program detect debugger attachment

[kbot]

when ever i try attaching ollydbg and other debuggers to this program , it will detect the debugger instantly (... well after i press f9 to resume the process when olly breaks on attaching)... any ideas ? also this is not the work of IsDebuggerPresent because i used the hide debugger plugin + i made a hook on that api to return 0 when testing other debuggers on it

[yahia]

kbot : You didn't give a link to that program !!
do that so we may help you unpacking it a little if this is your purpose .
Important : IsDebuggerPresent is not the only way that detects if the DEBUGGER loaded or not !!

Regards .

[voodoo]

Important : IsDebuggerPresent is not the only way that detects if the DEBUGGER loaded or not !!

can explain more?? what are the other ways???

[Anonymous]

title: "My own tricks to detect OllyDbg" by +Pumqara

http://pe-lib.sourceforge.net/pumqara/html/code_protection/Detecting%2 0OllyDbg/DetectOllyDbg+Pum.htm (http://pe-lib.sourceforge.net/pumqara/html/code_protection/Detecting%20OllyDbg/DetectOllyDbg+Pum.htm)