how can I hide my ollydbg1.1 under win98?
can someone help me
解决方法有待讨论:
you can try renaming OLLYDBG.EXE to something else ( I use onlydbg.exe). Of course you then have to change the references to ollydbg.exe inside all the plugins you are using to the new name but that's fairly easy to do using a hex editor.
Hope it helps.
by:Belisarious
1.The first, "Hide", hooks th IsDebuggerPresent API and makes it unuseful
against debuggers. The Armadillo software protection system is owned by
this trick ! After having hidden your debuggers, you can restore the
first verion of the API by re-clicking the button, which caption had
changed to "Un-Hide".
2.The second button enables you to activate breakpoints on Windows APIs in
OllyDbg under 9x systems, thing which was impossible. Caution, it makes your
Kernel32 in memory WRITEABLE, so a simple line of code can kill your most
basic Windows functions, until next reboot.
After having set breakpoints with OllyDBG, if you are not sure your Kernel
is clean, you can fix all the APIs's first byte by clicking "Fix". After that a
messagebox appears, asking you if you want to COMPLETELY clean you Kernel.
If you answer YES, you will be able to execute ALL applications, the
no-imports ones too.
If you answer NO, you will be able to re-fix your Kernel as you want, when
you want, until you click YES.
All these tricks work, even if you close this tool. It detects if you have the bps enabled or IsDebuggerPresent hooked, and inits itself, following the
different cases.
