Hi all,

After searching here and there for a solution, I turn to you at our company, several users were using an illegal software package. We have been able to detect and remove it from the workstations and servers, but are now receiving signals that a couple of users have brought the software with them on CD, and run it from there.

To filter out these last ones, I would like to be able to detect certain files being used on a system. Say for example if a user brings along a CDROM from which he runs a program, and the program is designed to always open a file called PROGRAM.INI. How would I be able to detect this file being opened on a system?

Any help is appreciated!

I have thought about creating my own extra.dat so that the virusscanner will detect this program as a virus, but that would require finding out how these extra.dat files need to be made, so I'm hoping for another solution.
_________________________
Regards, Jeroen. There are two ways to write error-free programs. Only the third one works.