SDProtector searches for following strings (in Password Reminder):
Quote:
SYSTEM\CurrentControlSet\Services\IceExt
OLLYDBG
UKILLOD
FLYODBG
DEBUG_API_SPY_WND_CLASS
OLLYDBG -UKILLOD -
IMPORT RECON STRUCTOR
DFCG SUPERVER IMPORT RECONSTRUCTOR
[ LORDPE DELUXE ]
DFCG LORDPE
FILE MONITOR - SYSINTERNALS
REGISTRY MONITOR - SYSINTERNALS
FLYODBG -
AUTO DEBUG FOR WINDOWS
MDIClient
ACPU
ACPUASM
ACPUDUMP
ACPUSTACK
ACPUINFO
ACPUREG
TCPU
TCPUASM
TCPUDUMP
TCPUSTACK
TCPUINFO
TCPUREG
|
I renamed OllyDbg Class and file name, and changed anything contains OLLYDBG and above mentioned strings, like pugins. But no success...
How does this damn protector detects OllyDbg and its Hardware BPs?
