feat: cleaner 支持清理所有持久化痕迹,minidump 增加杀软前置检测

cleaner 新增 Windows 持久化完整清理:
- Winlogon Shell/Userinit 恢复默认值
- IFEO 映像劫持清理
- 注册表 Run/RunOnce 清理
- 计划任务、服务、启动文件夹清理
- BITS 任务、WMI 事件订阅清理
- Prefetch 记录清理

minidump 增加杀软前置检测,发现 Defender/EDR 直接退出,
避免 MiniDumpWriteDump hang 导致系统崩溃
This commit is contained in:
ZacharyZcR
2026-05-16 06:20:00 +08:00
parent ec10097e76
commit cb1079598d
3 changed files with 255 additions and 27 deletions
+9
View File
@@ -0,0 +1,9 @@
//go:build (plugin_cleaner || !plugin_selective) && !windows && !no_local
package local
import "strings"
func cleanPersistence(output *strings.Builder) int {
return 0
}