Results 1 to 5 of 5

Thread: Maybe new Azpr trick ?!

  1. #1
    Nigma
    Guest

    Maybe new Azpr trick ?!

    Hello everyone !!

    Well I downloaded
    AbsoluteShield Internet Eraser Pro 2.32
    from download.com ( search for AbsoluteShield )
    and I thought "another Azpr protected software !"
    well I unpacked the proggie and did all revirgin procedure ,
    But guess what : the F****** proggie does not run , in fact
    it fails before reaching the OEP ( at the windows loader ).
    I am familiar with Azpr protected proggies and I thought maybe
    there is a new trick ?

    I know that you are all tired from Azpr unpacking but Please check
    this one and tell me if you discovered something new .

    Thank you all !
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    : Code Injector : nikolatesla20's Avatar
    Join Date
    Apr 2002
    Location
    :ether:
    Posts
    815
    can you give more details, such as what exactly happens when it "does not start".

    -nt20

  3. #3
    foxthree
    Guest
    I hope you're referring to AbsoluteShield Track Eraser 2.32 from sys-shield. (There was no AbsoluteShield Internet Eraser Pro 2.32). Very old strain of "standard" ASsPR. Nothing new. Did you fix the APIs properly? Esp. the user32.dll's DialogBoxParamA?

    Signed,
    -- FoxThree
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    Something must have gone wrong when you did dumping or rebuilding or something, cause it worked fine for me.

    More info please!

    /Manko

  5. #5
    Nigma
    Guest

    I found the problem !!

    Well , first , I must say S O R R Y guys !
    there is no new azpr trick !
    I don' t know why but revirgin created wrong import table ,
    the original_first_thunk and the first_thunk contained offsets
    that are outside the Pe offset ( 2A357600 in the first_thunk )
    and that cause the problem , the window's loader tried to
    get DATA from invalid address .

    So Manko rights , it is suppose to be no problem to unpack
    this target !

    Thank You All !!!!!
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Any trick
    By w_a_r_1 in forum The Newbie Forum
    Replies: 4
    Last Post: July 15th, 2009, 09:03
  2. How to solve this trick ?
    By linhan in forum Malware Analysis and Unpacking Forum
    Replies: 12
    Last Post: November 9th, 2007, 23:30
  3. Azpr's new check time algo !
    By Nigma in forum Malware Analysis and Unpacking Forum
    Replies: 41
    Last Post: May 4th, 2003, 14:09
  4. Asprotect trick?
    By banshee in forum Malware Analysis and Unpacking Forum
    Replies: 3
    Last Post: August 17th, 2002, 17:10
  5. Alexeys *new* trick ?
    By +SplAj in forum Advanced Reversing and Programming
    Replies: 4
    Last Post: February 26th, 2001, 18:55

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •