Anti-WriteProcessMemory hook plugin
Posted: Wed Jan 21, 2009 12:32 pm
This plugin allows to avoid injecting into your application of any tools that hook WriteProcessMemory Windows API. WriteProcessMemory API is using for writing any data to the "remote" process, remote mean any executed process that has enough privileges.
Why it is dangerous to work with hooked WriteProcessMemory? If any application hooks WriteProcessMemory function of your application, it may get access of the data that you are working with, for example, I noticed that there are such tools on the net that allows to get data that your application is writing to other properties.
Plugin installation:
- extract file writeprocessmemoryinject.dll from WriteProcessMemory_Inject_bin.zip archive into The Enigma Protector\Plugins folder,
- open Enigma,
- go to Miscellaneous-Pluigns panel,
- you should see new plugin in the list, enable it and protect your file.
Plugin is written for Enigma Protector 1.62, if you are using other version of Enigma - try workability of pluign firstly.
Why it is dangerous to work with hooked WriteProcessMemory? If any application hooks WriteProcessMemory function of your application, it may get access of the data that you are working with, for example, I noticed that there are such tools on the net that allows to get data that your application is writing to other properties.
Plugin installation:
- extract file writeprocessmemoryinject.dll from WriteProcessMemory_Inject_bin.zip archive into The Enigma Protector\Plugins folder,
- open Enigma,
- go to Miscellaneous-Pluigns panel,
- you should see new plugin in the list, enable it and protect your file.
Plugin is written for Enigma Protector 1.62, if you are using other version of Enigma - try workability of pluign firstly.