Re: Using ZwCreateFile to Launch embedded exe

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

And, the source is, certainly, based upon my sample from the
Codeproject - as far as I remember, you were asking this question down
there as well.....

If you were just blocking execution, it would be acceptable, but you
want to substitude executable Y for executable X. The only type of
"software" that does such things is generally known as MALWARE.....

Anton Bassov

Jay wrote:
This is going to be part of the security package that I am writing.
When it is executing, a user allows only the applications that they
want to execute. If any othe .exe tries to run that the user has not
allowed, then another .exe will execute in it's place. It is not
malware.

-Jay
(patelj27b at gmail dot com)


anton bassov wrote:
What a "driver that will replace a file that is executing with another
exe" is, apart from being just a piece of MALWARE???

Anton Bassov


.
Jay wrote:
Hey There,
I have some code that is written for a driver that will replace a
file that is executing with another exe. For most .exes it will work,
but for the executables that are, in essence, wrappers, like the
self-extracting zip file, will not work. What is different in the flow
of execution of a regular exe with one that is essentially just a
wrapper exe? Any information that can point me in the right direction
would be greatly appreciated!

-Jay
(patelj27b at gmail dot com)

.

Relevant Pages

  • Re: How do they do that?
    ... For example, I need a script. ... execution engine. ... Now, if you need to create or modify this script during the install process, you would ... >How do some setup merge script files,, with the exe ...
    (microsoft.public.vc.mfc)
  • Re: Cant download exes from my own site
    ... How would a user run an .exe on a website? ... <jcochran at naplesgov dot com (Jeff Cochran)> ... > system down to prevent malicious execution. ... >>> You may want to review your permissions, both in IIS and in the NTFS ...
    (microsoft.public.inetserver.iis.security)
  • Re: Loading of .NET executable
    ... > Can someone refer to me a good online resourec about how a .NET exe ... > gets loaded into memory and executed once I dbl-click the executable ... Basically the EXE has has a stub that runs and passes ... .NET then grabs your EXE and starts execution of the UL via ...
    (microsoft.public.dotnet.framework.clr)
  • Re: move .exe
    ... You can copy the currently running file, ... >> folder and continues execution from the new location? ... The .bat file repeatedly tries to copy the .exe to the new location ...
    (microsoft.public.vc.mfc)
  • Re: Starting .exe "single threaded"
    ... > I would like to control the execution of the program so that the ... > My program must be an .exe. ... There is no support in standard C++ for threading or restricting execution ...
    (comp.lang.cpp)