Log in

View Full Version : SVK-Protector


bff70000
February 28th, 2005, 18:19
hi
how to hide olly from SVK-Protector?

hosiminh
March 1st, 2005, 02:44
Load SVKP packed program into Ollydbg. Press F7 9 times:

00504026 /75 67 JNZ SHORT Tech2.0050408F

Make sure this jump is NOt taken 'coz otherwise it will bring up NastyNagScreen: Debugger_detected and API kernel32.ExitProcess .

BeatriX
March 1st, 2005, 04:24
"press F7 9 times" !! hmm, sorry hosiminh, but it is much more interesting if you explain what happen in fact... is it IsDebuggerPresent ?

hosiminh
March 1st, 2005, 05:25
Take a look on .svkp Section in Memory map while program is running in memory and you will see what i mean.

Of course it use IsDebuggerPresent.