narfzort
03-25-2009, 07:03 PM
A new version of the IDAStealth plugin is available from http://newgre.net/idastealth. The new RDTSC emulation driver has an interesting feature: it can start with a random name, so tools cannot query for loaded drivers like rdtsc*, emu*, etc.