Hello there ,
I would like to know if the protection against debuggers is based only when the file is running.
Thanks,
Leo
Protection against debuggers?
Re: Protection against debuggers?
Hi Leonard,
You mean, would be debugger found if it will be attached to protected file while it is working?
The main purpose of anti-debugger feature is to avoid execution of protected file under debugger. I.e. while execution cracker should not find the point when the file is initialized but not yet executed. This because current debugger checkup tries to find a debugger only when the file is executing.
In most cases, it does not matter if you can or cannot attach protected process with debugger. This becase Enigma Protector does not check debugger when the file is executed. To check debugger always, you need to use anti-debugger plugins - they allows to check the debugger any time application is working.
Anyway, in some next release the new ability for anti-debugger feature will be added. It will check debugger always, not only at file start.
You mean, would be debugger found if it will be attached to protected file while it is working?
The main purpose of anti-debugger feature is to avoid execution of protected file under debugger. I.e. while execution cracker should not find the point when the file is initialized but not yet executed. This because current debugger checkup tries to find a debugger only when the file is executing.
In most cases, it does not matter if you can or cannot attach protected process with debugger. This becase Enigma Protector does not check debugger when the file is executed. To check debugger always, you need to use anti-debugger plugins - they allows to check the debugger any time application is working.
Anyway, in some next release the new ability for anti-debugger feature will be added. It will check debugger always, not only at file start.
Re: Protection against debuggers?
Thanks for your quickly reply .
My question was if the protected file is not running and is opened with olyydbg , the protection will do something or the protected file should be running to avoid the debugger.
I'm so excited to see the new release.
Any release date?
Thank you
My question was if the protected file is not running and is opened with olyydbg , the protection will do something or the protected file should be running to avoid the debugger.
I'm so excited to see the new release.
Any release date?
Thank you
Re: Protection against debuggers?
Yes, protected file should be run out of debugger, protection will no do something with the debugger (it is just impossible or very dangerous to do, again, due to antivirus false detections).
Regarding new version - unfortunately, can't tell you even approximate date yet...
You can use anti-debugger plugins anyway with the current version of Enigma! Just test them carefully, if they are working well with your file.
Regarding new version - unfortunately, can't tell you even approximate date yet...
You can use anti-debugger plugins anyway with the current version of Enigma! Just test them carefully, if they are working well with your file.
Re: Protection against debuggers?
Well..those who're cracking can open the file in any debugger and they can do " their job " .
Re: Protection against debuggers?
Mm.. what do you mean? They can do that with Anti-debugger feature + with the plugins?Leonard wrote:Well..those who're cracking can open the file in any debugger and they can do " their job " .
Re: Protection against debuggers?
Sorry maybe I misunderstood , so .
If they open my protected file via debugger it will work? I mean the anti-debugger will work?? .
Protected file must run and that's the only way of protecting from debugger
If they open my protected file via debugger it will work? I mean the anti-debugger will work?? .
Protected file must run and that's the only way of protecting from debugger
Re: Protection against debuggers?
If the protected file is opened under debugger then it surely will not work (of course, if you enabled the option Anti-Debugger checkup).