diff options
author | Mounir IDRASSI <mounir.idrassi@idrix.fr> | 2015-10-27 15:23:22 +0100 |
---|---|---|
committer | Mounir IDRASSI <mounir.idrassi@idrix.fr> | 2015-10-27 20:47:56 +0100 |
commit | ebbbde89647ae0a7cce430ef880822805ebc2e12 (patch) | |
tree | d3f4e77715505f02b17e63cc85f82df1819b7d1c /src/Common/Registry.c | |
parent | 62de77e2c869acc0f9e1f82b4347c86faaf9ac47 (diff) | |
download | VeraCrypt-ebbbde89647ae0a7cce430ef880822805ebc2e12.tar.gz VeraCrypt-ebbbde89647ae0a7cce430ef880822805ebc2e12.zip |
Windows: workaround to solve false positive detection by some anti-virus software.
Diffstat (limited to 'src/Common/Registry.c')
-rw-r--r-- | src/Common/Registry.c | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/src/Common/Registry.c b/src/Common/Registry.c index 1cf28438..42162906 100644 --- a/src/Common/Registry.c +++ b/src/Common/Registry.c @@ -312,6 +312,13 @@ void DeleteRegistryValue (char *subKey, char *name) void GetStartupRegKeyName (char *regk, size_t cbRegk)
{
// The string is split in order to prevent some antivirus packages from falsely reporting
- // TrueCrypt.exe to contain a possible Trojan horse because of this string (heuristic scan).
+ // VeraCrypt.exe to contain a possible Trojan horse because of this string (heuristic scan).
StringCbPrintfA (regk, cbRegk,"%s%s", "Software\\Microsoft\\Windows\\Curren", "tVersion\\Run");
}
+
+void GetRestorePointRegKeyName (char *regk, size_t cbRegk)
+{
+ // The string is split in order to prevent some antivirus packages from falsely reporting
+ // VeraCrypt.exe to contain a possible Trojan horse because of this string (heuristic scan).
+ StringCbPrintfA (regk, cbRegk,"%s%s%s%s", "Software\\Microsoft\\Windows", " NT\\Curren", "tVersion\\Sy", "stemRestore");
+}
\ No newline at end of file |