Exetools  

Go Back   Exetools > General > x64 OS
Reload this Page Disable PatchGuard & Driver Signing
Register Forum Rules FAQ Calendar Mark Forums Read

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-07-2024, 21:25
Fyyre's Avatar
Fyyre Fyyre is offline
Fyyre
  
Join Date: Dec 2009
Location: 0°N 0°E / 0°N 0°E / 0; 0
Posts: 295
Rept. Given: 106
Rept. Rcvd 93 Times in 44 Posts
Thanks Given: 203
Thanks Rcvd at 397 Times in 130 Posts
Fyyre Reputation: 93
Quote:
Originally Posted by Gelip View Post
Yes, but Win7 must be activate or work only 30 day from fresh install OS. I test driver signing BeepXP:

Normal boot - digital signature error (service beepxp not running)
https://i.ibb.co/YpYgg7z/normal-boot.png
PatchGuard Disabled v3 - service beepxp running, driver works :):
https://i.ibb.co/XtvmbdG/patch-works.png
https://i.ibb.co/6Dj1vSz/UEFI.png

How test PatchGuard?
Do something Microsoft doesn't like such as modify the SSDT or Shadow SSDT. Better yet, I can send you some ancient source for a x64 process hider I made, that also does the trick.
__________________
Pax in vultu, bellum in corde.

--

https://github.com/Fyyre
Reply With Quote
The Following User Says Thank You to Fyyre For This Useful Post:
ahmadmansoor (06-09-2024)
  #2  
Old 06-09-2024, 01:26
ahmadmansoor's Avatar
ahmadmansoor ahmadmansoor is offline
Coder
  
Join Date: Feb 2006
Location: Syria
Posts: 1,047
Rept. Given: 517
Rept. Rcvd 374 Times in 142 Posts
Thanks Given: 380
Thanks Rcvd at 416 Times in 119 Posts
ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399 ahmadmansoor Reputation: 300-399
Quote:
Originally Posted by Fyyre View Post
Do something Microsoft doesn't like such as modify the SSDT or Shadow SSDT. Better yet, I can send you some ancient source for a x64 process hider I made, that also does the trick.
Maybe u can share it with all of us
Thanks
__________________
Ur Best Friend Ahmadmansoor
Always My Best Friend: Aaron & JMI & ZeNiX
Reply With Quote
  #3  
Old 06-09-2024, 04:19
Fyyre's Avatar
Fyyre Fyyre is offline
Fyyre
  
Join Date: Dec 2009
Location: 0°N 0°E / 0°N 0°E / 0; 0
Posts: 295
Rept. Given: 106
Rept. Rcvd 93 Times in 44 Posts
Thanks Given: 203
Thanks Rcvd at 397 Times in 130 Posts
Fyyre Reputation: 93
Quote:
Originally Posted by ahmadmansoor View Post
Maybe u can share it with all of us :D
Thanks
Certainly, I will :) let me clean it up and see that it still loads
__________________
Pax in vultu, bellum in corde.

--

https://github.com/Fyyre
Reply With Quote
The Following User Says Thank You to Fyyre For This Useful Post:
ahmadmansoor (06-10-2024)
  #4  
Old 06-16-2024, 04:53
Gelip Gelip is offline
Friend
  
Join Date: Jun 2022
Posts: 8
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
Gelip Reputation: 0
Quote:
Originally Posted by Fyyre View Post
Do something Microsoft doesn't like such as modify the SSDT or Shadow SSDT. Better yet, I can send you some ancient source for a x64 process hider I made, that also does the trick.
Yes, please.
Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Hybrid Mode Hybrid Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Signing a Windows Kernel driver without using Microsoft Stingered General Discussion 21 02-17-2023 22:09
Universal PatchGuard and Driver Signature Enforcement Disable Fyyre x64 OS 5 06-20-2022 14:12
Driver Signing on x64 Windows _MAX_ x64 OS 7 10-22-2012 15:47
Defeating patchguard and 64bit kernel-mode protections chaboyd General Discussion 1 02-05-2006 07:36


All times are GMT +8. The time now is 17:30.

Aaron's homepage - Top

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )