Contribute  :  Web Resources  :  Past Polls  :  Site Statistics  :  Downloads  :  Forum  
    BiW ReversingThe challenge is yours    
 Welcome to BiW Reversing
 Sunday, April 02 2023 @ 11:12 AM CEST
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Anti debug

 
Post new topic   Reply to topic    www.reversing.be Forum Index -> Unpacking
View previous topic :: View next topic  
Author Message
seven
Occasional Poster
Occasional Poster


Joined: 02 Jun 2005
Posts: 30

PostPosted: Thu Dec 28, 2006 2:41 pm    Post subject: Anti debug Reply with quote

HI ALL . dealing with aspro + armad i get this msg

Hide Debugger <Failed to apply protection against TerminateProcess>

any idea how to hide olly ?

thanx so much
Back to top
View user's profile Send private message
bpx
Occasional Poster
Occasional Poster


Joined: 22 Jan 2006
Posts: 25
Location: Earth

PostPosted: Thu Dec 28, 2006 5:15 pm    Post subject: OS? Reply with quote

What OS are you using? If you are on win98 or less I have to imagine it will fail.
Alot of anti-anti plugins fail because of inability to memory patch kernel32.dll.

None the less, all aspr uses for debugger detection is a call to IsDebuggerPresent.
Arma uses IsDebuggerPresent and sometimes malicious calls to OutputDebugString.

Hopfully you will be able to figure out how to disable these without plugins Smile

also:
Is TerminateProcess protection all that fails? Because if other options work, you prolly don't need it.
Back to top
View user's profile Send private message
seven
Occasional Poster
Occasional Poster


Joined: 02 Jun 2005
Posts: 30

PostPosted: Fri Dec 29, 2006 5:07 pm    Post subject: Reply with quote

bpx , thanx so much 4 replay , i worked with aspro plus armad

( winxp sp2 ) 4 so long so i know itz a new trick but dont know

how to breakthrough , anyway thanx 4 ur help .
Back to top
View user's profile Send private message
bpx
Occasional Poster
Occasional Poster


Joined: 22 Jan 2006
Posts: 25
Location: Earth

PostPosted: Fri Dec 29, 2006 5:27 pm    Post subject: plugin Reply with quote

Here, maybe you'd like to try this plugin.
It's worked out for me Smile

I don't remember where I found it, so I'll uploaded it here.



HideOD.zip
 Description:
Hide Olly

Download
 Filename:  HideOD.zip
 Filesize:  18.11 KB
 Downloaded:  2373 Time(s)

Back to top
View user's profile Send private message
seven
Occasional Poster
Occasional Poster


Joined: 02 Jun 2005
Posts: 30

PostPosted: Wed Jan 03, 2007 3:50 pm    Post subject: Reply with quote

BPX , THANX SO MUCH .
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.reversing.be Forum Index -> Unpacking All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
 Copyright © 2023 BiW Reversing
 All trademarks and copyrights on this page are owned by their respective owners.
Powered By Geeklog 
Created this page in 0.90 seconds