Results 1 to 7 of 7

Thread: Hide Debugger fails to provide protection against Terminate Process

  1. #1
    mcnorth
    Guest

    Hide Debugger fails to provide protection against Terminate Process

    I'm using the Hide Debugger plugin and set it to protect against TerminateProcess. Still, it terminates. Is there another way to protect against this?

    Thanks.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2

    Hide Debugger fails to provide protection against Terminate Process

    the terminate process protection donĀ“t work in XP sp2, only sp1.

    Ricardo

  3. #3
    Asterix
    Guest

    Hide Debugger fails to provide protection against Terminate Process

    I'll correct it in the future version
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    1bitshort
    Guest

    Hide Debugger fails to provide protection against Terminate Process

    hmm, there are lots of ways to terminate processes under windows:
    http://www.diamondcs.com.au/freeutilities/apt-techniques.php
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    mcnorth
    Guest

    Hide Debugger fails to provide protection against Terminate Process

    Ricardo: Good to know. thanks for sharing it.

    Asterix: I'll be looking for it. Do you have the future version in the works?

    1bitshort: Thanks for the link. So if I identify which method is being used should I be able to patch to prevent it?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    1bitshort
    Guest

    Hide Debugger fails to provide protection against Terminate Process

    yep. usually it's just TerminateProcess, but not always... might even be just sending window messages like WM_CLOSE/SC_CLOSE
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #7
    dm47
    Guest

    Hide Debugger fails to provide protection against Terminate Process

    can some1 post a link for hide debugger?
    none of them ever work
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Any friend can provide IDA signatures: FLEXnet v11.6.0 for Windows i86?
    By joyung in forum Advanced Reversing and Programming
    Replies: 4
    Last Post: June 8th, 2011, 08:42
  2. Searching for Hide Debugger plugin to download !!!!
    By tim mactroy in forum OllyDbg Support Forums
    Replies: 3
    Last Post: December 29th, 2005, 03:20
  3. Can Someone Post a link For Hide Debugger that Actually works?
    By dm47 in forum OllyDbg Support Forums
    Replies: 4
    Last Post: September 23rd, 2005, 20:44
  4. Api Spy & Api Mon Terminate Process
    By Aquatic in forum The Newbie Forum
    Replies: 3
    Last Post: May 8th, 2003, 05:35
  5. If you can provide the URL, why not?
    By Solomon in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: January 21st, 2001, 20:20

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •