HWND_BROADCAST和安全性 [英] HWND_BROADCAST and security

问题描述

Hi,<br/>I just tried out some stuff with sending messages to all windows, primary because I was concerned with how it could interfere with my own App.<br/>Results are startling, this
 little code will close every Window on the desktop (from your current useraccount and those with less priviledges) including explorer.exe<br/>Im running Windows 7 and havent weakened security in
 any way, so UIPI does nothing to prevent this
.

推荐答案

如果恶意应用程序想要关闭应用程序，它将不会发布WM_CLOSE，而是调用TerminateProcess.但是，恶意应用程序可能会并且会做更多的恶作剧(例如窃取您的银行帐户和凭据) ZeuS).

If a malicious application wants to close down applications, it wont post WM_CLOSE, it will call TerminateProcess instead. But then there are much more evil things a malicious application can, and will do (like steal your bank account and credentials ala ZeuS).

我建议您首先遵循通用的安全准则，并首先防止恶意应用程序进入您的PC.或者使用要求所有代码都经过签名和验证的平台.

I suggest you follow common security guidelines and prevent evil applications from getting onto your PC in the first place. Or utilize a platform which requires all code to be signed and validated.

这篇关于HWND_BROADCAST和安全性的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！