Hook BeingDebuggedFlag set code (PEB) for Windows XP SP2 ntoskrnl.exe(5.1.2600.3093)
build AADEBUG.SYS and AADEBUG.EXE put them into the same directory lanch EXE --- menu --------- 0: End 1: Add process 2: Delete process > ------------------ 0 <-- unload 1 <-- add process name like iexplorer.exe ( "*" all process ) 2 <-- delete added process
