-
-
[转帖]IceStealth 1.70 by Daniel Steinhäußer
-
发表于:
2010-6-13 21:17
3305
-
[转帖]IceStealth 1.70 by Daniel Steinhäußer
IceStealth 1.70 by Daniel Steinhäußer
IceStealth is a SoftICE hiding tool, that should protect from:
CreateFileA, CreateFileW, NtCreateFile, also nmtrans.dll wont find SoftICE with these methods
NtQueryDirectoryObject
NtQueryObject
OpenServiceA, OpenServiceW, EnumServicesStatusA,EnumServicesStatusW,EnumServicesStatusExA, EnumServicesStatusExW
UnhandledExceptionFilter (2 Options)
SEH BPM Protection
BPM Protection
NtQuerySystemInformation
int 41 killed + DPL 0
int 1 DPL 0
Basic Registry Protection (if ever needed)
(RegOpenKeyExA, RegOpenKeyExW, RegOpenKeyA, RegOpenKeyW)
SaveDisk Protection
关闭 ESET NOD32
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)