Cheat Engine

SunBeam · Posted: Fri Oct 28, 2005 4:27 am Post subject: Needed : Proces Killer

Hello, Darky...I played the other day with MapleStory and with the newly implemented nProtect...As you probably know, there are some modules loaded. Well, I paused the one called GameMon.des, after the game started...

As you also know, nProtect hides its components [GameMon.des and GameGuard.des] and the main game process [MapleStory.exe]...Although they aren't currently seen in the Process List of CE's, if you use the "Process List (long)" feature, you'll find them there...

Anyway, the game crashes from time to time, and if i re-launch it tells me that another instance of GameGuard is already running...I checked and indeed only GameMon.des was running...

Well, I can't kill it CUZ IT'S INVISIBLE to normal process lists like for instance Task Manager. I tried it with other tools and no result : they couldn't find the process or the PID...And CE doesn't have a Process Killer...

Suggestion :

* Proces Kill - on using right-click on a process, in the menu with 'Filter' and 'Input PID manually'

Can it be done ?!

Thanks in advance...

killer+bee · Posted: Fri Oct 28, 2005 6:25 am Post subject:

You could try "itty Bitty Process Manager".

http://www.spywareinfo.com/~merijn/

I use it to kill trojans and spyware crap that 'hides' in the process list.

-KB

Dark Byte · Posted: Fri Oct 28, 2005 7:52 am Post subject:

You could try this:
dissable ce's stealth (else you get a problem in the last step)
attach ce's debugger to that process (unhook the current debugger if needed)
open the task manager and terminate cheat engine.
That should also kill the debugged process

SunBeam · Posted: Fri Oct 28, 2005 3:17 pm Post subject:

Muhaha...

1. GameMon.des doesn't allow debugger attachment...

2. Killing Ce's stealth won't help me with anything...

3. This 'proggy' doesn't 'hide' in the processes. It's simply invisible if you don't use CE's Long List...

Dark Byte · Posted: Fri Oct 28, 2005 4:34 pm Post subject:

1: it does allow debugger attachment if you had enabled kernelmode open process. (assuming you've ran the kerneldata retriever and got the debugport in there)

2: disabling ce's stealth allows you to terminate it using the taskmanager

3: Attach ce's debugger to the processid from the processlist long (and make sure ce overwrites the debugport), then kill ce using the taskmanager

The_MAZZTer · Posted: Fri Oct 28, 2005 9:23 pm Post subject:

Or log out and log back in. Smile