Enable ProcessSignaturePolicy when option enabled
@@ -202,6 +202,7 @@ INT WINAPI wWinMain(
}
#ifndef DEBUG
+ BOOLEAN PhpIsExploitProtectionEnabled(VOID); // Forwarded from options.c (dmex)
// Starting with Win10 20H1 processes with uiAccess=true override the ProcessExtensionPointDisablePolicy
// blocking hook DLL injection and inject the window hook anyway. This override doesn't check if the process has also enabled
// the MicrosoftSignedOnly policy causing an infinite loop of APC messages and hook DLL loading/unloading
@@ -218,8 +219,9 @@ INT WINAPI wWinMain(
// because a third party application called SetWindowsHookEx on the machine. (dmex)
if (
WindowsVersion >= WINDOWS_10 &&
- WindowsVersion != WINDOWS_10_20H1 &&
- WindowsVersion != WINDOWS_10_20H2
+ PhpIsExploitProtectionEnabled()
+ //WindowsVersion != WINDOWS_10_20H1 &&
+ //WindowsVersion != WINDOWS_10_20H2
)
{
PROCESS_MITIGATION_POLICY_INFORMATION policyInfo;
