke GetModuleHandle,SADD("user32.dll") .if eax==NULL invoke LoadLibrary,SADD("user32.dll") .endif invoke GetProcAddress,eax,SADD("EnumWindows") ;?ØÐë ?ÉÒÔÆô??ÆÁÄ?Â?Ïñ?øÎÞ???æ,µ?Â??öµÄÊÓÆÁÎÞÍ?Ïñ??ÓÐÉùÒô?? ;?â?öÄ?Ð?ÊÓÆÁÎÞÍ?Ïñ ?ØÖÆÃæ?å-->ÏÔÊ?-->ÉèÖÃ-->?ß??-->ÒÉÄÑ?â?ð-->Ó??þ?ÓËÙ-->ÎÞ mov Papi1,eax ;???æAPIµØÖ? invoke ReadProcessMemory,WProcess,Papi1,addr ApiBak1,8,NULL ;???ÝÔ,APIµÄÇ?8×Ö?Ú mov hacker.PMyapi,offset F2;0x0000,ÕâÀïÉèÖÃÌæ?úAPIµÄº?ÊýµØÖ? invoke WriteApi,WProcess,Papi1, addr hacker ,size HOOKAPI ;HOOK API invoke ReadProcessMemory,WProcess,Papi1,addr Apinew,8,NULL ;???ÝÏÖÔÚAPIµÄÇ?8×Ö?Ú .endif .if reason==DLL_PROCESS_DETACH ;invoke WriteApi,WProcess,Papi1, addr ApiBak1 ,8 ;??Ô,API .endif mov eax,TRUE ret DllEntry Endp WriteApi proc Process:DWORD ,Papi:DWORD,Ptype:DWORD,Psize:DWORD LOCAL mbi:MEMORY_BASIC_INFORMATION LOCAL msize:DWORD invoke VirtualQueryEx,Process, Papi,addr mbi,SIZEOF MEMORY_BASIC_INFORMATION invoke VirtualProtectEx,Process, mbi.BaseAddress,8h,PAGE_EXECUTE_READWRITE,addr mbi.Protect invoke WriteProcessMemory,Process, Papi, Ptype,Psize ,NULL PUSH eax invoke VirtualProtectEx,Process,mbi.BaseAddress,8h,PAGE_EXECUTE_READ,addr mbi.Protect pop eax ret WriteApi endp End DllEntry ??ÒÔÉÏ?úÂë?æΪpo.asm ?àÒë: d:\masm32\bin\ml /c /coff po.asm d:\masm32\bin\Link /SUBSYSTEM:WINDOWS /DLL po.obj ÄãµÄmasm32ÒªÔÚd:\ ÔÙ?Ñ?àºÃµÄpo.dll×?Èëplayer.dll?ÍÐÐÁË ??Òé?ºÔÚ??ÆÁÄ?Â?ÏñÊ???Òª?ÀHOOKAPI,ÕâÑù?ÉÒÔÌá?ßÄãÃǵÄ??ÆÁÄ?Â?ÏñË?Æ???