[HELLP]Run matchserver with olly

[dacharles]

well im trying to run the matchserver with olly

it runs OK but when i try to Login with the client the MS crash >.<

somebody can help m with that?

 

[Wucas]

i dont understand what your trying to say here....

numba one why are you using the matchserver while your editing it with olly....

numba two what 3 matchservers have you tried to use (have they been already edited before?

numba three is your db in a condition to actually be used O.O

 

[dacharles]

[No message]

 

[Wucas]

theres probably an instability with ollydbg and matchserver, trying hooking onto it after a client is alraedy logged in then relog?

 

[Tman151]

I had this same problem, I had to hide ollydbg. Phant0m's ollydbg hider works perfect.

 

[dacharles]

ohh so is bcuz the matchserver detects a debugger D: nice Tman u can post the Hider pls *-*

 

[Wucas]

Phant0m Addon for Olly DBG

Plug-in for concealment OllyDbg (plugin with the driver). Helps from following methods of detection:

// driver - extremehide.sys

[+] NtQueryInformationProcess.
[+] SetUnhandledExceptionFilter.
[+] OpenProcess.
[+] Invalid Handle.
[+] NtSetInformationThread.
[+] RDTSC.
[+] NtYieldExecution.
[+] NtQueryObject.
[+] NtQuerySystemInformation.
[+] Windows hide.
[+] GetProcessTimes.
[+] NtSetContextThread.

// plugin - PhantOm.dll

[+] PEB BeingDebugged.
[+] PEB NtGlobalFlag.
[+] GetStartupInfo.
[+] Process Heaps.
[+] GetTickCount.
[!] Protect DRx.
[!] Hide DRx.
[!] Fake Windows version.
[!] Custom Handler.
[+] BlockInput

Whats new: - 1.20

[*] Added own handling of exception (C0000005).
[*] Added option for the title change of the main window.
[*] Added own handling of exception (OUTPUT_DEBUG_STRING_EVENT).
[*] int 3 at EP correctly removed.
[*] Added interception of BlockInput. (WinXP only)
[*] Added own handling of exception (C0000094).
[*] Added hiding of GetStartupInfo.
[*] Fixed bug with changing the options of the plugin.
[*] Added more defense of the driver from detection.

 

[dacharles]

ty very much i will test it TYYY