narfzort
March 25th, 2009, 18:03
A new version of the IDAStealth plugin is available from http://newgre.net/idastealth. The new RDTSC emulation driver has an interesting feature: it can start with a random name, so tools cannot query for loaded drivers like rdtsc*, emu*, etc.