Hi L. Spiro, Thanks for Great Work!
The Self Modifyng of this soft is great ^^
I'm started in forum now.
and i'm here for my frist sugestion...
Is This:
-Unhook Api calls in Kernel mode. (Like SDDT Restore)
For example, xTRAP hook apis call for block some funntions in system.
For exemplo Keyboard events in user32, libs.
U Can Unhook this calls, int ring0, using one DRIVER/Rootkit. its great.
A Have code examples IF u need. only PM.
Thakns for great work!