about 6 months ago in our college they decided to restrict us with some kind of software which is its task is to lock folders and drives and so many other cool things.
well on that time I wasn't so curious about that until one of my friend told me that he is in trouble with these kind of crappy restrictions.
after that I start to investigation on "pc security" and the solution was simple and funny.
when you install this s/w on your computer it will put 2 exe files in your windows directory and startup called:
winwd.exe
sdeamon.exe
and if you bring on the task manager you gonna find them there and if you try to end task these two files you will see they gonna start their job again.
well at first try I start to rename them from windows directory and then try to kill them from task manager and BINGO it was successful try.
it is quite easy first try to rename or delete these two files from windows directory then kill them from task manager.
I also write a tiny c++ code for automating this task :
//code in vc++.net 2008
int _tmain(int argc, _TCHAR* argv[])
{
TCHAR windiro[INFO_BUFFER_SIZE];
TCHAR windir[INFO_BUFFER_SIZE];
TCHAR exec[8];
TCHAR s1[]=_T("\\sdeamon.exe");
TCHAR s2[]=_T("\\winwd.exe");
_tprintf(_T("bypassing pcsecurity \n"));
GetWindowsDirectory(windir,INFO_BUFFER_SIZE);
GetWindowsDirectory(windiro,INFO_BUFFER_SIZE);
_tcscat(windir,s1);
_tcscat(windiro,s2);
_tprintf(windir);
_tprintf(windiro);
DeleteFile(windir);
DeleteFile(windiro);
HINSTANCE nr = ShellExecute(NULL,_T("open"),_T("taskkill"),_T("/f /im sdaemon.exe"),_T("C:\\"),SW_SHOWNA);
HINSTANCE nr1 = ShellExecute(NULL,_T("open"),_T("taskkill"),_T("/f /im winwd.exe"),_T("C:\\"),SW_SHOWNA);
if (nr == 0)
_tprintf(_T("successful"));
else
_tprintf(_T("unsuccessful"));
int i;
_tscanf(exec);
return 0;
}
Njoy.
سلام
ReplyDeleteمیتونم آی دی ِاهوتون رو داشته باشم ؟
اگه میشه لطف کنین به این ارسال کنید:Myproxy200@gmail.com
با کمال تشکر
LOL... Its very very same as one of my old programs.
ReplyDeletebtw i coded a new one that finds real password of the PC Security ;-)
http://www.persian-forums.com/f219/tropsoft-pc-security-v6-4-password-fisher-coded-vesa-24299/#post84767
But you can rename the files in win dir versus delete them, so it can be returnable to active mode, and one of tasks are system task, r u sure taskkill can terminate it? i coded a function just for this in that program!
ReplyDeleteanyway thanks for sharing your knowledge ;-)
@amir hossein
ReplyDeletefor sure ma solution works cause I was the one in college that messing up with lab's computers.
sometimes I felt sorry for the poor administator