Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-04-2005, 09:09
Mkz Mkz is offline
Friend
 
Join Date: Jan 2002
Posts: 98
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 5
Thanks Rcvd at 25 Times in 17 Posts
Mkz Reputation: 2
Just one small clarification I think should be made.

The problem with the key names that contain NULL is not ANSI vs UNICODE. In Unicode, once the 0x00 0x00 unicode char was reached, this would make the API take it as the end-of-string and not include it in the key name.

The problem is that the native version does not rely on a NULL terminator (be it ANSI or UNICODE), but it receives the length of the key name in a separate parameter, thus allowing you to specify a certain length, and in the key name place any garbage you want, including NULLs.
There is already a RegCreateKeyW which handles Unicode chars and does not allow these hidden keys, because it also relies on a NULL (0x00 0x00) to detect the end of the key name.
Reply With Quote
  #2  
Old 07-05-2005, 14:51
The Boss The Boss is offline
Family
 
Join Date: Dec 2004
Posts: 51
Rept. Given: 0
Rept. Rcvd 60 Times in 6 Posts
Thanks Given: 0
Thanks Rcvd at 4 Times in 3 Posts
The Boss Reputation: 60
SDProtector Key

SDProtector (www.sdprotector.com) create a key "SDProtect" in HKRY_USERS that nativa Api don't delete!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
CRC problem... Alien Registry Viewer Maltese General Discussion 4 04-12-2007 13:52
Registry Monitoring, what's best? Barry General Discussion 13 08-08-2004 00:55


All times are GMT +8. The time now is 21:18.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )