[NiTrOwow]

I was fucking around in Olly trying to crack a dll..
Not that much luck with cracking so far, but then i found out that guard32.dll gets injected in the 32bit pe in the start while it wasn't loaded up fully yet..

So here is the anti for it. Simple. As. Shit.

VB.NET

Code:

Foreach (ProcessModule procMod in Process.GetCurrentProcess().Modules) If (procMod.ModuleName == "guard32.dll") MsgBox "COMODO DETECTED!" ' if handle is detected it will end the pe. End

Classic vb for oldskool members like me.

Code:

Private Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As Long Dim AntiComdoShizzle As Long Private Sub Form_Load() Call ProtectMeFromComodo End Sub 'guard32.dll Private Function ProtectMeFromComodo() As Boolean AntiComdoShizzle = GetModuleHandle("guard32.dll") If AntiComdoShizzle > 0 Then MsgBox "COMODO DETECTED!" ' if handle is detected it will end the pe. End End If End Function

[NiTrOwow]

I was fucking around in Olly trying to crack a dll..
Not that much luck with cracking so far, but then i found out that guard32.dll gets injected in the 32bit pe in the start while it wasn't loaded up fully yet..

So here is the anti for it. Simple. As. Shit.

VB.NET

Code:

Foreach (ProcessModule procMod in Process.GetCurrentProcess().Modules) If (procMod.ModuleName == "guard32.dll") MsgBox "COMODO DETECTED!" ' if handle is detected it will end the pe. End

Classic vb for oldskool members like me.

Code:

Private Declare Function GetModuleHandle Lib "kernel32" Alias "GetModuleHandleA" (ByVal lpModuleName As String) As Long Dim AntiComdoShizzle As Long Private Sub Form_Load() Call ProtectMeFromComodo End Sub 'guard32.dll Private Function ProtectMeFromComodo() As Boolean AntiComdoShizzle = GetModuleHandle("guard32.dll") If AntiComdoShizzle > 0 Then MsgBox "COMODO DETECTED!" ' if handle is detected it will end the pe. End End If End Function