1

I'm trying to create a startup on a windows 7 for the machine and current user (its a workstation meaning all user data is saved on a server).

What i mean whit a startup is to have a program run at login producing the same result as to put a registrar value in bout:

HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

Or adding a link/file in the following folders:

%allusersprofile%\Start Menu\Programs\Startup
%profilepath%\Start Menu\Programs\Startup

What I want to achieve is a proof of concept. I want to create a "virus" that when run, it creates a startup for the local machine and user when run. so i want to be able to create startups both for the current user and machine to make this work. Hopefully the user startup will get stored in its personal preferences that is stored on the account server making that user a distributer of the startup "virus". So all user that gets infected will spreed it and all clients that get it will also spread it.

I can't:

  • Use the registry
  • use elevated privileges

I can:

  • Write to C:/
  • Run .exe
  • Run the activity monitor

I know this isn't a lot to go on. So just ask and i will check if the feature is available.

Edit

I basically rewrote the whole question to make it more understandable.

11
  • 2
    @WZeberaFFS - I'm lost. What do you mean by "autorun"? For some people, "autorun" refers to something that automatically executes when a particular removable media is inserted. For others, it's something that runs at OS boot. For still others, it's something that runs at user login.
    – Iszi
    Commented Apr 26, 2011 at 14:09
  • @Iszi I'm sorry, I wan the run at login feature. Like the registry keys HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run and HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Commented Apr 26, 2011 at 16:00
  • @WZebraFFS - Any particular preference as to which of those you want to emulate? The former is user-specific, while the latter applies to all users.
    – Iszi
    Commented Apr 26, 2011 at 16:05
  • @Iszi I want them both. So that when a user log into a infected computer the virus will spread the user personal setting that then gets saved on the server. And when that infected user logs into another computer it will to get infected. Commented Apr 26, 2011 at 16:12
  • 1
    @WZeberaFFS - Without knowing certain variables in the environment, I don't think there's a way to do this reliably. With certain kinds of roaming profiles though, this may be possible: Copy virus to "%profilepath%\Start Menu\Programs\Startup" for per-user, multi-system infection. Single-system, multi-user infection may be more difficult since the equivalent action would be copying to the same sub-folder under "%allusersprofile%", which requires elevated privileges.
    – Iszi
    Commented Apr 26, 2011 at 16:40

0

You must log in to answer this question.

Browse other questions tagged .