PDA

View Full Version : IsDebuggerPresent


Tom Smith
November 16th, 2004, 12:30
I downloaded the IsDebuggerPresent plugin for Ollydbg 1.10.

It shows up at the top menu when I run Ollydbg.

Exactly how do I use the plugin?

Do I choose, in the Plugins>IsDebuggerPresent drop down menu, Hide or Restore or Option?

Or is the plugin always "on".

I wish the thing came with instructions.

I have an "IsDebuggerPresent" call in the program I am debugging, and Ollydbg pauses and will not resume when I attach it.

I am a newbie, so if you respond, please keep is simple and clear.

-Tom
TomSmith3@hotmail.com

Lord_Looser
November 16th, 2004, 15:16
If “AutoHide” is deactivated:
start OllyDbg, debug application, hide...

much better plugin:
HideDebugger 1.2

Tom Smith
November 16th, 2004, 16:13
Can you be a little clearer?

You're saying to put a checkmark in the AutoHide box?

And that will hide my debugger from the program I am debugging?

How many milliseconds should I enter?

And what if their is another anti-debugger scheme in there, how will I know if the IsDebuggerPresent plugin worked or failed, if another anti-debugger scheme is in play?

Do you have a link for HideDebugger 1.2?

Does it work with Ollydbg?

-Tom Smith
Tom_Smith3@hotmail.com

Lord_Looser
November 17th, 2004, 00:34
OllyDbg plugin HideDebugger v1.2
http://cracklab.ru/f/files/_1144129978__HideDebugger1.2.1.rar
("http://cracklab.ru/f/files/_1144129978__HideDebugger1.2.1.rar
")
“This plugin allows to hide debugger from IsDebuggerPresent API function.“

rave
November 17th, 2004, 10:53
Lord_Looser

i m a newbie .i call IsDebuggerPresent() but n open the file in ollydbg but it didn't work

garryw
November 20th, 2004, 05:12
in what way is HideDebugger 1.2 a "much better plugin" ?, been using IsDebuggerPresent plugin for quite a while without problems.

Lord_Looser
November 21st, 2004, 01:28
Perhaps I should say, easier to use and more functional to hide debugger. A nice addition. Only my opinion.