Debugger protection, boxedappsdk virtual process

VMProtect
1

Hi again,

Since I show in the email I received when I bought the product that you are promoting boxedappsdk you might be interested for this.

debugger protection is not working in a process created out of a virtual file created by boxedappsdk.

I attached vs2005 to the process with no problem at all. Also IsDebuggerRunning() returns FALSE.

I could use some tip on howm to correct this behavior

Regards,

George

2

Hi guys,

Is anybody going to look into this?

3

I am :slight_smile:
Sorry for the delay. Am I right that you bundled the protected file and the debugger detection doesn’t work in that bundled file when it is being executed?

4

Not exactly but kind of

First I use vmprotect to protect a process

Then I include the protected process as a resource in another process

At runtime the “father” process loads the protected processes’s data from resources and creates a virtual file using boxedappsdk. It then executes this virtual file (by calling createprocess API). The child process runs ok

If I attach vs2005 debugger to this child process the debugger attaches ok and the child process does not terminate with the specified message as it should.

5

any news?

6

We plan to improve the anti-attach tricks in next versions of VMProtect.

7

Ok I guess I will have to wait until the next release

Thanks