Results 1 to 6 of 6

Thread: DS 2.7 Patch correction. Sorry.

  1. #1
    : Code Injector : nikolatesla20's Avatar
    Join Date
    Apr 2002
    Location
    :ether:
    Posts
    815

    DS 2.7 Patch correction. Sorry.

    Foxthree pointed out that he no longer got the "Xhandledexception" message in his softICE logs - at least I didnt get it.

    This brought to my attention that I had missed something, so I ran +Splaj's detector and lo behold it detected thru "Int 3 on Kernel32!UnhandledExceptionFilter".

    I've removed the UnhandledExceptionFilter reference now, and it's clean (Still, except for int 1).

    Get the fix here.

    http://www.woodmann.net/forum/showthread.php?s=&threadid=4031

    or Here as an attachment


    My apologies to everyone who already downloaded.

    Speaking of Int 1 detection, couldn't you just write a SI macro that increments the EIP to the right location before continuing...works on evaluator's modifed version of ^Daemon^'s detector. Perhaps would work reliably?

    -nt20

  2. #2
    pLayAr
    Guest

    still

    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter
    TRACER: Entering DriverEntry
    TRACER: Initialisation done...
    TRACER: Unloaded
    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter
    kernel32!ZnhandledExceptionFilter


    ???
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    : Code Injector : nikolatesla20's Avatar
    Join Date
    Apr 2002
    Location
    :ether:
    Posts
    815

    ya I know.

    I wouldnt worry about it. The whole point is to hide SI....nobody said it would work 100% like normal.

    You can change the name back if you want to and it wont do that anymore. If you encounter a program that checks for it, you can always change it again.

    Dont forget, if you are modifying a system driver you need to correct the checksum after you mod it. Use LordPE.


    -nt20

  4. #4
    foxthree
    Guest

    "no longer got" ???

    Hi Tesla:

    If you refer to my earlier post, I said I did get the "Unhandled Exception Handler" strings in the log window with 2.6 anti-detect patch and that I would test your patch with 2.7 and then let you know. May be typo????

    Anywayz, I got caught up in something and couldn't test it but Player's logs shows same stuff! May be not a "problem" per se but just annoying

    Signed,
    -- FoxThree
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    nickman
    Guest

    Question

    @nikolatesla20: Thanks for your job, but I have a problem with that In any situation under 2k I could not manage to make sice 4.2.7 menu visible but it is in there same problem with 4.2.6 and your 4.2.6 patch...in unpatched mode there is no problem. I guess it is related to NTICE.SYS, thanks
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    : Code Injector : nikolatesla20's Avatar
    Join Date
    Apr 2002
    Location
    :ether:
    Posts
    815
    um, what do you mean "softice menu" ?

    Do you mean the actual softice screen?


    If you mean the actual screen, make sure you are patching all 3 files included in the zip. The SoftICE video driver gets a name change, so ntice.sys need to also know the new name to work.



    -nt20

Similar Threads

  1. Patch a program in memory
    By techne in forum The Newbie Forum
    Replies: 21
    Last Post: January 13th, 2014, 03:31
  2. Patch Generator
    By peterg70 in forum Tools of Our Trade (TOT) Messageboard
    Replies: 4
    Last Post: February 17th, 2013, 16:38
  3. MS Patch diffing process
    By skippyV in forum The Newbie Forum
    Replies: 2
    Last Post: April 11th, 2011, 08:45
  4. Need Help Editing A Patch File
    By Animatrix in forum The Newbie Forum
    Replies: 6
    Last Post: June 26th, 2010, 21:40
  5. CRC correction
    By cscat in forum The Newbie Forum
    Replies: 8
    Last Post: September 23rd, 2008, 16:56

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •