refactor: usae absolute path in reg patch

https://twitter.com/Hexacorn/status/1317123866028802048
Neo23x0 · Oct 16, 2020 · 26b3fd6 · 26b3fd6
1 parent 80281d3
commit 26b3fd6
Show file tree

Hide file tree

Showing 7 changed files with 6 additions and 11 deletions.
diff --git a/raccine-reg-patch-bcdedit.reg b/raccine-reg-patch-bcdedit.reg
@@ -1,4 +1,4 @@
 Windows Registry Editor Version 5.00
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bcdedit.exe]
-"Debugger"="Raccine.exe"
+"Debugger"="C:\Windows\Raccine.exe"
diff --git a/raccine-reg-patch-powershell.reg b/raccine-reg-patch-powershell.reg
@@ -1,4 +1,4 @@
 Windows Registry Editor Version 5.00
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\powershell.exe]
-"Debugger"="Raccine.exe"
+"Debugger"="C:\Windows\Raccine.exe"
diff --git a/raccine-reg-patch-uninstall.reg b/raccine-reg-patch-uninstall.reg
@@ -1,16 +1,11 @@
 Windows Registry Editor Version 5.00
 
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vssadmin.exe]
-"Debugger"="Raccine.exe"
 
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wmic.exe]
-"Debugger"="Raccine.exe"
 
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wbadmin.exe]
-"Debugger"="Raccine.exe"
 
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bcdedit.exe]
-"Debugger"="Raccine.exe"
 
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\powershell.exe]
-"Debugger"="Raccine.exe"
diff --git a/raccine-reg-patch-vssadmin.reg b/raccine-reg-patch-vssadmin.reg
@@ -1,4 +1,4 @@
 Windows Registry Editor Version 5.00
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vssadmin.exe]
-"Debugger"="Raccine.exe"
+"Debugger"="C:\Windows\Raccine.exe"
diff --git a/raccine-reg-patch-wbadmin.reg b/raccine-reg-patch-wbadmin.reg
@@ -1,4 +1,4 @@
 Windows Registry Editor Version 5.00
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wbadmin.exe]
-"Debugger"="Raccine.exe"
+"Debugger"="C:\Windows\Raccine.exe"
diff --git a/raccine-reg-patch-wmic.reg b/raccine-reg-patch-wmic.reg
@@ -1,4 +1,4 @@
 Windows Registry Editor Version 5.00
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wmic.exe]
-"Debugger"="Raccine.exe"
+"Debugger"="C:\Windows\Raccine.exe"
diff --git a/raccine.cpp b/raccine.cpp
@@ -323,7 +323,7 @@ int wmain(int argc, WCHAR* argv[]) {
             killprocess(pids[i - 1], 1);
         }
 
-        wprintf(L"Raccine v0.7.1 finished\n");
+        wprintf(L"Raccine v0.7.2 finished\n");
         Sleep(5000);
     }
     //