![]() |
|
|
|
#1
|
|||
|
|||
|
Regarding hiding from VMProtect
whats is the set of options need to be used? here is a sample app protected nicely by vmp and I fail to get the correct set of options on OllyExt using 2.01 release of Olly it is either file corrupted or debugger detected http://www.sendspace.com/file/cdq1ga thanks |
| The Following User Gave Reputation+1 to sendersu For This Useful Post: | ||
Conquest (10-12-2013) | ||
|
#2
|
||||
|
||||
|
I've just tried the binary and it's running without getting detected. You need the following protections:
- IsDebuggerPresent - CheckRemoteDebuggerPresent - CloseHandle - ProcessDebugFlags - NtSetContextThread - Caption Change Please check that no other debugger is installed, and the only plugin is OllyExt. Some plugins are interfering with my one. Quote:
|
![]() |
| Tags |
| anti-anti-debug, anti-debug, ollydbg, ollyext, plugin |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| DEF plugin for OllyDbg 2.XX | wilson bibe | Community Tools | 2 | 07-22-2014 09:01 |