Enigma extra threads

Post here messages if you have any problems with working of Enigma Protector
Post Reply
Cataclismo
Posts: 6
Joined: Tue Jan 13, 2015 9:17 pm

Enigma extra threads

Post by Cataclismo » Thu Feb 19, 2015 6:25 pm

Hi,
I've got a problem with The Engima Protector. After I protect (JUST protecting, no plugins, no checks, no virtualize, nothing) my executable it adds two threads (as I could see) and I am wondering if threads does ever close or not during the execution of the software.

perfectcode
Posts: 28
Joined: Tue Oct 30, 2012 8:15 am

Re: Enigma extra threads

Post by perfectcode » Fri Feb 20, 2015 2:44 am

.
Last edited by perfectcode on Sat Apr 20, 2019 8:05 am, edited 1 time in total.

Enigma
Site Admin
Posts: 2516
Joined: Wed Aug 20, 2008 2:24 pm

Re: Enigma extra threads

Post by Enigma » Fri Feb 20, 2015 10:17 am

Cataclismo wrote:I've got a problem with The Engima Protector. After I protect (JUST protecting, no plugins, no checks, no virtualize, nothing) my executable it adds two threads (as I could see) and I am wondering if threads does ever close or not during the execution of the software.
What is the problem to have these threads...?

Cataclismo
Posts: 6
Joined: Tue Jan 13, 2015 9:17 pm

Re: Enigma extra threads

Post by Cataclismo » Fri Feb 20, 2015 3:57 pm

I'm doing a thread check from inside my application. If the threads would close then that could be a problem. I've tested a bit (for about 2 mins) and I saw they are not closing. I hope they won't do it later.

perfectcode
Posts: 28
Joined: Tue Oct 30, 2012 8:15 am

Re: Enigma extra threads

Post by perfectcode » Sun Feb 22, 2015 8:28 am

.
Last edited by perfectcode on Sat Apr 20, 2019 8:05 am, edited 1 time in total.

Alec
Posts: 86
Joined: Thu Feb 20, 2014 9:35 am

Re: Enigma extra threads

Post by Alec » Mon Feb 23, 2015 8:49 am

As zylongaming suggested, this is not a good idea to check every thread you application has inside since threads can vary depending on OS and installed system software.

Cataclismo
Posts: 6
Joined: Tue Jan 13, 2015 9:17 pm

Re: Enigma extra threads

Post by Cataclismo » Mon Mar 02, 2015 7:07 pm

Well, thank you for helping. Yeah, I've found that the threads count is different on every operating system. On Windows XP is always 15, but in Windows 7 it's between 25 and 30.
I wanted to do that to detect injection, but it seems I can't.

Enigma
Site Admin
Posts: 2516
Joined: Wed Aug 20, 2008 2:24 pm

Re: Enigma extra threads

Post by Enigma » Tue Mar 03, 2015 11:30 am

You may detect injection by the name of the injected module. Use Windows API to enumerate all modules and detect injects by:
- file name
- or, even better, by the module signature, for eg, content of import/export directory, resources, hash of code section etc

Post Reply