IcePatch 2.0

IcePatch 2.0 Screenshot IcePatch is a small utility that allows you to change the "magic" values of SICE and it will be undetectable.

Developer:   Magic Mike
      software by Magic Mike →
Price:  0.00
License:   Freeware
File size:   0K
Language:   
OS:   Windows Vista (?)
Rating:   0 /5 (0 votes)

IcePatch is a small utility that allows you to change the "magic" values of SICE and it will be undetectable.

With the ever increasing number of programs that employ some form of Winice detection, it is our hope to provide you with at least a basic protection against these methods. Do not expect too much from this little tool as there are really countless ways of both detecting and crashing Winice.

IcePatch lets you change the following magic values and names:

·INT3/FGJM (backdoor interface from the good old DOS age) - this interface is used by dldr and wldr to communicate various commands to winice.

  • INT3/BCHK (backdoor interface for BoundsChecker) - this interface is used by BoundsChecker to communicate various commands winice. If you have BoundsChecker then you will have to patch it manually...

  • INT68/4300/F386 (system debugger installation check) - the INT68 interface is used by the VMM to communicate with a system debugger which winice pretends to be (in real mode).
    Note that this method is not winice specific, it detects any system debugger.
    Programs that wish to communicate with a system debugger will fail when you change this magic number.

  • INT41/004F/F386 (system debugger installation check) - the INT41 interface is used by the VMM to communicate with a system debugger which winice pretends to be (in protected mode).
    Note that this method is not winice specific, it detects any system debugger.
    Programs that wish to communicate with a system debugger will fail when you change this magic number.

  • 0202,7A5F (VxD device IDs for winice and siwvid) - both winice and siwvid appear as VxDs to the VMM. and since both of them export VxD services they have unique IDs. Valid device IDs are in the range 0x0200-0x7FFF, to avoid collisions consult Ralf Brown's INTLIST.

  • SICE,SIWVID,SIWDEBUG,WINICE (VxD and module names) - VxDs are supposed to have device names, so are our friends as well. Winice also adds a new VxD to the system which exports Win32 services (SIWDEBUG).
    Due to the way these names are stored/used in the files you have to preserve their lengths. well, one day we may do a better job and fix this little problem, but right now none of us has the time for it... if you do then feel free to contribute to the project.

    ICEPATCH creates backups of all files that it will modify right on the first use (where you are supposed specify your winice directory - we do not get it from the registry for various reasons).

    tags system debugger  communicate with  you change  programs that  the vmm  debugger will  that wish  any system  not winice  winice specific  detects any  will fail  debugger programs  

    IcePatch 2.0 screenshot


    Download IcePatch 2.0

     Download IcePatch 2.0


    Similar software