Jump to content

Control the process that create file


Recommended Posts

Hi !

I'm Trying to make some autorun-killer

You see all Virus make loop to make the autorun

soo every time you deleted

the virus crated again

you see the anti-virus

stop the virus that make the autorun

how i can now the virus that make the autorun to i can stop it !

i wish i find the answer here !

and soory for my BaD English

Link to post
Share on other sites

Most virus' install themselves so that they start on user login (HKCU instead of HKLM). Check the registry HKCUSoftwareMicrosoftWindowsCurrentVersionRun as well as HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun. In my experience, most run of the mill virus' drop their recreator file in the users appdata folder.

Anyways, hope this helps.

EDIT:

I reread your post and I think this might be what you're looking for

http://msdn.microsoft.com/en-us/library/windows/desktop/cc144204(v=vs.85).aspx

I suggest bookmarking the msdn library, it's really a great resource.

Edited by Colyn1337
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...