Advertisement

EXEs 'n' stuff

Started by March 11, 2001 07:46 AM
4 comments, last by Chefbrenner 23 years, 10 months ago
Hi folks! What I''m currently working on isn''t really a game but maybe someone is still able to help me: I''m trying to create a background-program which handles a list of filenames and everytime the user executes a file it checks if it''s in the file-list to prevent using of files which aren''t in my list... Ok, and here''s my problem: I absolutely don''t know how I tell Windows (98 or NT) to notify my program every time a file gets executed... Does anyone know how I could do this? At the moment I grab the list of currently running programs every n seconds and look them all up in my file-list, but this is neither a professional nor a fast way... Greetings, Chefbrenner P.S: Sorry for posting again, but this is quite important!
Greetings,ChefbrennerRemember: If it breaths it can be killed!
If you absolutely need to do something like that, I suggest you look into System Policies instead. SP gives you the opportunity to restrict the system to only running executables that are on a given list. There are ways around it, of course, but someone who was able to get around SP would probably be able to get around your program as well.
Search MS'' site for it, as I don'' remember the details.
Advertisement
Thx for the hint! But this function ist just a part of a quite huge program and I need to implement it by myself and can''t use external stuff...
Every virus scanner does what I want to do! If u run a infected program it alerts u BEFORE the file gets actually executet by ur OS...
And that''s exactly what I need: A message from the OS when the user (or a program) wants to run a program and the ability of interrupting this action!
Does anyone know how I can do this or how virus scanners do it?

Thxalot, Chefbrenner
Greetings,ChefbrennerRemember: If it breaths it can be killed!
Maybe add something to the regristry that associates .exes with your progamm and autmatically starts it? something like that?
Just guessing....

cya,
Phil

Visit Rarebyte!
and no!, there are NO kangaroos in Austria (I got this questions a few times over in the states

RAW!
Visit Rarebyte! and no!, there are NO kangaroos in Austria (I got this question a few times over in the states ;) )
Nope...there''s nothing added in the association-part of the Registry... Or at least I''ve never seen somethin like that in the registry )

Other suggestions?

Greetings, Raphael

P.S.: Nice to see, that I''m not the only one from Austria here ))
Greetings,ChefbrennerRemember: If it breaths it can be killed!
Inject a DLL into Explorer.exe, hook the CreateProcess API function, and hope that all the programs are started in user-mode. Alternatively, if you have to know EVERY program started, inject a DLL into every running process, and hook every CreateProcess.
VK

This topic is closed to new replies.

Advertisement