Plug-in for concealment OllyDbg (plugin with the driver). Helps from following methods of detection:
// driver - extremehide.sys
[+] NtQueryInformationProcess.
[+] SetUnhandledExceptionFilter.
[+] OpenProcess.
[+] Invalid Handle.
[+] NtSetInformationThread.
[+] RDTSC.
[+] NtYieldExecution.
[+] NtQueryObject.
[+] NtQuerySystemInformation.
[+] Windows hide.
[+] GetProcessTimes.
[+] NtSetContextThread.
// plugin - PhantOm.dll
[+] PEB BeingDebugged.
[+] PEB NtGlobalFlag.
[+] GetStartupInfo.
[+] Process Heaps.
[+] GetTickCount.
[!] Protect DRx.
[!] Hide DRx.
[!] Fake Windows version.
[!] Custom Handler.
[+] BlockInput
http://vip-file.com/download/8d00af885300/PhantOm-Plugin-v1.54.7z.html
'Hacking' 카테고리의 다른 글
| ASPROTECT UNPACKER (0) | 2009.01.26 |
|---|---|
| Kernel Detective v1.2 (0) | 2009.01.26 |
| PhantOm Plugin 1.54 (0) | 2009.01.26 |
| OllyMoreMenu-v1.3c (0) | 2009.01.26 |
| DeFixed_Edition_v2 (0) | 2009.01.24 |
