A auto start dll, ocx or sys file? [unresolved]

[TDQWERTY]

Can that be made? i would like to create a dll, ocx or a sys file and when windows start it could be auto loaded without beeing called from rundll or with regedit keys, because any user can delete that key.

That file is to keep me informed of all logins that exist after a windows start, and afer something like 10 seconds, the dll just needed to execute this:

sub main()
shell("cmd /c net user>>F:\users_files\logins.txt"),vbhide
unload me
end sub

F: is a network drive already mapped in that computer.

Any idea how to do this?

[Calibra]

Originally posted by TDQWERTY
Can that be made? i would like to create a dll, ocx or a sys file and when windows start it could be auto loaded without beeing called from rundll or with regedit keys, because any user can delete that key.

That file is to keep me informed of all logins that exist after a windows start, and afer something like 10 seconds, the dll just needed to execute this:

sub main()
shell("cmd /c net user>>F:\users_files\logins.txt"),vbhide
unload me
end sub

F: is a network drive already mapped in that computer.

Any idea how to do this?

you need to create an service, but that can only be done with C++ or C#, dunno if VB.net can do it, VB6 can't if i'm not mjistaken.

Service's are the only things that can be started before somebody logs in.

[TDQWERTY]

To create a system service in vb i need a file named ntdll.dll if i'm not mistaken, but to remove a service is also easy cause any user see it's name on regestry and can delete it.

I don't want the users know what file is the admin using cause they always mess the computers.

I'v already tryed to search information about hiding services names but i didn't make it
And if i'm not mistaken network drives just will be avaiable after a user logon.

thanks Calibra

anyone more?

[Calibra]

Originally posted by TDQWERTY
To create a system service in vb i need a file named ntdll.dll if i'm not mistaken, but to remove a service is also easy cause any user see it's name on regestry and can delete it.

I don't want the users know what file is the admin using cause they always mess the computers.

I'v already tryed to search information about hiding services names but i didn't make it
And if i'm not mistaken network drives just will be avaiable after a user logon.

thanks Calibra

anyone more?

Create an service, start it in admin mode and deny rights to acces by users, that way they can see it, but they can't delete or stop te service.

If you are that concercend with security then why can the user's acces the registry or acces tools to shutdown or delete service's


Why no just use window's own security log file to check who logged in?

[Dave Sell]

Are you sure a VB app cannot be loaded when Windows starts, before a user logs in?

[Calibra]

Originally posted by Dave Sell
Are you sure a VB app cannot be loaded when Windows starts, before a user logs in?

As far as i know only an windows-service can be started before an user logs in, and the only account capable of doing that is the admin account, i could be mistaken but i don't think so.

I have never seen an app being started before an user logged in, would be an MAJOR security risk if it where possible.

[Dave Sell]

OK fine, but can that windows service be a VB app is the question?

[Calibra]

Originally posted by Dave Sell
OK fine, but can that windows service be a VB app is the question?

If VB can create service dll's then the answer is yes, i think (not sure) vb.net can create windows services.
Not sure about vb6 though.

[Dave Sell]

I don't think it can. Can't any standard EXE just get loaded when windows loads? I guess it wouldn't count as a true service, but may well give the original poster what he's looking for.

[qa_tarzaan]

Look at the following article in MSDN

An OLE Control for Creating Win32 Services in Visual Basic

http://msdn.microsoft.com/archive/de...n_ntsrvocx.asp

This might help.

[TDQWERTY]

Can that be made? i would like to create a dll, ocx or a sys file and when windows start it could be auto loaded without beeing called from rundll or with regedit keys, because any user can delete that key.

I don't have sure if u guys have read this...

3rd party applications can easy go into regestry and change things, i, myself have tested it already, it's not safe.

And Yes, it's very possible to make a vb6 exe that can start with services..give a search in this forum, it's there.

[Dave Sell]

Originally posted by TDQWERTY
Can that be made? i would like to create a dll, ocx or a sys file and when windows start it could be auto loaded without beeing called from rundll or with regedit keys, because any user can delete that key.

That file is to keep me informed of all logins that exist after a windows start, and afer something like 10 seconds, the dll just needed to execute this:

sub main()
shell("cmd /c net user>>F:\users_files\logins.txt"),vbhide
unload me
end sub

F: is a network drive already mapped in that computer.

Any idea how to do this?

After looknig at this again, I noticed a problem with what you want to do. The service is running before anyone is logged in means that F:\ won't exist until after someone logs in. Not sure if you've accounted for that.

[Calibra]

Originally posted by TDQWERTY
I don't have sure if u guys have read this...

3rd party applications can easy go into regestry and change things, i, myself have tested it already, it's not safe.

And Yes, it's very possible to make a vb6 exe that can start with services..give a search in this forum, it's there.

deny youre user teh right to use 3rd poarty programs, and secondly deny every user except admin acces to registry files

[TDQWERTY]

deny youre user teh right to use 3rd poarty programs, and secondly deny every user except admin acces to registry files

how would i do that?

but my question is still unsolved :\ i would like to catch the user that's making this to me.
I would have enouth proves to send out and ban him forever in my cyber. i'm thinking in byuing more 10 computers, i don't want to loose more and more time reinstalling all computers. it's a hell of a job.

[ice_531]

If you have basic knowledge of VB .NET you can make a service easily.


http://www.startvbdotnet.com/ has an example i do believe

[TDQWERTY]

let's try to get this clear, the system service will be loaded on windows startup, not after logon, i know how to buid a service using vb6, that wasn't the problem, the problem was that i wanted the dll/ocx log the username into my server.

I managed to solve the problem in other way, i made a program that will be loaded after login and the computer will freeze for 1 minute untill all programs have been loaded and then the program will show up. That program will allow the users to call the allowed services and programs that are installed and allowed to run. all the desktop is clean and no start menu now.

Please close this thread