executable files
-
hi i want to know what is the name of exe file that executes the programs.sometimes programs himselft start running how it is possible ddd
I don't quite understand your question(s). Please elaborate.
"Ideas are a dime a dozen. People who put them into action are priceless." - Unknown
-
hi i want to know what is the name of exe file that executes the programs.sometimes programs himselft start running how it is possible ddd
The "name" of the Executable that executes the programs. There is not one single application running that creates all processes. The creation of processes is a facility exposed by the Operating System so that any process may create another process. As an example, if you use Start -> Run that process will be a child of Explorer. This is not the only process which does this and there are other methods of creating a process indirectly. Here are some seemingly indirect and "automatic" methods of launching programs. 1. Autorun.INF - This is a method used by CD's so if you insert a CD, it finds this file and launches the executable that this points to which is generally some setup.exe program. Your action is to put a CD in. 2. Start Up menu, "Run" & "RunOnce" registry keys These automatically launch applications on start up. Your action is to simply boot and log into the machine. 3. File Type Associations There is a location in the registry which describes what application to launch when a certain file type is double clicked on or "launched". The system will then find this file type and launch it into the appropriate application. Your action is to simply click or try to run a file of a registered type. 4. Other Applications Other applications on the system could simply launch applications at will, there's no rule that says when they should do this. It depends on the application when and why it launched another application though. Here is an application I wrote that you can use to find out who launched what application. Simply look at the PID and the Parent PID. The Parent PID is the appliation that launched it. http://www.opferman.net/Files/setup_qv.exe[^] The OS provides "ShellExecute*" and "CreateProcess" API's to launch applications (and FTA's). The general rule is for typing "notepad" and enter in the Run or Command window is: 1. Search for .COM extensions 2. Search for .EXE extensions 3. Search for .BAT extensions Aside from .BAT, the loader does not distinquish any difference in the binary format of a .COM or .EXE. They can both be PE format, the older EXE format or even a true "COM" format (Which is raw memory loaded in real mode at an offset of 256 preceeded by the PSP). The distinquishing characteristics are the "MZ" signature and the header file format that follows. 8bc7c0ec0
-
The "name" of the Executable that executes the programs. There is not one single application running that creates all processes. The creation of processes is a facility exposed by the Operating System so that any process may create another process. As an example, if you use Start -> Run that process will be a child of Explorer. This is not the only process which does this and there are other methods of creating a process indirectly. Here are some seemingly indirect and "automatic" methods of launching programs. 1. Autorun.INF - This is a method used by CD's so if you insert a CD, it finds this file and launches the executable that this points to which is generally some setup.exe program. Your action is to put a CD in. 2. Start Up menu, "Run" & "RunOnce" registry keys These automatically launch applications on start up. Your action is to simply boot and log into the machine. 3. File Type Associations There is a location in the registry which describes what application to launch when a certain file type is double clicked on or "launched". The system will then find this file type and launch it into the appropriate application. Your action is to simply click or try to run a file of a registered type. 4. Other Applications Other applications on the system could simply launch applications at will, there's no rule that says when they should do this. It depends on the application when and why it launched another application though. Here is an application I wrote that you can use to find out who launched what application. Simply look at the PID and the Parent PID. The Parent PID is the appliation that launched it. http://www.opferman.net/Files/setup_qv.exe[^] The OS provides "ShellExecute*" and "CreateProcess" API's to launch applications (and FTA's). The general rule is for typing "notepad" and enter in the Run or Command window is: 1. Search for .COM extensions 2. Search for .EXE extensions 3. Search for .BAT extensions Aside from .BAT, the loader does not distinquish any difference in the binary format of a .COM or .EXE. They can both be PE format, the older EXE format or even a true "COM" format (Which is raw memory loaded in real mode at an offset of 256 preceeded by the PSP). The distinquishing characteristics are the "MZ" signature and the header file format that follows. 8bc7c0ec0
As far as I know there is not an executable that executes programs. When you run a program, it interfaces with the Kernal/Hardware Abstraction Layer. So reguardless of how you start a process, it will end up running the same anyways. One thing to keep in mind is that there are permissions in every process. This is to prevent a process from taking over other processes. (ie viruses.) I guess a system process is executed differently since it has different permissions, but I have little/no info on the subject.