Support

Timestamp:

Sep 15, 2014 11:18:44 AM (10 years ago)

Author:

vboxsync

Message:

terrible experiment with kernel32/base and avast.

File:

trunk/src/VBox/HostDrivers/Support/win/SUPR3HardenedMain-win.cpp

-              r52741
+              r52744
     /*
      * Unmap the image we mapped into the guest above.
+     * Experiment: Don't unmap for avast.
+     */
+    if (!(g_fSupAdversaries & SUPHARDNT_ADVERSARY_AVAST))
+    {
+        supR3HardNtPuChUnmapDllFromChild(pThis, pvKernel32, "kernel32.dll");
+        supR3HardNtPuChUnmapDllFromChild(pThis, pvKernelBase, "KernelBase.dll");
+    }
+     */
+    supR3HardNtPuChUnmapDllFromChild(pThis, pvKernel32, "kernel32.dll");
+    supR3HardNtPuChUnmapDllFromChild(pThis, pvKernelBase, "KernelBase.dll");
     supR3HardNtPuChUnmapDllFromChild(pThis, pvNtDll2, "ntdll.dll[2nd]");
     supR3HardNtPuChUnmapDllFromChild(pThis, pvExe2, "executable[2nd]");

Note: See TracChangeset for help on using the changeset viewer.