PDA

View Full Version : IsDebuggerPresent


Tom Smith
11-16-2004, 11:30 AM
I downloaded the IsDebuggerPresent plugin for Ollydbg 1.10.

It shows up at the top menu when I run Ollydbg.

Exactly how do I use the plugin?

Do I choose, in the Plugins>IsDebuggerPresent drop down menu, Hide or Restore or Option?

Or is the plugin always "on".

I wish the thing came with instructions.

I have an "IsDebuggerPresent" call in the program I am debugging, and Ollydbg pauses and will not resume when I attach it.

I am a newbie, so if you respond, please keep is simple and clear.

-Tom
TomSmith3@hotmail.com

Lord_Looser
11-16-2004, 02:16 PM
If “AutoHide” is deactivated:
start OllyDbg, debug application, hide...

much better plugin:
HideDebugger 1.2

Tom Smith
11-16-2004, 03:13 PM
Can you be a little clearer?

You're saying to put a checkmark in the AutoHide box?

And that will hide my debugger from the program I am debugging?

How many milliseconds should I enter?

And what if their is another anti-debugger scheme in there, how will I know if the IsDebuggerPresent plugin worked or failed, if another anti-debugger scheme is in play?

Do you have a link for HideDebugger 1.2?

Does it work with Ollydbg?

-Tom Smith
Tom_Smith3@hotmail.com

Lord_Looser
11-16-2004, 11:34 PM
OllyDbg plugin HideDebugger v1.2
http://cracklab.ru/f/files/_1144129978__HideDebugger1.2.1.rar
“This plugin allows to hide debugger from IsDebuggerPresent API function.“

rave
11-17-2004, 09:53 AM
Lord_Looser

i m a newbie .i call IsDebuggerPresent() but n open the file in ollydbg but it didn't work

garryw
11-20-2004, 04:12 AM
in what way is HideDebugger 1.2 a "much better plugin" ?, been using IsDebuggerPresent plugin for quite a while without problems.

Lord_Looser
11-21-2004, 12:28 AM
Perhaps I should say, easier to use and more functional to hide debugger. A nice addition. Only my opinion.