+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] [Source] AntII (Collection of process protection techniques) (/showthread.php?tid=5764955)
Pages: Pages
1
2
[Source] AntII (Collection of process protection techniques) - gigajew - Dec 8, 2017
This is Anti 2.0 or AntII, usage: new AntII().Start(); before any other code, blocks debuggers, emulators and injected dll's to some extent. This version should be more stable than the previous one. It seems to detect dnspy.
RE: [Source] AntII (Collection of process protection techniques) - Dendimirror - Dec 9, 2017
What version .NET does it require?
RE: [Source] AntII (Collection of process protection techniques) - gigajew - Dec 9, 2017
(Dec 9, 2017 04:38 AM)Dendimirror Wrote: What version .NET does it require?
Version 4.0
RE: [Source] AntII (Collection of process protection techniques) - Ninja - Dec 9, 2017
You create multiple loops with thread.sleep calls. Why not just have 1 loop? Re-use code fam.
RE: [Source] AntII (Collection of process protection techniques) - EZLib - Dec 17, 2017
C# 7.0 required is the only thing that kills my VS 2015.
RE: [Source] AntII (Collection of process protection techniques) - gigajew - Dec 17, 2017
(Dec 17, 2017 01:29 AM)x_Desire Wrote: C# 7.0 required is the only thing that kills my VS 2015.
It's easily fixed you know, just define the variable before the call instead of in the call
RE: [Source] AntII (Collection of process protection techniques) - chrizator - Dec 17, 2017
Thank you very much, sir! This is some interesting code to have a look at.
RE: [Source] AntII (Collection of process protection techniques) - EZLib - Dec 17, 2017
My application is going in "break mode" when I start this?..
RE: [Source] AntII (Collection of process protection techniques) - gigajew - Dec 17, 2017
(Dec 17, 2017 03:18 PM)x_Desire Wrote: My application is going in "break mode" when I start this?..
Are you debugging it? It detects debuggers. Here's a version that may work for you in debug environments and old C# language version:
Spoiler (Click to View)
RE: [Source] AntII (Collection of process protection techniques) - EZLib - Dec 17, 2017
(Dec 17, 2017 04:46 PM)gigajew Wrote: Are you debugging it? It detects debuggers
I was debugging it and then I went and opened it without VS and it crashed.
RE: [Source] AntII (Collection of process protection techniques) - gigajew - Dec 17, 2017
(Dec 17, 2017 04:47 PM)x_Desire Wrote: I was debugging it and then I went and opened it without VS and it crashed.
Are you targeting .NET Framework 4.0?
RE: [Source] AntII (Collection of process protection techniques) - EZLib - Dec 17, 2017
(Dec 17, 2017 04:50 PM)gigajew Wrote: Are you targeting .NET Framework 4.0?
Indeed I am.
To be more precise, the exception throws "no source code available". I've also tried your 1.0 version of this class and it doesn't write anything to the console and I'm not debugging it, I'm just launching it from building the solution.
RE: [Source] AntII (Collection of process protection techniques) - whocaresyahu - Feb 16, 2019
where is the .dll lib or source code, I cant find...
RE: [Source] AntII (Collection of process protection techniques) - charparodar - Feb 20, 2019
(Feb 16, 2019 06:44 PM)whocaresyahu Wrote: where is the .dll lib or source code, I cant find...
the source code is on the topic, embedded from pastebin
RE: [Source] AntII (Collection of process protection techniques) - whocaresyahu - Mar 3, 2019
(Feb 20, 2019 02:45 PM)charparodar Wrote: the source code is on the topic, embedded from pastebin
can u send me the link, I cant see 😧