Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 04-25-2003, 05:36
Lindwurm
 
Posts: n/a
Hide SoftIce under XP

Hi there,
is there anyone who can help me with a tool which hides SoftIce from being detected by an anti-debugging routine.
Important: I'm using WinXP with NuMega Driver Studio 2.6 and SoftIce, so FrogsIce is not working and I have no luck with IceExt.
I tried OllyDbg 1.09b instead as a different Debugger but this tools is identified by the exe as well.
Maybe there are other hints to work around this anti-debug. I'm working on web2date 2.0 (Data Becker).

Thanx
Lindwurm
Reply With Quote
  #2  
Old 04-25-2003, 06:39
asterix asterix is offline
Friend
 
Join Date: Feb 2003
Posts: 98
Rept. Given: 1
Rept. Rcvd 4 Times in 1 Post
Thanks Given: 0
Thanks Rcvd at 4 Times in 4 Posts
asterix Reputation: 4
Talking

Look this: hxxp://stenri.pisem.net/IceExt025.zip
Probably you need to update the DS2.6 on DS2.7.
Or to use win98+icedump 6.026.

Last edited by asterix; 04-26-2003 at 05:31.
Reply With Quote
  #3  
Old 04-25-2003, 14:43
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 96 Times in 94 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
You will find good information at the RCE messageboard. There have been several patches offered for hidding Softice and for making Softice work with WinXP.

We are having some issues with our backup at the moment so the search function is not working very well at the moment (counters have not been updated) but hope to have these issues resolved shortly.

Most of the patches are for D.S. 2.7. These threads deal with the issue: [remember to change "hxxp" to "http" in your browser.

hxxp://www.woodmann.com/upload/showthread.php?threadid=4679

hxxp://www.woodmann.com/upload/showthread.php?threadid=4636

and

hxxp://www.woodmann.com/upload/showthread.php?threadid=4031

would be a good start.

Also there is a patch for attempting to get D.S. 2.6 to break, found at

hxxp://www.woodmann.com/upload/showthread.php?threadid=4701

Generally reading through the Tools of the Trade there would lead you to many useful threads until the search function is straightened out.

Regards.
__________________
JMI
Reply With Quote
  #4  
Old 04-26-2003, 02:08
banshee
 
Posts: n/a
JMI, you didn't notice the above CLICKABLE link
Reply With Quote
  #5  
Old 04-26-2003, 03:10
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 96 Times in 94 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
No excuse SIR. Omission corrected, SIR.

Regards.
__________________
JMI
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
how hide softice under w2k or xp the_beginner General Discussion 3 09-06-2004 20:51


All times are GMT +8. The time now is 23:49.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )