add text about debugview

This commit is contained in:
zeffy
2017-06-04 17:44:24 -07:00
parent 3a3e195c6b
commit 0094d19358

View File

@@ -24,8 +24,8 @@ My patch takes advantage of this result caching behavior by setting the "hasn't
## How it works ## How it works
- On system boot the `wufuc` scheduled task runs under the `NT AUTHORITY\SYSTEM` user. - On system boot the wufuc scheduled task runs under the `NT AUTHORITY\SYSTEM` user.
- `wufuc` determines what service host process the Windows Update service (`wuauserv`) runs in, and injects itself into it. - wufuc determines what service host process the Windows Update service (`wuauserv`) runs in, and injects itself into it.
- Once injected, it applies a hook to `LoadLibraryEx` that automatically patches `wuaueng.dll` when it is loaded. - Once injected, it applies a hook to `LoadLibraryEx` that automatically patches `wuaueng.dll` when it is loaded.
- Any previously loaded `wuaueng.dll` is also patched. - Any previously loaded `wuaueng.dll` is also patched.
@@ -46,3 +46,16 @@ To temporarily disable the patch, just go to the Task Scheduler and disable the
### How do I remove your old patch and use this instead? ### How do I remove your old patch and use this instead?
I've included a utility script called `repair_wuaueng.dll.bat` that will initiate an sfc scan and revert any changes made to `wuaueng.dll`. I've included a utility script called `repair_wuaueng.dll.bat` that will initiate an sfc scan and revert any changes made to `wuaueng.dll`.
### How to see wufuc's debugging message output?
You will need to download [DebugView](https://technet.microsoft.com/en-us/sysinternals/debugview.aspx) to do this.
The best way to get a log of the entire life-cycle of wufuc is to do the following:
1. Disable wufuc in Task Scheduler.
2. Restart your computer.
3. Start `DebugView.exe` as administrator and check `Capture -> Capture Global Win32`.
4. Enable wufuc in Task Scheduler.
5. Run wufuc in Task Scheduler.
6. Output will be shown in DebugView.