Continued:

- blocked %systemroot% (search is case-insensitive)

Signed-off-by: Roland Häder <roland@mxchange.org>

diff --git a/libs/lib_detector.php b/libs/lib_detector.php
index fa4768279946f490a543b3a72b7e88d693fc79da..809676323605af9093d6f7c5b5a50020ceb860d2 100644 (file)
--- a/libs/lib_detector.php
+++ b/libs/lib_detector.php
@@ -94,7 +94,7 @@ function initCrackerTrackerArrays () {
                'bin/tclsh', 'bin/nasm', '/perl',
 
                // Windows-related
-               'cmd.exe', 'nc.exe', 'ftp.exe', 'powershell', 'system.net.webclient',
+               'cmd.exe', 'nc.exe', 'ftp.exe', 'powershell', 'system.net.webclient', '%systemroot%',
 
                // php.ini settings
                'allow_url_fopen', 'allow_url_include', 'auto_prepend_file', 'disable_functions', 'safe_mode',