Skip to content

Commit

Permalink
fix readme
Browse files Browse the repository at this point in the history
  • Loading branch information
spider2048 committed Oct 15, 2023
1 parent c279a34 commit b65b991
Showing 1 changed file with 6 additions and 12 deletions.
18 changes: 6 additions & 12 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,30 +1,24 @@
# No Delete
> Suhas N | 2023
<h1> This program is distributed under the MIT License and is for educational purposes ONLY. The authors / contributors of this program
are not responsible for ANY DAMAGES CAUSED to YOU or YOUR ORGANIZATION. </h1>

## Description

This program injects into `explorer.exe` and plays with its Shift+Delete functionality.
The file which is `Shift+Delete`-ed will be hidden for a while and moved to the `store/{unix-epoch}` directory.
You will know where to use this program.

Read about the inner workings [here](https://sp1d3r.vercel.app/posts/explorer-nodelete/)

## Usage

I recommend you to create a seperate directory.

1. Grab `NoDelete.exe` and `NoDeleteH.dll` files from `Releases` and place them in the same folder.
2. Start `NoDelete.exe` program. It will download `shell32.pdb` (10-11MB, speed depends on MS symbol servers)
3. If the program ends, check the logs in the `log` folder.
4. The logs in the log folder as named as follows:
+ `base.log`: contains information of the main executable
+ `inject_{PID}.log`: contains information of the target process.

**For every windows update (not product/.NET updates), you should delete the `shell32.pdb` file and regenerate it.**

## Heads up
Yet to implement the `auto-injection` feature. This will be implemented on demand.
+ `base.log`: contains information of the main executable
+ `inject_{PID}.log`: contains information of the target process.

## Disclaimer
I am not responsible for any damage caused to you by using this source code.
Don't be scared if `explorer.exe` crashes but report the issue in #Issues with your logs.
**For every windows update (not product/.NET updates), you should delete the `shell32.pdb` file and regenerate it.**

0 comments on commit b65b991

Please sign in to comment.