|
are you playng with SDprotector?
it creates threads with 'inherited' parameter & SuspendProcess can't
suspend them..
on this case, seems you are creating non-debugged process, ye?
but in case of DEBUG-flag, you need to awoid detection via ZwQueryInform..
**
i wrote this in your thread @ Woodman, but now will paste here, in case..
**
|