What if the malicious user deletes the file and then shuts down the
computer
before the timed event occurs. Will the small exe still exist when
the
computer restarts?
For the above question, the direct answer is No.
But, I am not sure, will the application has ability to shutdown the
machine by delete a file before timed event occur?
And more over, depends on machine & os. In this case, it will
remain.For eg, the small exe will remain even after system restarts if
os is xpe. I am not sure about other os.
In the above scenario, will the running application can be deleted
with out stop or end process? No. By assuming, it is either stopped or
the process end by the malicious application.
I am having options to prevent a file to get delete.
Option #1:
Restrict the application deletion rights to owner alone. Give the
rights executable only.
Option #2:
Apply Principals & demand it.
Option #3:
Register it, keep the path more complex or stupidly.
Precautionary measures:
Write EntryLog if application tried to get access by other
applications.
Check the log-in user has rights to access or control the running
status of the application.
My Assumptions:
If it is server machine(OS), there should be options for monitoring
the log-on sessions., if needed it should able to reset to its one
step previous logon. I don’t know how to do it.
If I am wrong, pls correct me.
Thanks & Regards,
Velsankar
On Aug 29, 5:22 pm, "Charles A. Lopez" <[email protected]>
wrote:
> Very clean code and great recommedations Velsankar. Now... here's a
> particular scenario.
>
> What if the malicious user deletes the file and then shuts down the computer
> before the timed event occurs. Will the small exe still exist when the
> computer restarts?
>
> I learned alot from the code fragment. Thanks.
>
> 2009/8/29 Velsankar <[email protected]>
>
>
>
>
>
>
>
> > Use Windows services to instead of start up.
> > How to: Create Windows Services
> >http://msdn.microsoft.com/en-us/library/9k985bc9(VS.80).aspx
>
> > Regards,
> > Velsanakr
>
> > On Aug 29, 1:38 pm, Marcus <[email protected]> wrote:
> > > Hello
>
> > > I need to store a small exe file in memory. I want to do this because
> > > I want some sabotage protection in my app. If the user removes this
> > > essential file from the harddrive, my app will not work the next time
> > > it is to be launched.
>
> > > So I want to read this exe file into memory initially when my program
> > > starts up. Then I will use a timer that at some interval checks if
> > > this file is present on the file system. If not, then my app writes it
> > > back from memory to the harddrive.
>
> > > Could someone please give an example how to do this. It should be a
> > > pretty small piece of could I reccon, but I can not figure it out.
>
> > > Thanks
>
> --
> Charles A. Lopez
> [email protected]
>
> Registered Microsoft Partner
>
> New York City, NY
>
> I'm running on Windows 7 Build 7100
>
> Quality Software Works
