Update XTrap
Here are the changes that have occurred since XTrap
1. XTrap uses a driver "XDva387" - which is responsible for overseeing the processes of the league (hide, blocks from the freeze, etc.).
2.Now XTrap sees the hidden processes through Hook's. (To update it was not).
3.On X32 now can not turn off XTrap - Driver XDva387 immediately catches it and turns it off Dive Computers + violates sysdata. (Because of it off).
4.Driver "XDva387" - is located C: \ WINDOWS \ System32 \ XDva387.sys, Hidden, invisible to the user does not have signatures.
5.The process of the league and XTrap'a (on x32) is hidden in - NtProtectVirtualMemory, NtReadVirtualMemory, NtWriteVirtualMemory.
Therefore - If you remove these functions process the league will be opened (verified).
Maybe someone you know will help.
 |
