How to?-How to mark a file at the OS level

[SOLAR]

Thanks for all responses u guys are right i just realize a few hours after posting that it isnt os level and in fact very simple to do.

well hklm\ and or hkcu
\softawre\microsoft\windows\
has runonce and runonce ex keys
they are accessed on boot and run

so you have set a key like cmd \c del blah.exe
it wil run cmd and delte the file during boot


also in this key there is a value PendingFileRenameoperation it takes HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager

this key takes multiple file names as arguments and deletes them all during next reboot

[Cobi]

Look at this:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/fileio/fs/movefileex.asp

If dwFlags specifies MOVEFILE_DELAY_UNTIL_REBOOT and lpNewFileName is NULL, MoveFileEx registers the lpExistingFileName file to be deleted when the system restarts. If lpExistingFileName refers to a directory, the system removes the directory at restart only if the directory is empty.