Man, if I were ahnlabs /nexon I'd do so much better.
Starting with PEB module checker, every dll that doesn't belong there gets thrown out, md5/cr32 messages get sent.
Check my no recoil addresses for bytes that don't belong there: nop/others
Build 2 separate builds 1 with and 1 without console. Impend a proper hardware/ip ban system. Make the driver start the engine.exe and not the other way around (as to block injection from the very start of execution) etc. etc, ahnlabs sucks dick. M