View Single Post
  #12  
Old 08-19-2003, 21:38
ArC ArC is offline
VIP
 
Join Date: Jan 2003
Location: NTOSKRNL.EXE
Posts: 172
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 17 Times in 12 Posts
ArC Reputation: 1
That's strange.....

Every Xtreme-Protector app contains the
following things:
  • at least one section which is named XPROT (ok..the section can be renamed easily)
  • the message: "Cannot write Xprotector.vxd. Make sure that this file is not being used by another program
  • you can find: Xprotector.sys XPROTECTOR \\.\XPROTECTOR \\.\Global\XPROTECTOR
  • you can find some APIs for installing drivers.
  • You can find the text: "Xtreme-Protector Error Xtreme-Protector Cannot open XPROTECTOR.SYS driver. Please, make sure that you have administrator's permits the first time that you are going to run this program Cannot open XPROTECTOR.VXD driver. Make sure that XPROTECTOR.VXD is not open by another program Xprotector driver has been updated, you need to restart your computer to finish the installation of the driver. Do you want to restart your computer now?"

These messages are ALWAYS put into a Xprot
app no matter what protection options you
choose.

However, I couldn't find ANY of the things
mentioned above

I also bypassed the s-ice detection
by simply loading icedump.

That's neither possible with the first release
(1.0) nor with the current version (1.05)
(of Xtreme-Protector)

Xtreme-Protector does NOT allow you to turn
off debugger detection.

Sorry..but I'm a bit confused....

Last edited by ArC; 08-19-2003 at 21:52.
Reply With Quote