Disabling an anti-debugger method

The CopyTrans application contains code to prevent a debugger such as OllyDbg from being attached to the CopyTrans.exe process. In this video we look at the technique used and demonstrate a way of circumventing this protection. The (very good) documentation on the internals of debugging processes in Windows can be downloaded from: http://www.alex-ionescu.com/dbgk-1.pdf http://www.alex-ionescu.com/dbgk-2.pdf