Click here to Skip to main content
15,905,563 members
Please Sign up or sign in to vote.
1.00/5 (1 vote)
See more:
I try to make a tool to report windows OS (Start up items , process , services , .... etc) .
but some times backdoors or trojans inject to default browser (chrome , firefox) so it dose not show in process , so I need to find its path by find all handles path .
can any one give me a method to list all opened files (drivers , exe , dll , .... etc)
thank you
Posted

I don't think it is a trojan. Did you list it as a process name or as a window handle when listing all open files? If you listed as a process name then you probably don't know the name of the process for the exact program you want to see and if it as a window handle, then you should be able to get the process name from it.. Give more details, in the meantime i wrote a program similar to this in which i listed successfully all open programs and could even control the windows through their handles. I will see if i can dig it up.
 
Share this answer
 
Comments
KosayHatem 10-Jul-13 18:29pm    
some malware try to connect to internet by inject its process to browser and kill its process (ther is a lot of malware like this) , and when you search for it (use system analysis tool) you can find it as handle in internet browser .
so to detect all strange items I need to list all opened files in OS , OR list all process's handles .
It's very doable, but you may be in for a bit of a shock: Read these[^].

Then there's an article here on CP for it: Listing Used Files[^]
 
Share this answer
 
Comments
KosayHatem 17-Nov-13 12:26pm    
I need like Listing Used Files but in .NET .
what is the best solution for this ?
or use
Dave Kreskowiak 17-Nov-13 14:41pm    
I already gave it to you.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900