Detect Process Monitor

how can you detect if Process Monitor running?

ps thru out the install

If people want to monitor your installer, there is nothing you can do about it. Anyway, you can probably try to look for the process explorer window or see if it's driver is loaded.

meaningoflights, what evil things do you want to hide from the user?

thanks Andres thats the direction my research is taking me.

lol LoRd_Mulder, there's just a couple of security layers using the registry and file system. My program got hacked last time (google: cracked Appointments Book v2.3.1) - it was hacked using a tool like OllyDebug but with .Net thats not an option. Therefore hacking the serial is more of a threat so I would like to stash as much as info as possible - even tho you cant hide much from black hats.

Thanks for your replies guys

.NET ehh, .NET Reflector ?

u obfuscate your code or use a tool like (RemoteSofts) salamander, generally tho signing an obfuscated assembly is good enough.

lol, Anders maybe you should tell one of my competitors that

xx url deleted xx

I think that someone here is trying to bypass SecuRom, isn't he? 🤪

On the topic pospec, here's an intresting link I found googling SecuRom

hxxp://forum.sysinternals.com/forum_posts.asp?TID=11086

Here are some things which you may wanna think about other than doing things with the installer... 😉

- Sign your executables and verify the signature, that way manipulating them becomes harder. Same goes for internal checking the checksum of your executables...
- Use a RSA based serial number activation or even an activation file.
- Do online activations only, i.e. the serial number has to be validated and checked with your customer files until the program actually uses it.
- Encrypt your executables or even go and virtualize them...