search

Neo23x0 / Raccine

A Simple Ransomware Vaccine
The Unlicense
942 stars 123 forks source link

C:\ProgramData\Raccine\Raccine_log.txt is first created with privileges of the task that triggered it #47

Closed wdormann closed 3 years ago

wdormann commented 3 years ago

If C:\ProgramData\Raccine\Raccine_log.txt is created because of a program written to with elevated privileges, that log file will require elevated privileges to be written to. Similarly, if the log file is created by one user, the log file cannot be written to as another user.

Ideally, if Raccine_log.txt is to be created, it should be created in a way that allows it to be written to regardless of privilege level or specific user that triggered its creation.

Omodaka9375 commented 3 years ago

Originally the log file was created in C:\Windows together with the Raccine.exe file. So it was necessary to run with elevated privileges to write to file. This can be refactored after stabilization.

Neo23x0 commented 3 years ago

Trying to fix this by creating an empty log file and giving every user write access to it. https://github.com/Neo23x0/Raccine/commit/2d43aa53f2939ed070477e6165fad995714c6657