Control the process that create file

[JoMeKa]

Hi !

I'm Trying to make some autorun-killer

You see all Virus make loop to make the autorun

soo every time you deleted

the virus crated again

you see the anti-virus

stop the virus that make the autorun

how i can now the virus that make the autorun to i can stop it !

i wish i find the answer here !

and soory for my BaD English

[abberration]

http://fusionsolid.com/Projects/Disable_Autorun/disableautorun.html

[JoMeKa]

^^

ican do that eazy with regestry

i want to stop process that make the autorun ?!

[Colyn1337]

Most virus' install themselves so that they start on user login (HKCU instead of HKLM). Check the registry HKCUSoftwareMicrosoftWindowsCurrentVersionRun as well as HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun. In my experience, most run of the mill virus' drop their recreator file in the users appdata folder.

Anyways, hope this helps.

EDIT:

I reread your post and I think this might be what you're looking for

http://msdn.microsoft.com/en-us/library/windows/desktop/cc144204(v=vs.85).aspx

I suggest bookmarking the msdn library, it's really a great resource.

Edited May 11, 2012 by Colyn1337

[JoMeKa]

^^^

Thinks for help

But that's not what im need

i now how to Disapy Autorun

But i need to Discover the virus that make the autorun by programing

[JoMeKa]

I want to get the specific file that creat autorun if that possibl

[JoMeKa]

No Bady Now !