Comments on: bpmtk: DisableAMD

By: Didier Stevens

Didier Stevens — Tue, 22 Apr 2008 18:29:51 +0000

I’m almost 100% sure that Start is a build-in command of cmd, like cd. You need to start cmd.

By: Dave

Dave — Sun, 20 Apr 2008 18:14:22 +0000

I’ve looked at this and can’t start a new process in suspended state on my XP Pro SP2 PC! If I type at Start > Run, I’m faced with an error:

“Windows cannot find ’start’. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.”

I can use the start command from a command prompt, but that defeats the object of your utility!

Any ideas?

By: Didier Stevens

Didier Stevens — Tue, 18 Mar 2008 07:47:56 +0000

bpmtk is a tool I developed: http://blog.didierstevens.com/2008/02/28/introducing-the-basic-process-manipulation-tool-kit/

By: G

Thu, 13 Mar 2008 22:42:40 +0000

What tool do you use to make the changes to memory

Change the string in memory:

search-and-write module:. unicode:DisableCMD unicode:DisableAMD

Thanks
G