Log in

View Full Version : isdebuggerpresent


Systikk
October 14th, 2005, 10:28
Can anybody help or explain what needs to be done to Find and Disable isdebuggerpresent?

blabberer
October 14th, 2005, 11:55
you mean you want to do it manually without using the plugins that are availble for it
click in cpu window and hit ctrl+g type IsDebuggerPresnt (case sensitive)
and hit enter you will land in kernel32.dll api code
change the code to always return 0

or usingcommandline plugin type
set [byte ptr fs:[0x30]+0x02] == 0

or easy and simple way is to find the isdebuggerpresnt plugin by sv (look at stuph link in top) and tell it to hide