Makin - Reveal Anti-Debugging Tricks

makin is to make initial malware assessment little bit easier, It helps to reveal a debugger detection techniques used by a sample. Supports x64 and x86 How does it work? makin opens a sample as a debuggee and injects asho.dll, asho.dll hooks several functions at ntdll.dll library and after...

微点主动防御mp110013.sys驱动NtSystemDebugControl本地拒绝服务漏洞

微点主动防御软件是第三代反病毒软件。 微点主动防御软件所使用的mp110013.sys驱动没有正确处理NtSystemDebugControl内核API函数 WriteVirtual/WritePhysical中的Address/Buffer成员，本地用户可以通过运行恶意程序导致内核崩溃。 Micropoint Proactive Defense 100323.1.2.10581.0278.r1 厂商补丁： Micropoint ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.micropoint.com.cn/...