View Single Post
  #7  
Old 01-09-2008, 15:42
Magic_h2001 Magic_h2001 is offline
Friend
 
Join Date: Oct 2005
Posts: 45
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 8 Times in 8 Posts
Magic_h2001 Reputation: 0
Tools:
- Modified Olly (names, classes,exports,....)
- HideOD: all options checked and ZwQueryInformationProcess (method 2)

after bypassing <CreateProcessA> Fill with NOP <ResumeThread> API (very important) then continue unpacking....
Attached Files
File Type: rar SDProtector1.12.Unpackme.Magiced.rar (1.4 KB, 15 views)

Last edited by Magic_h2001; 01-09-2008 at 16:10.
Reply With Quote