Windows snakeoil remover


A decade ago, I developed a small tool to demonstrate that certificate-signed executables are not verified by default in Windows 7. This tool can modify and remove certain PE-Header parameters used by the Windows Loader. I then discovered that Visual Studio’s editbin tool can also change these flags. snakeoil

check files

C:\dev\snakeoil.exe c:\TEMP\a_very_long_path_very_very_loooonngggggggggggg_even_longer_\ads*.* snakeoil_chk

remove flags

C:\dev\snakeoil.exe +l -c -a -d c:\TEMP\a_very_long_path_very_very_loooonngggggggggggg_even_longer_\ads*.* snakeoil_rm