View Full Version : how to avoid Smartcheck detection ???

April 22nd, 2001, 09:23
any Idea?

April 22nd, 2001, 10:17
Hi moZfet,

i don't use SmartCheck so much so i also don't know any protection against it, but i think i've read somewhere that it searches for it's WindowClassName (with API = FindWindowA)
Hope this helps...



April 23rd, 2001, 04:49
let me elaborate a little. indeed, the only smartcheck detection i know of, finds if it is loaded by the WindowClassName of smartcheck.exe and then sends two WM_CLOSE messages to it (two, to surpass the closing confirmation). Your task is then either to patch the windowclassname in smartcheck, OR, alternatively, find the string in the offending program and patch there.


April 27th, 2001, 18:33
This got me thinking about an old crackme....released maybe a year or so ago.

I never did crack that bast$*@, but if I remember right... Filemon logged the crackme as checking the SChck registry entries which store the last opened files.

Oh.... I always wondered why any vb shareware programmers didn't check for app.path & "\" & app.name & ".sup"

I think that's how that'd be done in vb anyways, but it'd be too easy to check for the presence of that SChck file in the app's directory.

May 1st, 2001, 00:51
there is also a known detection for SC by searching for the 'smrtchck.tsf' file in c:\%windir%, rename this file and it will destroy that detection...