@xxcom9a wrote:
Take a look at the AVG on Server 2008 Comment for some information on the ProductType = ServerNT stuff.
http://www.win2008workstation.com/win2008/security-software#comment-2002
Ah that’s very clever, it never occured to me to simply replace the offset to make a setup check an alternate key for “ProductType”.
Alas I’m sure it works for some but it wouldn’t for all – AVG probably uses it’s own hard-coded registry check for this value, whereas other (perhaps MSI/Windows Installers) would use sort of internal function to check this key that’s part of the Windows API.
Regardless, this is interesting to know – I’m going to investigate this method (among others) further over the next few weeks, maybe I can write some sort of in-memory runtime patcher…
