These days I'm working with a program which accepts plugins (DLLs). Only the problem is that I can't debug the dlls when working with it... I always do get "A debugger has been found running in your system. Please, unload it from memory and restart your program".
So I do assume it's some kind of anti-debugging system there...
I do get this with both IDA, and with VS2005 when trying to debug a dll I'm creating...
The goal is:
* I make a debug version of my DLL.
* I set breakpoints in my dll to be debugged.
* I attach to the running process.
* My breakpoints trigger, and the process keeps running.
Idem via IDA
I do believe it is protected by some packer somehow, so I'm guessing it needs to be "unpacked", but I couldn't find any information online for it (some say hackguard, some say TheMida).
+ I would like a tutorial which I could follow next time there is an update to the program so I can do this myself.
What would your timeframe and price be for this?
(price is fictive -- please estimate yourself)