Detecting Softice in W9x and NT (W2K - dunno) (Views: 27)
Problem/Question/Abstract: Detecting Softice in W9x and NT (W2K - dunno) Answer: The Cracker can still defeat this protection by using FrogIce, nothing can stop SoftIce hehe. Anyway here is sum code you just instert into your Applcation. //SoftIce in W9x function IsSoftIce95Loaded: boolean; var hFile: Thandle; begin result := false; hFile := CreateFileA('\.SICE', GENERIC_READ or GENERIC_WRITE, FILE_SHARE_READ or FILE_SHARE_WRITE, nil, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0); if (hFile <> INVALID_HANDLE_VALUE) then begin CloseHandle(hFile); result := TRUE; end; end; // SoftIce in NT OS function IsSoftIceNTLoaded: boolean; var hFile: Thandle; begin result := false; hFile := CreateFileA('\.NTICE', GENERIC_READ or GENERIC_WRITE, FILE_SHARE_READ or FILE_SHARE_WRITE, nil, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0); if (hFile <> INVALID_HANDLE_VALUE) then begin CloseHandle(hFile); result := TRUE; end; end; //to detect it if IsSoftIce95Loaded or IsSoftIceNTLoaded then Application.Terminate {if you insert a "Nag" (Message telling him he uses SoftIce) then a amatuer cracker w'll find this protection in notime} //bestway of using this thing is in "project Unit" |