Messages

101

DonationCoder.com Newsletters / Re: Special Edition Newsletter for January 4th, 2010 - Codename "NANY APPS 2010"

« on: January 04, 2010, 07:37 PM »

Ath: I also haven´t coded even a single line till a few days before new year. Nevertheless, I decided to make it somehow and so I did. Nany can also be the start for a new program that´ll evolve over the following year(s).

102

N.A.N.Y. 2010 / Re: NANY 2010 - Mini NANY Submissions

« on: January 04, 2010, 02:17 PM »

I think such an announcement calls for an English version, don't you?

I´ll make a translated version and release it.

I don't understand how to use the program in its present form.

I also had some problems with it after this long pause and it seems you have to go a clear defined way to get to your aim because of a small design mistake. If it´s no big work I´ll try to fix it.

Any difference between '_static.exe' and '_winstandardDLL.exe' ?

Static includes my (at this time actual) local mfc dlls into the executable (this must be able to run without problems) while winstandarddll uses older ones with differences in the interface and its calling convention that´s more compatible to other compilers but can cause a different behaviour of the program.

103

N.A.N.Y. 2010 / Re: NANY 2010 Release: Crush MCP

« on: January 03, 2010, 10:09 AM »

Crush MCP V1.01 is now online with a lot of internal changes and some small improvements.

104

N.A.N.Y. 2010 / Re: NANY 2010 - The Event Concludes

« on: January 01, 2010, 09:00 PM »

Thx Perry! Nice work!

105

N.A.N.Y. 2010 / Re: NANY 2010 Release: Crush MCP

« on: January 01, 2010, 07:10 AM »

I told you that I only code things I can use on my own. I cannot take care of dumb users who don´t know what they´re doing. Something that influences your system like this one should only be used by experienced users. The most important things you must take care of I wrote with a big !!! ATTENTION !!! and that´s all I can do until now. Perhaps later I include a function to add the most important processes on the first startup and autoactivation of the whitelist. This could also be a high security risk because quick automatic whitelistening can only take care of the filename and not other informations at this state of the program.
One of the main difference I wanted to other task-controllers was an automatic program termination without being bothered by stupid requesters. The user should decide if he likes this or not. The only protection MCP can give you to not destroy a running OS is to terminate only user processes and nothing from the system.... hmmm, this leads me to a new idea for a feature: Soft-termination by message-commands so the programs have the possibility to save datas before termination (I´ll take this on the list).
The released version is very slow and the next release will be much more CPU & Memory friendly (already done). I started to work on new features.

106

N.A.N.Y. 2010 / Re: NANY 2010 Release: Crush MCP

« on: December 30, 2009, 03:36 PM »

Crush MCP V1.0 is online now!

107

N.A.N.Y. 2010 / Re: NANY 2010 Release: Crush MCP

« on: December 30, 2009, 10:53 AM »

I could insert all running tasks first, but I don´t think it´s useful if spyware/adware is running at this moment and will be added to the active whitelist.

108

N.A.N.Y. 2010 / NANY 2010 Release: Crush MCP

« on: December 30, 2009, 10:08 AM »

NANY 2010 Entry Information

Application Name	Crush MCP
Version	V1.01
Short Description	Check running processes (because of its heavy system-influence: use it on your own risk - with running it you agree that I´m not responsible for any damages resulting from the usage)
Supported OSes	Windows Vista & Windows 7
Web Page	-
Download Link	Crush MCP V1.01.zip (1534.54 kB - downloaded 538 times.)
System Requirements	Pentium 400Mhz should be enough
Version History	09/12/31 Release V1.0 10/01/03 Release V1.01
Author	[url=https://www.donationcoder.com/forum/index.php?action=profile;u=51520]Crush
Screencast	https://www.donation...ushmcp/crushmcp.html YouTube: http://www.youtube.c.../watch?v=El5IY9qhet4

Description
The Master Control Program is a small tool running in the background that monitors all tasks and programs.
After making a snapshot of all running processes new ones will be terminated and tracked in a deletion list.
So you can see and get protected if a virus or other unknown programs are automatically starting in the background without your permission to raise your security while working.
I recommend only experienced users to start this tool!

Features

• check for new tasks
• track, kill & autokill processes
• flashing infoscroller in the tasklist when new processes appear
• multiselection for most functions supported
• create and activate a whitelist - all other tasks will be terminated
• whitelist is protected against manipulation
• backups of the whitelist
• check for information of the tasks on different processwebsites
• edit/add/remove own infosites

Planned Features

• more speed & less CPU usage
• loaded modules information on processes
• file read/write behaviour controlling
• updated files of processes are treated like new processes
• checking for illegal processes of spyware/addware/viruses

• send to antivirus/antispyware processes
• direct showing/editing the whitelist
• creating a blacklist
• checking the process files for changes
• process hooking for faster reaction
• optional filechecking (big speedup boost)
• save or print the message and process window
• soft-termination by the windows messaging system
• forced termination after a timespan if soft-termination isn´t working

Screencast

Usage
Installation
Only run the .exe file
!!! ATTENTION !!! : Don´t set the whitelist-checkbutton without inserting the most important tasks into it!!! The result will be a total process-environment termination and restart

Using the Application
You can select one or more tasks from the tasklist and kill, add and remove them to/from the whitelist. Activate the whitelist by setting the checkbutton.
Taking a look on the process read/write behaviour and relaunches helps you to find suspicious ones.
If the whitelist has been illegal modified or is corrupted the program will show a message and quit. So first try to replace it with the backup (.bup) file. If nothing works you only have to delete it - so a new one will be created.

Uninstallation
Only delete the files and folder

Known Issues
At the moment it´s only working on Windows Vista and Windows 7. Windows XP seems to have problems in checking the processes correct but there are users that have no problems with it on XP. It seems to be like russian roulette.

Screenshot

109

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 28, 2009, 03:34 PM »

A new threading design gives a huge speedup to the updates and uses very less CPU-time though additional file-checking is active now. Instant Task-Killing switch inserted. Alarm Signal + Message-Scroller implemented for new processes. I have the idea to include a loaded modules list for the processes. So you can see what´s a rundll32.exe for real.

110

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 27, 2009, 10:28 AM »

I also didn´t manage it till now to run it on XP.
News: Now you can create a list with www-sites on your own to search and show task-informations taking care of "no success" triggering phrases.
Next: Filedate & Filehash-Checking, Processlist-Saving/Updating/Loading, csv-Exporting, checking for known spyware/adware tasks (I´m not sure I´ll make it all till thursday).

111

N.A.N.Y. 2010 / Re: NANY 2010 - Mini NANY Submissions

« on: December 27, 2009, 09:24 AM »

This program takes the shuffled words and tries to find the correct replacement for them to make it normal readable again.
Shuffled text:
Tihs prmgoar tkeas the sflufehd wrdos and teris to fnid the ceocrrt rpleemaecnt for tehm to make it nmoral rabaelde aagin.

112

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 26, 2009, 07:40 AM »

The "Internet Infos" was interesting... 6 browser windows, some 404's. It may be better to test the links first then provide links/information in a separate window?

I´m now testing the urls for success before opening them.

113

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 25, 2009, 12:26 PM »

Stoic Joker: I used the manifest as usual. But now I removed it completely from the build and updated the download-link. Perhaps this version is better: No manifest - no problem! I stop now experimenting with XP. It´s more important to get my spyware and malware checker running.

114

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 25, 2009, 11:37 AM »

I have no problem switching to english. The project has been startet with german by default (because of my compiler & system). Now the strings are changed. I updated the version and also inserted a second one. If the language of the mainframe still remains german try this. In Virtualbox on XP I see now english text, but still nothing inside of the info-windows. Something on the routines must be wrong - the processes are not enumerated as they should on XP.
Wikipedia says that at least 185.000.000 people worldwide are talking german. By the way: The german invented the computer! Is there a reason why we shouldn´t change the computer-standard-slang to german?

115

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 24, 2009, 08:15 PM »

Stoic Joker: Please install the runtimes (it´s not very much) and run it again - perhaps the text becomes visible. Without it the prog is rather useless.

116

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 24, 2009, 05:18 PM »

You can download it here.
fodder: You can run it?

117

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 24, 2009, 05:09 PM »

Ok, I don´t understand the message particularly, but I see something should be loaded and isn´t there. So I removed some unused features (ballast), made it more system-friendly and changed the download link of the last post. I hope this version works.

118

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 24, 2009, 01:21 PM »

A friend tested MCP yesterday on Windows XP professional. He wasn´t able to see any text in the windows. They should be instantly filled with texts.
Perhaps someone with XP could load the executable and write some lines about its behaviour?
[attachurl=#1][/attachurl]

119

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 21, 2009, 02:09 PM »

A Hash on all of these programs is no problem, but it´s very time consuming. I´ll take a look what´s possible.

120

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 21, 2009, 05:44 AM »

The main idea was only to stop all processes that start while surfing or working with a single application after a defined moment. At first I only wanted to create a popup-blocker by new windows.

But you´re right, it´s too time consuming when I track all datas I want to check. The MCP shall not be an Antivirus or Spywarekiller. It´s intended to be a help finding suspicious processes starting without your knowledge in the background, remove perhaps some annoying tasks at low-level and get a deeper view in the behaviour of programs and tasks. It can help you to find malware by its behaviour - even if your Antivirus/Spywaredetectors are not knowing them. You´ll never be able to find dll injections or manipulated executables without reference hashes to clean original files (this could be a new idea  ).
If you´re really running malware while working it perhaps can stop these programs fast enough to prevent or stop making damage somehow or at least helps you to lead your attention to the process if the file accession of some processes are getting extremely exhaustive.

I needed several hours only to create the main process class containing all interesting informations and I don´t know how much time the rest will need. So if there´s not enough time a black/whitelist or other features will be included later. The time to new year is too short to code a complex program.

121

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 20, 2009, 05:11 PM »

I see that there are a lot of very interesting informations in the system like the Filenames, Processcreationtime, Usertime, IO-Informations how many read/writes, how much datas have been transferred, memoryusage and much more. This could give useful hints if a task could be an intruding sniffer or similar - perhaps you could optimize your system with knowledge about the shutdown-priorities or IO-usage. I´ll try to track as many informations I can get from the processes.

122

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 20, 2009, 04:22 PM »

I also wanted to save the list to create a white- and blacklist. Perhaps a function to auto-google for killed or tracked processes would be cool.

123

N.A.N.Y. 2010 / Re: Crush DocMerger

« on: December 20, 2009, 03:58 PM »

You´re right. So I discard this project and start another one here.

124

N.A.N.Y. 2010 / NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 20, 2009, 03:57 PM »

I noticed that my other project is not very interesting to others, so I decided to do something more useful.

The Master Control Program is a small tool running in the background that monitors all tasks and programs.
After making a snapshot of all running processes new ones will be terminated and tracked in a deletion list.
So you can see and get protected if a virus or other unknown programs are automatically starting in the background without your permission to raise your security while working.
I´m waiting for suggestions or features you´d like to see.

125

Word Processor Roundup / Re: Textmaker (Softmaker/Ashampoo Office) 2008

« on: December 18, 2009, 08:43 AM »

@CWuestefeld: Now you can also download all 3 different Linux-Installers of Softmaker Office 2008  
Don´t forget to download all Manuals (not included in the installer) and their monthly Free Fonts from the linked sites!
Perhaps you want to try Softmaker Office 2010beta free? It´s worth it.
You can update from this free 2008 version to the full 2010 like a normal customer - that´s much cheaper than the regular price.