HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsCurrent\Version\Run

　　HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs

　　HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

　　HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsCurrent\Version\RunOnce

　　HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsCurrent\Version\RunServicesOnce

　　但是与一般的木马，病毒不同的是，就有一些病毒偏偏不通过这些来加载自己，不随着系统的启动运行。木马病毒的作者抓住了一些用户的心理，等到用 户运行某个特定的程序的时候它才运行。因为一般的用户，只要发觉自己的机子中了病毒，首先要察看的就是系统的加载项，很少有人会想到映像劫持，这也是这种病毒高明的地方。

　　映像劫持病毒主要通过修改注册表中的

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\

项来劫持正常的程序，比如有一个病毒 vires.exe 要劫持qq程序，它会在上面注册表的位置新建一个qq.exe项，再在这个项下面新建一个字符串的键　debugger把其值改为C:\WINDOWS\SYSTEM32\VIRES.EXE(这里是病毒藏身的目录)即可。

[FW]http://weblogs.asp.net/kennykerr/archive/2004/11/26/where-is-form-s-loaded-event.aspx

Wow, it’s been a while since I last posted something here. We’ve recently moved to BC so I’ve been pretty distracted. I hope to be able to post more regularly in the coming weeks.

This is a bit off-topic for me but here goes.

Recently I needed to run some code right after a form is displayed for the first time. The Form.Load event is handy for performing various tasks when a form is loading but before it is displayed for the first time. Unfortunately there is no corresponding Form.Loaded event to notify the application that the form has actually loaded and is visible.

Fortunately it’s quite easy to pull it off without resorting to the WaitForInputIdle function. All you need to do is override Form’s OnLoad method and add an event handler for the Application.Idle event. Since we only want to be notified a single time that the form is loaded, we immediately remove the delegate in the event handler. You can of course register the event handler earlier in the form or application’s lifetime but I prefer to keep delegates registered for as short a period as possible.

Here’s a simple example:

This might be useful, for example, if you need to prompt the user (the horror!) for something but would prefer the dialog box to appear in the context of your application’s main window.

© 2004 Kenny Kerr

使用ruby来操作excel文件首先需要在脚本里包含以下语句
require 'win32ole'

把win32ole包含进来后,就可以通过和windows下的excel api进行交互来对excel文件进行读写了.

打开excel文件,对其中的sheet进行访问:
excel = WIN32OLE::new('excel.Application')
workbook = excel.Workbooks.Open('c:\examples\spreadsheet.xls')
worksheet = workbook.Worksheets(1) #定位到第一个sheet
worksheet.Select

读取数据:
worksheet.Range('a12')['Value'] #读取a12中的数据
data = worksheet.Range('a1:c12')['Value'] #将数据读入到一个二维表

找到第一处a列的值为空值
line = 1
while worksheet.Range("a#{line}")['Value']
   line=line+1
end #line的值为第一处空白行的行数

将第一列的值读入到一个数组中
line = '1'
data = []
while worksheet.Range("a#{line}")['Value']
   data << worksheet.Range("a#{line}:d#{line}")['Value']
   line.succ!
end

将数据写入到excel表格中
worksheet.Range('e2')['Value'] = Time.now.strftime '%d/%m/%Y' #单个值
worksheet.Range('a5:c5')['Value'] = ['Test', '25', 'result'] #将一个数组写入

调用宏定义
excel.Run('SortByNumber')

设置背景色
worksheet.Range('a3:f5').Interior['ColorIndex'] = 36 #pale yellow
# 将背景色恢复成无色
worksheet.Range('a3:f5').Interior['ColorIndex'] = -4142 # XlColorIndexNone constant
# 使用Excel constant 将背景色恢复成无色
worksheet.Range('a3:f5').Interior['ColorIndex'] = ExcelConst::XlColorIndexNone

保存
workbook.Close(1)
# 或
workbook.SaveAs 'myfile.xls'
# 默认路径是系统定义的"我的文档"

结束会话
excel.Quit

一些相对完整的代码片段

创建一个excel文件并保存
require 'win32ole'
excel = WIN32OLE.new("excel.application")
excel.visible = true     # in case you want to see what happens
workbook = excel.workbooks.add
workbook.saveas('c:\examples\spreadsheet1.xls')
workbook.close

操作excel文件的几个重要元素
Excel => workbook => worksheet => range(cell)
我理解的是excel为类名,workbook为一个具体的(excel文件)实例,创建好实例后,worksheet是实例(workbook,工作簿)中的一个工作表,然后可

以对工作表中的每个单元格(range(cell))进行具体的读写------------------按照这样操作肯定没有错,不过下面的这些语句又让我有些疑惑

excel.workbooks("Mappe1").worksheets("Tabelle1").range("a1").value #读取名为Mappe1的excel文件中工作表名为Tabelle1的a1单元格中的值
excel.worksheets("Tabelle1").range("a1").value #作用同第一条语句
excel.activeworkbook.activesheet.range("a1").value #作用同第一条语句
excel.activesheet.range("a1").value #作用同第一条语句
excel.range("a1").value #作用同第一条语句

excel可以直接操作所有的属性,默认为当前活跃的工作簿/工作表

对单元格的操作:

某个单元格: sheet.range("a1")

a1到c3的值:   sheet.range("a1", "c3") 或 sheet.range("a1:c3")

第一列:    sheet.range("a:a")

第三行:    sheet.range("3:3")

获得单元格的值:
range.text #读取值,返回为字符串格式,如果单元格内为数字,有可能会被截断小数点后的位数
sheet.range("a1").text  

range.value #读取值,数字不会截断
sheet.range("a1").value      

对单元格设置值
sheet.range("a1").value = 1.2345
或
sheet.range("a1").value = '1.2345'

迭代访问:

sheet.range("a1:a10").each{|cell|puts cell.value}

如果范围是一个矩形,则会按行循环迭代访问
sheet.range("a1:b5").each{|cell|puts cell.value}

block迭代,并打印出每行的第一个值
sheet.range("b3:c7").rows.each{|r|puts r.cells(1,1).value}

2008-12-02

第1讲【创建框架】

1 新建MFC exe / dialog based
2 删除dialog类的显示代码
3 添加WelflGameFrm类
4 在app类的InitInstance 函数中 添加http://hi.baidu.com/welflau/希望能保留原创作者链接，谢谢！
m_pMainWnd = new CWelflGameFrm;
m_pMainWnd->ShowWindow( m_nCmdShow );
m_pMainWnd->UpdateWindow();
5 将CWelflGameFrm()构造函数改为public 成员
6 在构造函数CWelflGameFrm中添加：
RECT rect;
Create(NULL,"ch07-1: ミDirectGraphics");
CClientDC dc(this);
int width = dc.GetDeviceCaps(HORZRES);
int height = dc.GetDeviceCaps(VERTRES);
GetWindowRect( &rect );
width = ( width - ( rect.right - rect.left ))/2 ;
height = (height - (rect.bottom - rect.top ))/2 ;
MoveWindow( width , height , (rect.right - rect.left ) , (rect.bottom - rect.top ) ,true);

7 为CWelfGameFrm类添加WindowProc函数，并加入代码：http://hi.baidu.com/welflau/希望能保留原创作者链接，谢谢！
switch( message )
{
case WM_CREATE :
   if( !d3dCreate( m_hWnd , 640 , 480 , true ))
    PostMessage( WM_CLOSE );
   return 0 ;
case WM_DESTROY :
   d3dRelease();
   return 0 ;
}

8 为工程添加两个文件
myd3d.cpp， myd3d.h

9 编译出现
fatal error C1010: unexpected end of file while looking for precompiled header directive
解决方案：在Project Settings里C++页面的Precomplie Header里把出错源文件设置为不使用预编译头就可以了，详见视频

10 将BOOL CWelfGameApp::InitInstance()中的
return FALSE;改为 return TRUE;

11 为CWelfGameFrm类添加OnPaint响应
添加如下代码：
d3dClear(0);
//
d3d_Device->Present( NULL , NULL , NULL , NULL );

第2讲【绘制文字和图像】

目录
【一】、从DirectGraphic中获取DC（GDI）
【二】、2D图像绘制

【一】、从DirectGraphic中获取DC（GDI）
1 添加类d3dHdc 在 myd3d.h文件中
class d3dHdc
{
private :
HDC m_hdc ;
LPDIRECT3DSURFACE9 m_Surface ;

public :
void Release();
inline operator HDC(){ return m_hdc ;};
public :
d3dHdc();
~d3dHdc();
};

2在myd3d.cpp中添加函数定义
d3dHdc::d3dHdc()
{
m_hdc = 0 ;
m_Surface = 0 ;
// 获得设备
if( !d3d_Device )
   return ;
if( d3d_Device->GetBackBuffer( 0 , 0 , D3DBACKBUFFER_TYPE_MONO , &m_Surface ) != D3D_OK )
   return ;

m_Surface->GetDC( &m_hdc );
}

d3dHdc::~d3dHdc()
{
Release();
}

void d3dHdc::Release()
{
if( m_Surface )
{
   if( m_hdc )
    m_Surface->ReleaseDC( m_hdc );
   m_Surface->Release();
  
   m_hdc = NULL ;
   m_Surface = NULL ;
}

}

3 现在就可以使用他了
在绘制函数中添加：
d3dHdc hdc ;
   SetTextColor( hdc , RGB( 255 , 255 , 255 ));
   SetBkMode( hdc , 1 );
   TextOut( hdc , 0 , 0 , str , strlen( str ));
hdc.Release();

【二】、2D图像绘制
1 新建d3dTexture类
class d3dTexture
{
private :
int      m_Width ;
int      m_Height ;
LPDIRECT3DTEXTURE9 m_Texture ;
public :
void BltFast( int x , int y );
void BltFast( int l , int t , int r , int b );
public :
BOOL Create( LPCTSTR file );
void Release();
inline operator LPDIRECT3DTEXTURE9(){ return m_Texture ;};
public :
d3dTexture();
~d3dTexture();
};

2 并添加定义：

/*////////////////////////////////////////////////
3D 纹理类d3dTexture 函数定义 2008-12-02

/*////////////////////////////////////////////////

d3dTexture::d3dTexture()
{
m_Texture = NULL ;
}

d3dTexture::~d3dTexture()
{
Release();
}

void d3dTexture::Release()
{
if( m_Texture )
   m_Texture->Release();
m_Texture = NULL ;
}

BOOL d3dTexture::Create( LPCTSTR file )
{
D3DXIMAGE_INFO in ;
memset( &in , 0 , sizeof( in ));
// ﹍て
Release();
//更
D3DXCreateTextureFromFileEx( d3d_Device ,
   file , D3DX_DEFAULT , D3DX_DEFAULT ,
   0 , 0 , D3DFMT_UNKNOWN , D3DPOOL_MANAGED ,
   D3DX_DEFAULT ,
   D3DX_DEFAULT , 0 , &in , NULL , &m_Texture );
if( m_Texture == NULL )
   return false ;
// 眔戈
m_Width = in.Width ;
m_Height = in.Height ;

return true ;
}

void d3dTexture::BltFast(int x, int y)
{
BltFast( x , y , x + m_Width , y + m_Height );
}

void d3dTexture::BltFast(int l , int t , int r , int b )
{
D3DTLVERTEX v[4] ;
//郴翴 挡篶
memset( v , 0 , sizeof( v ));
v[0].x = v[3].x = (float)(l) ;
v[1].x = v[2].x = (float)(r);
v[0].y = v[1].y = (float)(t);
v[2].y = v[3].y = (float)(b);

v[0].rhw = v[1].rhw = v[2].rhw = v[3].rhw =
   v[0].z = v[1].z = v[2].z = v[3].z = 0.5f ;

v[0].diffuse = v[1].diffuse = v[2].diffuse = v[3].diffuse = -1 ;

v[1].tu = v[2].tu = 1.0f ;
v[2].tv = v[3].tv = 1.0f ;
//砞酶瓜家Α
d3d_Device->SetTexture( 0 , m_Texture );
d3d_Device->SetFVF( D3DFVF_TLVERTEX );
d3d_Device->DrawPrimitiveUP( D3DPT_TRIANGLEFAN , 2 , (LPVOID)v , sizeof( D3DTLVERTEX ));


}

3 编译时会出错
解决方法：
在myd3d.h文件中添加
#include "d3dx9tex.h"
和
#pragma comment(lib,"d3dx9.lib")
以及
const DWORD D3DFVF_TLVERTEX = (D3DFVF_XYZRHW | D3DFVF_DIFFUSE | D3DFVF_SPECULAR | D3DFVF_TEX1 );
typedef struct _D3DTLVERTEX
{
float x , y , z , rhw ;
D3DCOLOR diffuse , specular;
float tu, tv;
}D3DTLVERTEX ;

4 在WelfGameFrm中添加两个成员
d3dTexture m_Bk ;
d3dTexture m_Role ;

5 在WelfGameFrm的Create响应添加：
   m_Bk.Create( "背景.tga" );
   m_Role.Create( "娃娃.tga" );

6 调用BltFast进行绘制
//开始绘制
d3d_Device->BeginScene();
d3d_Device->SetRenderState( D3DRS_CULLMODE , D3DCULL_NONE );
d3d_Device->SetRenderState( D3DRS_ZENABLE , D3DZB_FALSE );
m_Bk.BltFast( 0 , 0 );
m_Role.BltFast( 0 , 0 );
d3d_Device->EndScene();

7 将BltFast函数改进

第3讲 WelfGame【图像透明及颜色】

http://hi.baidu.com/welflau/希望能保留原创作者链接，

【一】、实现透明图像

1 在RenderScene()中添加设置代码

在背景绘制前添加：

              d3d_Device->SetRenderState( D3DRS_CULLMODE , D3DCULL_NONE );

              d3d_Device->SetRenderState( D3DRS_ZENABLE , D3DZB_FALSE );

              d3d_Device->SetRenderState( D3DRS_SHADEMODE , D3DSHADE_FLAT );

              d3d_Device->SetRenderState( D3DRS_ALPHABLENDENABLE, FALSE );

在前景绘制的前面添加

       d3d_Device->SetRenderState( D3DRS_SRCBLEND , D3DBLEND_SRCALPHA );

       d3d_Device->SetRenderState( D3DRS_DESTBLEND , D3DBLEND_INVSRCALPHA );

       d3d_Device->SetRenderState( D3DRS_ALPHABLENDENABLE, TRUE );//开启混色

 

 

 

效果

 

2 为d3dTexture添加BltFast函数

void d3dTexture::BltFast(int l , int t , int r , int b , DWORD diffuse )

{

       D3DTLVERTEX v[4] ;

       //郴翴 挡篶

       memset( v , 0 , sizeof( v ));

       v[0].x = v[3].x = (float)(l) ;

       v[1].x = v[2].x = (float)(r);

       v[0].y = v[1].y = (float)(t);

       v[2].y = v[3].y = (float)(b);

       v[0].rhw = v[1].rhw = v[2].rhw = v[3].rhw =

       v[0].z = v[1].z = v[2].z = v[3].z = 0.5f ;

       //肅︹

       v[0].diffuse = v[1].diffuse = v[2].diffuse = v[3].diffuse = diffuse ;

       v[1].tu = v[2].tu = 1.0f ;

       v[2].tv = v[3].tv = 1.0f ;

       //砞酶瓜家Α

       d3d_Device->SetTexture( 0 , m_Texture );

       d3d_Device->SetFVF( D3DFVF_TLVERTEX );

       d3d_Device->DrawPrimitiveUP( D3DPT_TRIANGLEFAN , 2 , (LPVOID)v , sizeof( D3DTLVERTEX ));

}

添加以下几句：

       d3d_Device->SetTextureStageState( 0 , D3DTSS_ALPHAARG1 , D3DTA_TEXTURE );

       d3d_Device->SetTextureStageState( 0 , D3DTSS_ALPHAARG2 , D3DTA_DIFFUSE );

       d3d_Device->SetTextureStageState( 0 , D3DTSS_COLORARG1 , D3DTA_TEXTURE );

       d3d_Device->SetTextureStageState( 0 , D3DTSS_COLORARG2 , D3DTA_DIFFUSE );

       d3d_Device->SetTextureStageState( 0 , D3DTSS_COLOROP , D3DTOP_SELECTARG1 );

       d3d_Device->SetTextureStageState( 0 , D3DTSS_ALPHAOP , D3DTOP_MODULATE );

       //以下为前景

       m_Role.BltFast( 100, 100, 250 ,250 ,D3DCOLOR_ARGB( 128 , 255 , 255 , 255 ));//最后一个参数为颜色，包括透明度

效果图

 

在 UltraEdit 里正确显示 Lua 的块注释（DoNeY注：语法着色问题）

XML Declarations

First, the XML tags movable="true" and enableMouse="true" must be in the frames declaration. Note: Some frame templates like 'button' already include enableMouse="true".

Example:

Simple Dragging

Advanced Dragging

Parent Dragging

Quick Dragging Code

<Frame name="myname" frameStrata="HIGH" toplevel="true" enableMouse="true" movable="true" parent="UIParent">
 <TitleRegion setAllPoints="true"/>
 
</Frame>

I haven't discovered any adverse side effects to doing this yet, I am not even sure if this is the intended use for it.

Using this method can result in the frame not responding to other mouse events, also both mouse buttons will drag the frame.

You can also specify <Size> and <Anchors> within <TitleRegion>, e.g.

<Frame name="myname" frameStrata="HIGH" toplevel="true" enableMouse="true" movable="true" parent="UIParent">
 <TitleRegion>
  <Size>
   <AbsDimension x="200" y="20"/>
  </Size>
  <Anchors>
   <Anchor point="TOP"/>
  </Anchors>
 </TitleRegion>
 
</Frame>

Lua Only Approach