#1
|
|||
|
|||
Hide SoftIce under XP
Hi there,
is there anyone who can help me with a tool which hides SoftIce from being detected by an anti-debugging routine. Important: I'm using WinXP with NuMega Driver Studio 2.6 and SoftIce, so FrogsIce is not working and I have no luck with IceExt. I tried OllyDbg 1.09b instead as a different Debugger but this tools is identified by the exe as well. Maybe there are other hints to work around this anti-debug. I'm working on web2date 2.0 (Data Becker). Thanx Lindwurm |
#2
|
|||
|
|||
Look this: hxxp://stenri.pisem.net/IceExt025.zip
Probably you need to update the DS2.6 on DS2.7. Or to use win98+icedump 6.026. Last edited by asterix; 04-26-2003 at 05:31. |
#3
|
|||
|
|||
You will find good information at the RCE messageboard. There have been several patches offered for hidding Softice and for making Softice work with WinXP.
We are having some issues with our backup at the moment so the search function is not working very well at the moment (counters have not been updated) but hope to have these issues resolved shortly. Most of the patches are for D.S. 2.7. These threads deal with the issue: [remember to change "hxxp" to "http" in your browser. hxxp://www.woodmann.com/upload/showthread.php?threadid=4679 hxxp://www.woodmann.com/upload/showthread.php?threadid=4636 and hxxp://www.woodmann.com/upload/showthread.php?threadid=4031 would be a good start. Also there is a patch for attempting to get D.S. 2.6 to break, found at hxxp://www.woodmann.com/upload/showthread.php?threadid=4701 Generally reading through the Tools of the Trade there would lead you to many useful threads until the search function is straightened out. Regards.
__________________
JMI |
#4
|
|||
|
|||
JMI, you didn't notice the above CLICKABLE link
|
#5
|
|||
|
|||
No excuse SIR. Omission corrected, SIR.
Regards.
__________________
JMI |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
how hide softice under w2k or xp | the_beginner | General Discussion | 3 | 09-06-2004 20:51 |