Empty Event Message
Neo23x0 opened this issue · comments
I can't figure out under which circumstances this "empty" message would be produced.
Could someone of you find the location where this happens?
@JohnLaTwC @Eran-YT @Omodaka9375 ?
It comes from the install script:
eventcreate.exe /L Application /T Information /id 1 /so Raccine /d "Raccine event message"
notice the eventId is 1. raccine.exe always logs with #define RACCINE_EVENTID_MALICIOUS_ACTIVITY 2. The only place 1 is used is in the eventcreate in the install. You could change the message in the installer to say something like "Raccine registration of event id %x"
Oh my ... yes! I'll change it to a more descriptive message. Thanks