One of tricks to detect SoftICE is to use NtQuerySystemInformation
and to get all loaded drivers. Protectors will scan for ntice.sys
and will detect your SoftICE if NtQuerySystemInformation is not
hooked. There are several drivers loaded when SoftICE is installed,
but some are loaded only and only when softice is active. I'm faking
all drivers just in case...

Also it hooks NtQueryObject to ban access to real number of handles
associated with DebugObject...
