DarkInjection Posted June 23, 2014 Share Posted June 23, 2014 titanhide seems to not work in my windows 7 64 i used TitanHideTest.exe to test the functionality but it always return 0 in values also themida detect my program ProcessDebugFlags: 0ProcessDebugPort: 0ProcessDebugObjectHandle: 0NtQueryObject: 0CheckSystemDebugger: 0CheckNtClose: 0i used fyrre's no patchguard v3 Link to comment
mrexodia Posted June 24, 2014 Author Share Posted June 24, 2014 @DarkInjection, 0 means not detected. So if you're running TitanHide under a debugger, it works perfectly fine Greetings Link to comment
DarkInjection Posted June 24, 2014 Share Posted June 24, 2014 you are right i misunderstood it thnx 1 Link to comment
kgh0701 Posted July 18, 2014 Share Posted July 18, 2014 (edited) Hello , I have this antivirus warning . I just downloaded from Mr.eXodia ' github . What is wrong or antivirus ' mistake ? Edited July 18, 2014 by kgh0701 Link to comment
mrexodia Posted July 18, 2014 Author Share Posted July 18, 2014 It's 100% a false-positive (programs installing services are dangerous, because they could install rootkits). If you don't trust the file, you can compile it yourself (the source is available). Greetings Link to comment
kgh0701 Posted July 18, 2014 Share Posted July 18, 2014 (edited) thanks. Edited July 19, 2014 by kgh0701 Link to comment
kgh0701 Posted July 20, 2014 Share Posted July 20, 2014 TitanHide doesnot support multiple hide ? I need to hide debugger for 2 processes. But it seeks like it doesnot work Link to comment
mrexodia Posted July 20, 2014 Author Share Posted July 20, 2014 @kgh0701: You can use TitanHideGUI to hide the debugger from any PID you want. Greetings Link to comment
serseri_1453 Posted August 15, 2014 Share Posted August 15, 2014 Hello Mr. eXoDia titanhide PcGuard the support? download links are shared in "Download repository" link I build? all the places to plug-ins x64 dbg down ready for even more would be nice if you do from the beginning, if possible, installation and video settings way to stop talking about it you know? Link to comment
enjon Posted August 19, 2014 Share Posted August 19, 2014 Hi eXoDia, ok I made a longer video where you can see all steps for clean Olly 1 and SND 2.3 and TitanHide too.All three testet in the video to get VMP in all run.All in all its the best to use TitanHide for this so you just need to add the ISP PEB patch and then all is working without any trouble.I added also some text infos so just watch / read & test and release later a new version + IDP PEB patch. greetz thank s LCF-AT very much Link to comment
okaydoit Posted January 10, 2015 Share Posted January 10, 2015 hi can made one simple videoooo? Link to comment
okaydoit Posted January 10, 2015 Share Posted January 10, 2015 i found but now show me This driver has been blocked from loading when i click start serveirse Link to comment
mrexodia Posted January 11, 2015 Author Share Posted January 11, 2015 probably because you didn't read the instructions correctly. it is also recommended to disable your AV completely. Link to comment
okaydoit Posted January 11, 2015 Share Posted January 11, 2015 i do step by step and i see also lcf video so what is wrong? and you have digital singutare link Link to comment
Tomay Posted January 27, 2015 Share Posted January 27, 2015 (edited) I have Windows 8.1 Enterprise 64-bit (6.3, Build 9600) installed on my workstation machine (Dell Precision M4700 with Intel Core i7-3740QM CPU @ 2.70GHz (8 CPUs) & 32.0 GB of RAM) & I have PATCHED its KERNEL to DISABLE PatchGuard and Signed Driver Enforcement using KPP-Destroyer-P4 tool (take a look HERE about the tool), & HERE is its latest version made by how02, & take a look HERE for how the tool works. I have followed all the steps one by one to install TitanHide.I have Copied "TitanHide.sys" x64 version to "C:\Windows\system32\drivers"I have used the ServiceManager to Create a TitanHide service, but when I try to start the TitanHide service, I always end up with this error message :------------------------------------------------------------------------PS C:\Windows\system32> net start TitanHideSystem error 31 has occurred.A device attached to the system is not functioning.------------------------------------------------------------------------What could be the error cause !?Help me please.Thank you for your understanding. Edited January 28, 2015 by Tomay Link to comment
simple Posted January 28, 2015 Share Posted January 28, 2015 i dont think that method will work on latest fully updated win8.1x64. there is pg bypass source code for current win8.1x64 but it's not distro'd as easy to use binary. i'd recomend recompiling driver and sign it w/test sig, enable test sign mode, then use fyyre pg disable method on older win8.1 x64 or switch to win8/7. Link to comment
mrexodia Posted January 28, 2015 Author Share Posted January 28, 2015 i dont think that method will work on latest fully updated win8.1x64. there is pg bypass source code for current win8.1x64 but it's not distro'd as easy to use binary. i'd recomend recompiling driver and sign it w/test sig, enable test sign mode, then use fyyre pg disable method on older win8.1 x64 or switch to win8/7. Yea.. it's also possible to go in debug mode, this way patchguard should be fully disabled as well. Fyyre doesn't work with newer UEFI systems (without re-signing the winload.exe, which is lot of a hassle). I still gotta test this on Windows 10 lol, but I think it's not gonna work. Link to comment
Tomay Posted January 28, 2015 Share Posted January 28, 2015 (edited) i dont think that method will work on latest fully updated win8.1x64. there is pg bypass source code for current win8.1x64 but it's not distro'd as easy to use binary. i'd recomend recompiling driver and sign it w/test sig, enable test sign mode, then use fyyre pg disable method on older win8.1 x64 or switch to win8/7. Indeed, my Windows 8.1 x64 OS is fully updated. Yea.. it's also possible to go in debug mode, this way patchguard should be fully disabled as well. Fyyre doesn't work with newer UEFI systems (without re-signing the winload.exe, which is lot of a hassle). I still gotta test this on Windows 10 lol, but I think it's not gonna work. I will try the debug mode to see if PatchGuard will be fully disabled or not ! If not, I think I will give-up, and go for "Windows XP SP3 x86" on VMware Workstation. EDIT: I tried the debug mode; with no luck for disabling the PatchGuard Edited January 29, 2015 by Tomay Link to comment
mrexodia Posted February 1, 2015 Author Share Posted February 1, 2015 (edited) Try these commands: bcdedit /set testsigning onbcdedit /debug onbcdedit /dbgsettings localToday I started working on TitanHide again, somehow the NtQueryInformationProcess hook is giving a BSOD all the time, does anyone know why? http://pastebin.com/2570uheJGreetings Edited February 1, 2015 by Mr. eXoDia Link to comment
GIV Posted February 1, 2015 Share Posted February 1, 2015 Try these commands: bcdedit /set testsigning onbcdedit /debug onbcdedit /dbgsettings localToday I started working on TitanHide again, somehow the NtQueryInformationProcess hook is giving a BSOD all the time, does anyone know why? http://pastebin.com/2570uheJGreetings I try last week to use your driver under XP SP3 and all time it reset my PC. So i quit and now i have a fear of destroy my PC...... Maybe was a good ideea to use in a VM first Link to comment
mrexodia Posted February 1, 2015 Author Share Posted February 1, 2015 I try last week to use your driver under XP SP3 and all time it reset my PC. So i quit and now i have a fear of destroy my PC...... Maybe was a good ideea to use in a VM first yea.. i tried it today on a VM with Win8.1.. do you have the dumps? C:\windows\minidumps Link to comment
GIV Posted February 1, 2015 Share Posted February 1, 2015 I will look tomorrow because they are at the office PC. Link to comment
mrexodia Posted February 1, 2015 Author Share Posted February 1, 2015 V0012 Released: - fixed weird BSOD with NtQueryInformationProcess - better installation guide - various code fixes Source: https://bitbucket.org/mrexodia/titanhide Download: https://bitbucket.org/mrexodia/titanhide/downloads Greetings, Mr. eXoDia 1 Link to comment
GIV Posted February 2, 2015 Share Posted February 2, 2015 yea.. i tried it today on a VM with Win8.1.. do you have the dumps? C:\windows\minidumps In c:\WINDOWS\Minidump\ is no file. My PC was resetted (power off and on again like you press the reset button) not BSOD so i guess is kinda a protection feature of the PC (software or hardware???) that have been triggeder by the driver, not a BSOD exception. I will try with your latest version and i will report back. Link to comment
Tomay Posted February 2, 2015 Share Posted February 2, 2015 (edited) Try these commands: bcdedit /set testsigning onbcdedit /debug onbcdedit /dbgsettings localToday I started working on TitanHide again, somehow the NtQueryInformationProcess hook is giving a BSOD all the time, does anyone know why? http://pastebin.com/2570uheJGreetings I will try: bcdedit /set testsigning onbcdedit /debug onbcdedit /dbgsettings local Thanks Edited February 2, 2015 by Tomay Link to comment
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now