Is this a bug or am I doing it all wrong?

[QingZi]

Hi guys,

I was playing around with a test virus trying to capture Anti-Virus(AV) pop ups with screenshots. I could not get it to capture the virus scan result pop up using _screencapture_capture.

Below are the screenshots:

Taken using Autoit

http://img693.imageshack.us/i/fromautoit.jpg/

Taken manually through Print Screen

http://img208.imageshack.us/i/frommanual.jpg/

And the very simple sample code that could reproduce this problem

#include <ScreenCapture.au3>

_ScreenCapture_Capture(@DesktopDir & "\From Autoit.jpg")

Anyone experienced this problem before?

Edited February 5, 2010 by QingZi

[Minikori]

So what you're saying is that you're writing a virus?

[QingZi]

So what you're saying is that you're writing a virus?

its a test virus from eicar.org. EICAR stands for European Institute for Computer Antivirus Research. http://eicar.org/about_us/

it is just used to trigger av pop ups and does nothing. http://eicar.org/anti_virus_test_file.htm

and no, i am using that test file to trigger av alerts. i am not writing one.

back to topic, i am here to ask about _screencapture_capture function. anyone experienced this before?

Edited February 5, 2010 by QingZi

[NerdFencer]

#include <ScreenCapture.au3>

$pos = MouseGetPos()
MouseMove(@DesktopWidth,@DesktopHeight,0)
_ScreenCapture_Capture(@DesktopDir & "\From Autoit.jpg")
MouseMove($pos[0],$pos[1],0)

[Minikori]

#include <ScreenCapture.au3>

$pos = MouseGetPos()
MouseMove(@DesktopWidth,@DesktopHeight,0)
_ScreenCapture_Capture(@DesktopDir & "\From Autoit.jpg")
MouseMove($pos[0],$pos[1],0)

Why the mouse moves?

[jchd]

I know there's no problem with Eicar

Have you tried the Windows Info tool to grab information about this particular popup?

It could help you identify the window programmatically and then capture this window only (if it works at all!) using _ScreenCapture_CaptureWnd.

[NerdFencer]

Why the mouse moves?

The mouse moves make the mouse go away for the instant it is taking the screenshot.

I was going to do a DllCall to hide it, but forgot the function name

[jchd]

The mouse moves make the mouse go away for the instant it is taking the screenshot.

I was going to do a DllCall to hide it, but forgot the function name

No need: simply use the last parameter of _ScreenCapture_Capture for doing just that.