Can You Close This Program Without Using The Exit Button??!

[Rodik]

Hi! I've rewritten a portion of code of an old security program of mine. You are welcome to download it and use it if you want.

Can you close the program (in High Security mode) without using the Exit button?

Please download it and try it, If you can't close it without the Exit button, then post a message saying so.

This is SERIOUS work!

Features:

- List all windows/handles in the system.
- Show/Hide/Terminate any process.
- Auto-Hide List will automatically hide all windows matching any criteria in the AH-list.
- Password protected (And encrypted)
- HotKey Enabled (To show/hide the program)
- Advanced Modes (Lists also hWnd number)
- Log files
- High Security (UNTERMINABLE)


When the program starts, "nothing" will happen until you press the default hotkey Ctrl+Alt+A. The program wont ask for a password if the password is "" (which it is by default).

Practically, what I want you to do is go to Advanced Mode by clicking the Arrows, then checking the "High Security" checkbox. Then hide the program again (using the hotkey), and do what ever you can to shut the program down or terminate it.

If you can succeed in terminating the program (when it is hidden and in High Security mode) please tell me how you did. I myself have tried everything, and I just couldn't terminate it So I'm asking you to help me find a vulnerability...

That is, of course, if you even find the program in your task list.

Also tell me of any errors you encounter and how to reproduce them.

Note: Source is not attached because it contains code from a commercial project.


So... Can YOU terminate Api Manager?

[Rodik]

Please! Can you help me with this?
It's not too difficult...

Just run the program and see if you can close it without using the Exit button... how loong can that take? A Minute?

Please! Tell me if you succeded or not...

[API_fool]

how does it work what does it do?

[axion_sa]

i don't think anyone's going to play with a compiled program...

but, what u can try is enumerate all the windows (Declare Function EnumWindows Lib "user32.dll" (ByVal lpEnumFunc As Long, ByVal lParam As Long) As Long) & look for your program, then use SendMessage (Declare Function SendMessage Lib "user32" Alias "SendMessageA" (ByVal hwnd As Long, ByVal wMsg As Long, ByVal wParam As Integer, ByVal lParam As Any) As Long) with WM_DESTROY (Private Const WM_DESTROY As Long = &H2) to terminate the program.


just a thought

[Rodik]

Actually, it's got protection against that...

But what do you mean by

i don't think anyone's going to play with a compiled program...

What's the difference between this and ANY other program you download of the Internet? This is more safe because I, the author, personally guarantee that it's not a virus or whatever you might think it is... "trojan horse" or anything. For that, download Kazaa...

[API_fool]

Ctrl+Alt+Del
gets rid of it!

i9f you want to check wether or not its high security try my program ! it will see all programs running and has the feature to terminate them!

[Rodik]

Actually, my program does that too (If you would read the first post) and alot of other stuff.

I tried both Using Ctrl+Alt+Del and your prog, but neither would close my program.

Did you press Ctrl+Alt+A to bring it up and then chose "High Security" mode?

[Rodik]

You might want to enable logging to see what the program detects.

Take this for example when windows first tries to end the program, then terminate it. Both failing.

[2002-07-08 - 09:51:11] Unauthorized shutdown detected (END), denying...
[2002-07-08 - 09:51:11] Denying successful. Api Manager still online.
[2002-07-08 - 09:51:53] Unauthorized shutdown detected (TERMINATE), denying...
[2002-07-08 - 09:51:53] Denying successful. Api Manager still online.

[Rodik]

I found out that using this you can also make the desktop invisible and stuff like that.

You also can make hidden windows visible that windows use. really cool

[Hampster]

Cool, I can't close it in XP

Do you detect the system directory to run C:\windows\system\csrss.exe? I didn't see GetSystemDirectory being called... what if the directory is C:\winnt\?

[Hampster]

Martin Wilson, is your system directory C:\winnt?

[Martin Wilson]

No...oh well.