Results 1 to 2 of 2

Thread: IDA: Attach to Process -> Menu deactivated

  1. #1

    Angry IDA: Attach to Process -> Menu deactivated

    Hey Guys

    I have a harcore protected APP. When i attach to process a menuitem will be deactivated. I use IDAStealth, but when I am activate the Option "Disable NTTerminateTread,..." the App crash.
    Somebody known keywords to find the Memcheck??
    I seems to be, that the APP known, if a Debugger inject a DLL. How the APP will check this? Get Tickcount is also activated by IdaStealth.

    Thanks for your anwers.

  2. #2
    Search in google for "anti attach debugger". I remember there were about 2 methods over at OpenRCE, and a couple more at nezumi's blog. nezumi's blog is :

    Code:
    http://nezumi-lab.org/
    Externalist

Similar Threads

  1. Unable to Attach to Process
    By Anonymous in forum OllyDbg Support Forums
    Replies: 11
    Last Post: October 1st, 2003, 19:33
  2. Attach
    By Anonymous in forum OllyDbg Support Forums
    Replies: 6
    Last Post: February 19th, 2003, 16:24
  3. Menu resource ??
    By crUsAdEr in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: March 29th, 2002, 10:15
  4. Menu Enabling Project
    By Kayaker in forum Mini Project Area
    Replies: 35
    Last Post: March 8th, 2001, 00:54
  5. Menu Reversing Project
    By MaTRiX_2k in forum Mini Project Area
    Replies: 2
    Last Post: January 9th, 2001, 15:12

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •