Exetools  

Go Back   Exetools > General > x64 OS
Reload this Page 64 bit drivers / process mangement
Register Forum Rules FAQ Calendar Mark Forums Read

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 08-01-2013, 16:32
mm10121991 mm10121991 is offline
VIP
  
Join Date: Feb 2011
Posts: 136
Rept. Given: 29
Rept. Rcvd 56 Times in 34 Posts
Thanks Given: 7
Thanks Rcvd at 24 Times in 13 Posts
mm10121991 Reputation: 58
Does the PatchGuard protect the IA32_SYSENTER_EIP msr ?
Reply With Quote
  #2  
Old 08-01-2013, 23:33
TheSwash
 
Posts: n/a
Quote:
Covertness: Changing the value of the IA32_SYSENTER_EIP MSR can be detected. For example, PatchGuard currently checks to see if the equivalent AMD64 MSR has been modified as a part of its polling checks.
Source

Regards!
Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Hybrid Mode Hybrid Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
FSFilter drivers in Windows 10 biorpg x64 OS 8 06-25-2020 18:33
Developing Drivers for 64-bit Git x64 OS 16 01-05-2013 12:13


All times are GMT +8. The time now is 19:58.

Aaron's homepage - Top

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )