Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 02-03-2018, 12:46
Stingered Stingered is offline
Banned User
 
Join Date: Dec 2017
Posts: 257
Rept. Given: 0
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 296
Thanks Rcvd at 181 Times in 90 Posts
Stingered Reputation: 3
Quote:
Originally Posted by Aesculapius View Post
change windows build number to a random number and you should be good to go. VMP detects debugger based upon hardcoded syscall numbers according to windows build number. If build number is not supported then VMP goes back to old detection methods.


Nice little tidbit!

More here:

https://lifeinhex.com/tag/vmprotect/
Reply With Quote
  #2  
Old 02-08-2018, 00:37
bolo2002 bolo2002 is offline
VIP
 
Join Date: Apr 2002
Posts: 703
Rept. Given: 112
Rept. Rcvd 14 Times in 13 Posts
Thanks Given: 281
Thanks Rcvd at 262 Times in 168 Posts
bolo2002 Reputation: 14
[QUOTE=bolo2002;112161]
Quote:
Originally Posted by Stingered View Post


Nice little tidbit!
+Aesculapius,old school and still alive,respect.
__________________
I like this forum!
Reply With Quote
The Following User Says Thank You to bolo2002 For This Useful Post:
Aesculapius (02-08-2018)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Debugger detected StilLearning General Discussion 4 03-06-2004 08:32


All times are GMT +8. The time now is 21:51.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )