Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Be aware of NTFS Access Control Lists #4

Open
Explorer09 opened this issue Jul 17, 2017 · 0 comments
Open

Be aware of NTFS Access Control Lists #4

Explorer09 opened this issue Jul 17, 2017 · 0 comments

Comments

@Explorer09
Copy link
Owner

This is part of usb_vaccine.cmd to-do list.

We can leverage NTFS permissions (or Access Control Lists) to:
(1) further protect the two dummy directories ("autorun.inf" and "Desktop.ini") from being removed, and also
(2) force move or delete some of the suspicious files that we are otherwise denied to move and delete.

This somewhat overlaps what Unlocker does, except that we will leave alone files that are actually in use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant