Image File Execution Options Debugger. In other words the createprocess function figure out what program is about to be run and checks the image file execution options. Search for debuggers add or remove debugger to any process.
2 minutes to read. The intended use is for debugging or for replacing applications but using it as a means to simply stop the executable from executing altogether has been common practice as well. For example if your application is foo exe your registry key is foo exe.
Image file execution options ifeo are often used to turn on debugging automatically when starting a process by setting appropriate registry value for the tracing flags options.
Image file execution option wrapper. The intended use is for debugging or for replacing applications but using it as a means to simply stop the executable from executing altogether has been common practice as well. Image file execution options are used to intercept calls to an executable. Nt currentversion lmage file execution options key create a key that is the same as your application s filename.