http://www.mypicshare.com/wxteowjspic.html If you are going to write a PE file infector your code will be executed at 'user mode', under the strict control of the operating system.