Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm trying to create a startup on a windows 7 for the machine and current user (its a workstation meaning all user data is saved on a server).

What i mean whit a startup is to have a program run at login producing the same result as to put a registrar value in bout:

HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

Or adding a link/file in the following folders:

%allusersprofile%\Start Menu\Programs\Startup
%profilepath%\Start Menu\Programs\Startup

What I want to achieve is a proof of concept. I want to create a "virus" that when run, it creates a startup for the local machine and user when run. so i want to be able to create startups both for the current user and machine to make this work. Hopefully the user startup will get stored in its personal preferences that is stored on the account server making that user a distributer of the startup "virus". So all user that gets infected will spreed it and all clients that get it will also spread it.

I can't:

  • Use the registry
  • use elevated privileges

I can:

  • Write to C:/
  • Run .exe
  • Run the activity monitor

I know this isn't a lot to go on. So just ask and i will check if the feature is available.

Edit

I basically rewrote the whole question to make it more understandable.

share|improve this question

migrated from security.stackexchange.com May 10 '11 at 11:58

This question came from our site for Information security professionals.

2  
@WZeberaFFS - I'm lost. What do you mean by "autorun"? For some people, "autorun" refers to something that automatically executes when a particular removable media is inserted. For others, it's something that runs at OS boot. For still others, it's something that runs at user login. –  Iszi Apr 26 '11 at 14:09
    
@Iszi I'm sorry, I wan the run at login feature. Like the registry keys HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run and HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run –  KilledKenny Apr 26 '11 at 16:00
    
@WZebraFFS - Any particular preference as to which of those you want to emulate? The former is user-specific, while the latter applies to all users. –  Iszi Apr 26 '11 at 16:05
    
@Iszi I want them both. So that when a user log into a infected computer the virus will spread the user personal setting that then gets saved on the server. And when that infected user logs into another computer it will to get infected. –  KilledKenny Apr 26 '11 at 16:12
1  
@WZeberaFFS - Without knowing certain variables in the environment, I don't think there's a way to do this reliably. With certain kinds of roaming profiles though, this may be possible: Copy virus to "%profilepath%\Start Menu\Programs\Startup" for per-user, multi-system infection. Single-system, multi-user infection may be more difficult since the equivalent action would be copying to the same sub-folder under "%allusersprofile%", which requires elevated privileges. –  Iszi Apr 26 '11 at 16:40
show 6 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.