Closed dampee closed 3 years ago
Found the answer. McAfee is blocking this with a message in the eventlog:
EventID=18054
ExP:Illegal API Use Blocked an attempt to exploit C:\WINDOWS\SYSTEM32\WINDOWSPOWERSHELL\V1.0\POWERSHELL.EXE, which targeted the AtlComPtrAssign API.
What could be the reason if nothing happens? Would it be possible to add a little more logging so you know what is happening?