by L. Spiro » Sun Dec 12, 2010 4:53 am
Even after it has been self-modified there are still strings in it that can be used to detect it. Self-Modify is adaptive; each time they find a string to detect MHS, that string needs to be added to the Self-Modify feature to avoid detection.
I however quit updating MHS, but the source is available.
Other ways to detect MHS involve standard hooks on some kernel functions, but MHS can typically dodge these by recompiling your kernel and using the copied functions instead of the original. L. Spiro Script gives you what you need to find these kinds of hooks and to remove them before attaching to your game.
And you can always compress the MHS executable after using Self-Modify. This helps in hiding it.
L. Spiro
Our songs remind you of songs you’ve never heard.