今天更新过后，大家有没有觉得好像检测更严格了？bbs.766.com+C!s/J'c.i;k1b!q0k+h)w&X
齐乐乐社区%f3U&Y'i1A;@+Y6G9u
这里告诉大家为什么！#~!T"_&@!P)p0p&e$}1M
"S2V2r6M$N;W.h2I
原文如下："q8n(s!M%P;a-n$G
;U6V8k,q,P0c!q8g
9N7W.N9K Z6h
.P*U*h'B:h*D;P1f
1 首先大家 在自己的DNF 目录下检测一下 比较一下 跟没更新前是不是多了几个文件？ )s:T:M!R7d0]/F
'H9z-_&w'h7{,A8~-d2 OK 下面大家 在DNF目录下的START目录下 是不是看到了一个GdiPlus.dll的文件？ 1h"@5~*z:G:E"[-L#z
.\#?1Q$x:l {齐乐乐社区3 哈哈 OK 大家在百度百科搜索一下这个文件吧。baike.baidu.com
,P7w)o9B1l'jbbs.766.com
+S"}%g6D4I f2d看完百度百科对这个DLL文件的解释，大家被惊吓到了么？我想稍微懂点电脑的人都会想到TX想利用这个DLL文件来干什么了。相比而言是自己的隐私重要还是游戏重要？ +a7`6O!L.n:R6@8Y3_#W/u9`
3G-d&k7k/R(I0|7v4@(Z
还有TX貌似做到这一步都已经侵犯了法律，侵犯了个人隐私权。大家有什么感想？ 3W3h:k,b8t3X0g0K*i
5q1q/{(w,x2r9f$c
4`/l"_3V-p9H8u8r2b4x8h
&l5W,B3G!?*O'I$x9X/Y齐乐乐社区大家注意看红色字体部分，TX太强大了。强大到利用微软最新系统漏洞来防外挂？而且还是08.9.17号最新的系统漏洞。哈哈，我笑了真的笑了！TX你真的是太牛B了，我决定以后再也不用TX的东西了包括QQ。
8|8W3o*Y%z(K
2N0m4^;b.B4Z;N8`bbs.766.com齐乐乐社区$p#A*c+G*j
1?*["k$? b1H9?'X下面是GdiPlus.dll这个文件的解释译文！
9p-].j3~.D齐乐乐社区
(J/c9? i5o2B2d*|gdiplus - gdiplus.dll - DLL文件信息
1E6v$g4Z$\9Y3p7|.u
'\0{%V#i!K#@!a0{)r1A DLL 文件： gdiplus 或者 gdiplus.dll
0R&M'\;I#_0[bbs.766.combbs.766.com&H8g2O%Q2L%I:g
DLL 名称： Microsoft GDI+ 齐乐乐社区!]2`*Q'H h7b8q
)f-t3f/T%x2V
描述： #g1R1T8Z._
8~)k1A6_"m gdiplus.dll是GDI图形设备接口图形界面相关模块。
-[.c6S9F)@bbs.766.com2Q#H L6U*A
属于： Microsoft GDI+ &?,x+X3R3q
!D!V$G)v'H3x"y!U 系统 DLL文件： 是 7H&U+L+~&c0f/V!a
*r2~5[6M,i!N6^1K
常见错误： File Not Found, Missing File, Exception Errors o:T#W'g8z$Y$_+m1u
9r9n5Z2[%{-J+X4t4Y齐乐乐社区 安全等级 (0-5): 0
:F;a*E$x#|,T2W/u3N5c.P)n
间谍软件： 否 .K0{7z2B-p;q S;k%|:T
9u/N,D3X!X.O/Q.u+mbbs.766.com 广告软件： 否 6A:I;Z(Z:G
bbs.766.com&k;x:[:B6^!c
部分接口函数以下以VB为例: -I6f(v.g:V"M8e'I
+p+Z)h-@)b1v
Public Declare Function GdiplusStartup Lib "gdiplus" (Token As Long, InputBuf As GdiplusStartupInput, Optional ByVal OutputBuf As Long = 0) As GpStatus
$U&t-q*D!Z"Q-Ibbs.766.com
3M&l!f1u/abbs.766.com Public Declare Function GdiplusShutdown Lib "gdiplus" (ByVal Token As Long) As GpStatus :_0n0K8M2B%z
bbs.766.com4I,q/[*t9e2H!E;})q7|
Private Declare Function GdipGetImageEncodersSize Lib "gdiplus" (numEncoders As Long, Size As Long) As GpStatus %W!R6w/_'J!x/M#@
2q9{.O5i2o#i.i Private Declare Function GdipGetImageEncoders Lib "gdiplus" (ByVal numEncoders As Long, ByVal Size As Long, Encoders As Any) As GpStatus )| } k4V+E(Q*i
!l#~(l0F;A8?
Private Declare Function GdipGetImageDecodersSize Lib "gdiplus" (numDecoders As Long, Size As Long) As GpStatus :
[email protected]#\2v
齐乐乐社区5n4E1m:g1T)U%Q-M
Private Declare Function GdipGetImageDecoders Lib "gdiplus" (ByVal numDecoders As Long, ByVal Size As Long, Decoders As Any) As GpStatus bbs.766.com W6x*r2].{)@;f(u*L2q*O
:?*L9o5~!I#t,I!^"` Private Declare Function GdipCreateFromHDC Lib "gdiplus" (ByVal hDC As Long, hGraphics As Long) As GpStatus
#d0X7O7_.k2n!u0^
9|/e#[+^ I*W&S:m2Hbbs.766.com Private Declare Function GdipCreateHBITMAPFromBitmap Lib "gdiplus" (ByVal Bitmap As Long, hBmpReturn As Long, ByVal Background As Long) As GpStatus bbs.766.com'~+r(s+Q*R,|8}
,h"T!^8l%L!g5?%x9Z3v Private Declare Function GdipCreateBitmapFromGdiDib Lib "gdiplus" (gdiBitmapInfo As BITMAPINFO, gdiBitmapData As Any, Bitmap As Long) As GpStatus -`-d+O'~$u7C%[)T
#s7A7W/{&l/k
Private Declare Function GdipLoadImageFromFile Lib "gdiplus" (ByVal Filename As String, hImage As Long) As GpStatus /y3V.g;a/K&@#`,J6J6?%P
!v:q0T7l-@5G
Private Declare Function GdipSaveImageToFile Lib "gdiplus" (ByVal hImage As Long, ByVal sFilename As String, clsidEncoder As CLSID, encoderParams As Any) As GpStatus
6K"C%P&f/k"e$p+D7f齐乐乐社区$`6a']#k:k/n
Private Declare Function GdipSetPixelOffsetMode Lib "gdiplus" (ByVal hGraphics As Long, ByVal OffsetMode As PixelOffsetMode) As GpStatus 4a!_8_:m1a+p
&?8g1`;a'm5b*m#T0Z
Private Declare Function GdipSetInterpolationMode Lib "gdiplus" (ByVal hGraphics As Long, ByVal Interpolation As InterpolationMode) As GpStatus
/i s"b0v(W
;F:M1^:d7l5_(a3E Private Declare Function GdipDrawImageRectRect Lib "gdiplus" (ByVal hGraphics As Long, ByVal hImage As Long, ByVal dstX As Long, ByVal dstY As Long, ByVal dstWidth As Long, ByVal dstHeight As Long, ByVal srcX As Long, ByVal srcY As Long, ByVal srcWidth As Long, ByVal srcHeight As Long, ByVal srcUnit As GpUnit, Optional ByVal imageAttributes As Long = 0, Optional ByVal Callback As Long = 0, Optional ByVal CallbackData As Long = 0) As GpStatus 3~7n7[&^(J
bbs.766.com(w*Z&\/P"J2r
Private Declare Function GdipDrawImageRectRectI Lib "gdiplus" (ByVal hGraphics As Long, ByVal hImage As Long, ByVal dstX As Long, ByVal dstY As Long, ByVal dstWidth As Long, ByVal dstHeight As Long, ByVal srcX As Long, ByVal srcY As Long, ByVal srcWidth As Long, ByVal srcHeight As Long, ByVal srcUnit As GpUnit, Optional ByVal imageAttributes As Long = 0, Optional ByVal Callback As Long = 0, Optional ByVal CallbackData As Long = 0) As GpStatus 'E:l;J+q3{
/M+d/o B)b%O2f-Jbbs.766.com Private Declare Function GdipDisposeImage Lib "gdiplus" (ByVal hImage As Long) As GpStatus
9D:c2L+m-o1F齐乐乐社区
4^!_$k8K!L#` Private Declare Function GdipDeleteGraphics Lib "gdiplus" (ByVal hGraphics As Long) As GpStatus :?+^#m&Y6W
0F*|3f1F&J齐乐乐社区 2008年9月17日暴出新漏洞 *J!a/q4_6A"H!p*i*i7b.V*c
)m8G(w4o5M3w6u:C6h Microsoft产品中所使用的GDI+库（GdiPlus.dll）通过基于类的API提供对各种图形方式的访问。
9j2V4r7a*Y9Bbbs.766.com+[/f0c'q&j+d
GDI+库在解析特制的BMP文件时存在整数溢出漏洞，如果文件中包含有畸形的BitMapInfoHeader的话，就会导致错误的整数计算，最终触发可利用的内存破坏。成功利用此漏洞的攻击者可完全控制受影响的系统。如果用户使用受影响的软件查看特制图像文件或浏览包含特制内容的网站，则这些漏洞可能允许远程执行代码。
