I'm using the Hide Debugger plugin and set it to protect against TerminateProcess. Still, it terminates. Is there another way to protect against this?

Thanks.

the terminate process protection don´t work in XP sp2, only sp1.

Ricardo

I'll correct it in the future version

hmm, there are lots of ways to terminate processes under windows:
http://www.diamondcs.com.au/freeutilities/apt-techniques.php ("http://www.diamondcs.com.au/freeutilities/apt-techniques.php")

Ricardo: Good to know. thanks for sharing it.

Asterix: I'll be looking for it. Do you have the future version in the works?

1bitshort: Thanks for the link. So if I identify which method is being used should I be able to patch to prevent it?

yep. usually it's just TerminateProcess, but not always... might even be just sending window messages like WM_CLOSE/SC_CLOSE

can some1 post a link for hide debugger?
none of them ever work