readme - AntiWPA 3.3 for x64 and x86 = How to use: Start...

Info iconThis preview shows pages 1–2. Sign up to view the full content.

View Full Document Right Arrow Icon
Sheet1 Page 1 AntiWPA 3.3 for x64 and x86 Err:510 How to use: Start AntiWPA3.cmd to install/uninstall the patch What is does the patch modifies: * HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AntiWPA is added to Registry * File C:\windows\system32\AntiWPA.dll is added * * HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WPAEvents] data for "OOBETimer" is changed {=OOBE} * rundll32 setupapi,InstallHinfSection DEL_OOBE_ACTIVATE 132 syssetup.inf rundll32 setupapi,InstallHinfSection RESTORE_OOBE_ACTIVATE 132 syssetup.inf is executed which will remove/restore WPA-links from the startmenu How does it works: winlogon.exe to make it believe it was booted in safemode and so winlogon skips the WPA-Check. (Note: Does not affects system calls by other exe or dll.) The patch is 'autorun' on eachs start before the WPA-check via HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AntiWPA The hooks are applied when AntiWPA.dll!onLogon was load by winlogon.exe Winlogon.exe is not altered anymore. Patching (API-Hooking) is done in Memory.
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Image of page 2
This is the end of the preview. Sign up to access the rest of the document.

Page1 / 3

readme - AntiWPA 3.3 for x64 and x86 = How to use: Start...

This preview shows document pages 1 - 2. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online