Hide name from proceslist

Post here messages if you have any problems with working of Enigma Protector
Post Reply
xwordx
Posts: 4
Joined: Wed Feb 20, 2013 5:40 am

Hide name from proceslist

Post by xwordx »

Hello, i have a problem. I enable plugin hideprocess and compile, but when I run protected exe, his name is in proceslist.... Some ideam whas wrong?? How to do taht?
Thank you
Enigma
Site Admin
Posts: 3085
Joined: Wed Aug 20, 2008 2:24 pm

Re: Hide name from proceslist

Post by Enigma »

Hi xwordx,

hide process plugin does not hide the process from task manager, it hides it from debugger. So in process list you will always see the correct name.
xwordx
Posts: 4
Joined: Wed Feb 20, 2013 5:40 am

Re: Hide name from proceslist

Post by xwordx »

hmhm, because in many dll injectors and cheats you must select running proces from "task manager inside cheat".
Is some way, how to hide proces over enigma ?
Enigma
Site Admin
Posts: 3085
Joined: Wed Aug 20, 2008 2:24 pm

Re: Hide name from proceslist

Post by Enigma »

The game usually contains from two executables, launcher and the game. You may protect the launcher and add the game's exe into Virtual Box - Files tree. Then you will have to enable all options on Virtual Box - Options panel.
After running, the game process will be named not same as it's file name. Check it and you will see.

But this is not correct way to fight with injectors and so. There are other methods that allows to avoid injection, very rare people use it, because it is little complex, but it allows to fix all problems almost forever.
To implement such options, you have to know what these injected dll do, maybe if you have sources of these dlls, I could show you an example.
xwordx
Posts: 4
Joined: Wed Feb 20, 2013 5:40 am

Re: Hide name from proceslist

Post by xwordx »

hm, its problem that i dont know what injector do in my exe
I restrict all possible injectors in checking running proces, but is possible that somebody has no public.
I know, that is possible hide proces from proceslist and I am looking for how to do it.
It solve all problems
Enigma
Site Admin
Posts: 3085
Joined: Wed Aug 20, 2008 2:24 pm

Re: Hide name from proceslist

Post by Enigma »

It's impossible to hide the process at all, at least without using special drivers. So wish you a good luck for this solution.
xwordx
Posts: 4
Joined: Wed Feb 20, 2013 5:40 am

Re: Hide name from proceslist

Post by xwordx »

Ok, that which metod (plugins) is possible to use in Enigma to restrict dll injection ?
I dont use launcher, only exe
thank you
Enigma
Site Admin
Posts: 3085
Joined: Wed Aug 20, 2008 2:24 pm

Re: Hide name from proceslist

Post by Enigma »

You should use code virtualization.

When the dll is being injected, it writes something inside the game code. Using code virtualization, we can hide the original code with virtualized, that can't be modified, at least so quickly and easy as original.

But you should know exactly, what code the injected dll modifies. You should know the address of this code. If you know it, let me know, and attach non protected exe here, I will show you next steps.
Leonard
Posts: 15
Joined: Sat Jan 07, 2012 11:07 am

Re: Hide name from proceslist

Post by Leonard »

There's a chance to "hide" the process .

I've done this in C# long time ago the fact is that you can make your application 'invisible' by 'removing' the application from taskmanager after it was added and stop refreshing so it won't be added again in tmanager.
Enigma
Site Admin
Posts: 3085
Joined: Wed Aug 20, 2008 2:24 pm

Re: Hide name from proceslist

Post by Enigma »

I doubt it is possible, or it will handle only particular cases. For example, if you run program in limited account but task manager in admin account, then nothing you can do to hide itself from the task manager. Game just will not be able to see TM process to affect it somehow.

Anyway, show me the code that does it, probably we can make a plugin for people who want to use it anyway.
Post Reply