PDA

View Full Version : how packer?


MEY
December 18th, 2012, 19:37
what is this packer?
piED v.9.4 say:nothing found*
2688
tnks

Aimless
December 18th, 2012, 23:28
HOW packer?

KEMO SABE Mey!

(Yeah, I'm on a roll here!)

Have Phun

deroko
December 22nd, 2012, 15:16
http://pid.gamecopyworld.com/ try ProtectionId, that should help

gfx-er
December 22nd, 2012, 15:57
file is not packed or protected

2689
2690
2691

deroko
December 22nd, 2012, 17:44
Ok really simple:

Code:

K4X0Fz6:00404AE2 aDriversMspdriv db '\Drivers\MSPDriver2.sys',0


after a little of google skills we endup here:

http://bbs.pediy.com/archive/index.php?t-95616.html

and one of the strings in file refers to www.dedj.com which seems to be hardware lock solution. Maybe not widely used, thus protectionId doesn't have it in signature db.

evlncrn8
January 12th, 2013, 05:20
now added into pid

new release due soon.. promise, its currently in beta...

for those interested in pid contributing / testing etc, and why there's been no updates.. -> http://www.fileforums.com/showthread.php?t=94067&nojs=1

evaluator
January 26th, 2013, 06:22
well, nothing understood about protection..
but program section need XOR 08D, then ROL 4. correct EIP,IT, EIP-after call to jump and it is MsVB6

ps. even not a packer..

blabberer
January 27th, 2013, 01:44
didn't it require a driver ?

i think i dredged it but never got into it

mint77
February 2nd, 2013, 18:29
There is code that can fool packer identifiers.

mint77
February 2nd, 2013, 18:32
Thanks for the info. I will try it out.