Results 1 to 3 of 3

Thread: Probably a stupid question, but hey who knows...

  1. #1
    foxthree
    Guest

    Unhappy Probably a stupid question, but hey who knows...

    Fellow RCEs:

    I have been having this question for a long time (since I started working with NTICE). When we are able to load NTICE even after OS start (like for instance using "net start ntice") why isn't there a way to unload NTICE, such as say "net stop ntice". Is that because NTICE "messes" up your system so badly that only a reboot will unload the driver from the system?

    I have been scavenging info. about PM debuggers but still no idea why this is not possible. If you guys think I'll get the answer after further "scavenging", feel free to ignore this one...

    Signed,
    -- FoxThree
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    My guess would be that NTICE messes with the IDT (and other things) and then other drivers might mess with them too so NTICE can't restore thr original IDT when it's unloaded the chose not to make it " stopable", since if you can't restore itr to it's current state but remove the NTICE stuff it would make the system unstable... ummm hope that made any sense... but in short i guess it's because NTICE messes up your system so badly...

  3. #3
    tgodd
    Guest
    If Softice is able to manage the IDT, GDT, Page tables, etc., then it IS in fact able to reverse things and put them back to the current state.

    My opinion is that the NUMEGA and/or Compuware were just plain lazy.


    Regards,

    TGODD
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. stupid question about IDA
    By dreamweavermx in forum Tools of Our Trade (TOT) Messageboard
    Replies: 6
    Last Post: June 11th, 2009, 08:11
  2. I have a stupid question..
    By Woodmann in forum Off Topic
    Replies: 25
    Last Post: April 29th, 2006, 13:33
  3. its a stupid question but..
    By THEcB in forum OllyDbg Support Forums
    Replies: 2
    Last Post: October 22nd, 2005, 03:14
  4. a stupid question !
    By dreamweavermx in forum The Newbie Forum
    Replies: 1
    Last Post: August 10th, 2003, 03:31

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •