ASM Community

Hi!

Does anybody knows a good method to prevent the user from closing my program or switching to another by using the most common methods like Alt+Tab or Ctrl+Alt+Del or so ...
this should work on all win platforms if possible

thx for any idea

ChigpA,

The Ctrl+Alt+Del key combination can be disabled by using the RegisterServiceProcess API
function available in Win 9x

I don't think you can in NT, even with hooks.... luckily. I would never use a program that disables these keys. What do you need it for?

Thomas

Hmm, but alt+tab, ctrl+alt+del etc. are not the only ways to get out of a program, what about hotkeys registered by other programs, autorun CDs, running programs remotely using a network, etc? It's pretty hard to make such a thing fool proof as a user mode application...

Thomas

Here is were i left off... this will run the progman program and will close its self after either 30 or 60 seconds cant remember..

; #########################################################################



      .386

      .model flat, stdcall

      option casemap :none   ; case sensitive



; #########################################################################



      include \masm32\include\windows.inc

      include \masm32\include\user32.inc

      include \masm32\include\kernel32.inc

      include \masm32\include\comdlg32.inc



      includelib \masm32\lib\user32.lib

      includelib \masm32\lib\kernel32.lib

      includelib \masm32\lib\comdlg32.lib

; #########################################################################



      ;=============

      ; Local macros

      ;=============



      szText MACRO Name, Text:VARARG

        LOCAL lbl

          jmp lbl

            Name db Text,0

          lbl:

        ENDM



      m2m MACRO M1, M2

        push M2

        pop  M1

      ENDM



      return MACRO arg

        mov eax, arg

        ret

      ENDM



        ;=================

        ; Local prototypes

        ;=================

        EnumWindowsProc proto :DWORD,:DWORD

        WinMain PROTO :DWORD,:DWORD,:DWORD,:DWORD

        WndProc PROTO :DWORD,:DWORD,:DWORD,:DWORD

        TopXY PROTO   :DWORD,:DWORD

        ListBox PROTO :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD

        EditBox PROTO :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD

        ButtonBox PROTO :DWORD,:DWORD,:DWORD,:DWORD,:DWORD,:DWORD

        ListBoxProc PROTO :DWORD,:DWORD,:DWORD,:DWORD

        ReadPffFileInside PROTO :DWORD

        Extract PROTO :DWORD

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;



    .const



    .data

        DesktopName db "Desktop2",0

        DesktopName1 db "Desktop1",0

        szND1TXT db "Input Desktop Not Found",0

        szND1CAP db "Error 1",0

        szND2TXT db "Error Creating New WorkStation",0

        szND2CAP db "Error 2",0

        szND3TXT db "Error Setting Access To New WorkStation",0

        szND3CAP db "Error 3",0

        szND4TXT db "Error Creating New Desktop",0

        szND4CAP db "Error 4",0

        szND5TXT db "Error Switching To New Desktop",0

        szND5CAP db "Error 5",0

        szND6TXT db "Error SetThreadDesktop",0

        szND6CAP db "Error 6",0

        Run_Buffer db "progman.exe",0

        

   .data?

        Blank dd ?

        Blank1 dd ?

        Blank2 dd ?

        Sec SECURITY_ATTRIBUTES <>

        Sec2 SECURITY_ATTRIBUTES <>

        hDesktop dd ?

        hNDeskTop dd ?

        OldDesk dd ?

        pvInfo USEROBJECTFLAGS <>

        pvSize dd ?

        ProcessInfo  PROCESS_INFORMATION <>

        StartupInfo  STARTUPINFO <>

        lParam2 dd ?

.code

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;



start:

invoke OpenInputDesktop,DF_ALLOWOTHERACCOUNTHOOK,TRUE,DESKTOP_CREATEMENU or DESKTOP_CREATEWINDOW\

                       or DESKTOP_ENUMERATE or DESKTOP_HOOKCONTROL or DESKTOP_JOURNALPLAYBACK\

                       or DESKTOP_JOURNALRECORD or DESKTOP_READOBJECTS or DESKTOP_SWITCHDESKTOP\

                       or DESKTOP_WRITEOBJECTS

mov OldDesk,eax

cmp eax,NULL

je NoDesk1



mov Sec.nLength,0Ch

mov Sec.lpSecurityDescriptor,NULL

mov Sec.bInheritHandle,TRUE

invoke CreateWindowStation,offset DesktopName,Blank,WINSTA_ACCESSCLIPBOARD or WINSTA_ACCESSGLOBALATOMS\

                       or WINSTA_CREATEDESKTOP or WINSTA_ENUMDESKTOPS or WINSTA_ENUMERATE\

                       or WINSTA_EXITWINDOWS or WINSTA_READATTRIBUTES or WINSTA_READSCREEN\

                       or WINSTA_WRITEATTRIBUTES,offset Sec

mov hDesktop,eax

cmp eax,NULL

je NoDesk2



mov Sec2.nLength,0Ch

mov Sec2.lpSecurityDescriptor,NULL

mov Sec2.bInheritHandle,TRUE

invoke CreateDesktop,offset DesktopName1,Blank1,Blank2,DF_ALLOWOTHERACCOUNTHOOK,DESKTOP_CREATEMENU\

                       or DESKTOP_CREATEWINDOW or DESKTOP_ENUMERATE or DESKTOP_HOOKCONTROL\

                       or DESKTOP_JOURNALPLAYBACK or DESKTOP_JOURNALRECORD or DESKTOP_READOBJECTS\

                       or DESKTOP_SWITCHDESKTOP or DESKTOP_WRITEOBJECTS,offset Sec2

mov hNDeskTop,eax

cmp eax,NULL

je NoDesk4





invoke SetProcessWindowStation,hDesktop

cmp eax,NULL

je NoDesk3



invoke SetThreadDesktop,hNDeskTop

cmp eax,NULL

je NoDesk6



invoke SwitchDesktop,hNDeskTop

cmp eax,NULL

je NoDesk5







;mov pvInfo.fInherit,TRUE

;mov pvInfo.fReserved,FALSE

;mov pvInfo.dwFlags,WSF_VISIBLE or DF_ALLOWOTHERACCOUNTHOOK

;invoke SetUserObjectInformation,hNDeskTop,UOI_FLAGS,offset pvInfo,14h

;cmp eax,NULL

;je NoDesk6



invoke CreateProcessA,0,offset Run_Buffer,0,0,0,0,0,0,offset StartupInfo,offset ProcessInfo

invoke Sleep,20000

invoke CloseDesktop,hNDeskTop

invoke ExitProcess,NULL



jmp Exit



NoDesk1:

invoke MessageBoxA,NULL,offset szND1TXT,offset szND1CAP,MB_OK

jmp Exit



NoDesk2:

invoke MessageBoxA,NULL,offset szND2TXT,offset szND2CAP,MB_OK

jmp Exit



NoDesk3:

;int 3

invoke MessageBoxA,NULL,offset szND3TXT,offset szND3CAP,MB_OK

jmp Exit



NoDesk4:

invoke MessageBoxA,NULL,offset szND4TXT,offset szND4CAP,MB_OK

jmp Exit



NoDesk5:

invoke MessageBoxA,NULL,offset szND5TXT,offset szND5CAP,MB_OK

jmp Exit



NoDesk6:

invoke MessageBoxA,NULL,offset szND6TXT,offset szND6CAP,MB_OK



Exit:

invoke CloseDesktop,hNDeskTop

invoke ExitProcess,NULL



end start

You need to write keyboard driver in Windows NT/2000/XP, then you can filter keystrokes before NT even sees them. Check Ctrl2Cap utility on sysinternals.

Now I know setting low level keyboard hooks don't work in 2000 to stop people from doing CTRL-ALT-DEL (although it will let you see it -- it won't let you respond to it) -- However, you can disable every other key combination that way (ALT-TAB, ALTF4, etc).

There are multiple ways to disable keys on the 2000 station (in the registry Coolswitch = 0 -- disables alt -tab (doesn't work for all service packs ) or modify the gina32.dll (I think this is the right dll -- been a while) and edit the resource to prevent locking the work station...

98 is easy to lock down and there are sources on iczelions web site that explain how to do it...

The driver is prob. your best bet...

Sliver

----
EDIT: spelling :) at least a glaring one...

No, no no.

I've seen plain api examples of this in some Direct3D code online, but can I find anything when I look for it?

Disabling the Windows key and control alt delete and alt tab can be done under NT/XP without resorting to obscure api.

If and when I find it again I'll be sure to post it.

(Yeah thanks, Homer - that was as useful as tits on a bull !!)

In Iczelion's tutorials this is also mentioned (SystemParametersInfo), but he said it'll work on Win 98 only and this is not what i want

I think I mentioned that it doesn't work on all service packs :) However, I didn't know it didn't work on all service packs though... Which is odd because it worked for a time on my 2000 box at one point...

Maybe it was just me :grin:

Sliver