Skip to content

Instantly share code, notes, and snippets.

@tsfahmed2
Created April 27, 2022 14:45
Show Gist options
  • Select an option

  • Save tsfahmed2/aedf9b176b25a613fc64dfc15e69c5e0 to your computer and use it in GitHub Desktop.

Select an option

Save tsfahmed2/aedf9b176b25a613fc64dfc15e69c5e0 to your computer and use it in GitHub Desktop.
ifeofix.ps1
Get-ChildItem “HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options” -ea SilentlyContinue | Where {if ($_.Property -contains “Debugger”){($_|Get-ItemProperty).Debugger -like “*PreventStart*”}} | Remove-Item -Force -Recurse;
Get-ChildItem “HKLM:\SOFTWARE\Microsoft\WOW6432Node\Windows NT\CurrentVersion\Image File Execution Options” -ea SilentlyContinue | Where {if ($_.Property -contains “Debugger”){($_|Get-ItemProperty).Debugger -like “*PreventStart*”}} | Remove-Item -Force -Recurse;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment