Page 2 of 3 FirstFirst 123 LastLast
Results 16 to 30 of 34

Thread: AntiDetectOllyPatch-Also works with Execryptor

  1. #16

    Lightbulb diablo2oo2

    ramiz :

    u r right i got the same Error Msg .

    diablo2oo2 :

    thanx 4 try but same rezult
    Attached Files Attached Files
    [ each day pass , we learn more ]

  2. #17
    ramiz
    Guest
    the same error who can help ?????
    thnx for all
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #18
    guest
    Guest
    In the catalogue should be - 2 copies
    One patched also we shall rename ,another ollydbg.exe it is simply put
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #19
    ramiz
    Guest
    the error not come agean but when i make debug for the programe wich protected with execriptore it give error when i press f9 and then close olly that when i active the new plugen
    thnx for ur help
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #20
    Super Moderator Shub-nigurrath's Avatar
    Join Date
    May 2004
    Location
    Obscure Kadath
    Posts
    430

    manually editing Olyl vs automated tool

    I would point out some concerns about hiding Olly manually or through this tool, that most of ppl here around migh ignore..

    Manually
    For first thing, you'll need Re-pair and LordPE of course

    • copy of ollydbg.exe to ollydbg_execrypt.exe
    • open LordPE with ollydbg.exe (yes, it's the original file): click on PE Editor and select ollydbg.exe, then directories and then Export Table. Now place RVA and SIZE of the Export Table to 0000. Save everything and exit from LordPE.
    • Open Re-Pair and click fix on ollydbg.exe and wait till the process finishes.
    • Now you should have two files as below:
      • ollydbg.exe patched with LordPE and Re-Pair
      • ollydbg_execrypt.exe still original
    • Invert these two files renaming them: ollydbg.exe should become the not patched program, and ollydbg_execrypt.exe should become the patched program.
    • now launch ollydbg_execrypt.exe (that is now the patched Olly), and exit immediately.
    • now look into the directory, there should be a new .ini file, with a name like asbd.ini or something similar (the name is casual, determined by the patch re-pair did on Ollydbg). Well, copy your ollydbg.ini file over this ini file to keep your old olly settings for the patched version too.
    • now to debug execrypt use ollydbg_execrypt.exe and you should also see all the plugins.


    Using the automated tool
    The tool of this thread essentially does the same things, but it's IMHO less powerfull because:

    • always use the "TEST" string instead of string "Olly", while Re-pair uses random strings
    • zeroes partially the export table, only zeroing the first exports, only those checked by actual execryptor..
    • creates problems with the plugins while manual method works with all the plugins without exceptions.
    • I prefer to do things manually that's much better


    It will not pass too much time that execryptor will recognize also Ollys patched by this tool, while is more difficult to recognize Ollys patched manually..
    Last edited by Shub-nigurrath; June 22nd, 2005 at 02:52.
    (`._.[*~-.,.-~* ŜħůβŇĝŕřāŧħ ₪*~-.,.-~*]._.)
    There are only 10 types of people in the world: Those who understand binary, and those who don't
    http://www.accessroot.com

  6. #21
    guest
    Guest

    New Detect and new AntiDetect

    The new version of a protector prefers the new version
    AntiDetectOllyPatch-2
    Patch , rename and use plug-ins
    Start from the context menu.
    Attached Files Attached Files
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #22
    ramiz
    Guest
    it is not working in the new ver of execryptor plz help us
    thnx for all
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  8. #23
    guest
    Guest
    Write more in detail - then it is possible to answer correctly.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  9. #24
    ramiz
    Guest
    when i press f9 in olly patched it give me that error and it close
    u can help me in that ?
    and the error in attach
    Attached Files Attached Files
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  10. #25
    guest
    Guest
    ramiz
    Most likely - at you not an original file
    Use ollydbg from a package v.1.10f
    It is possible to send me your file?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  11. #26
    guest
    Guest

    New! AntidetectOllyPatch

    Hide you OllyDebugger with new - AntidetectOllyPatch!
    Patch against execryptor - all version!
    -----------------------------------
    Ok! JMI i delete Subscribtions and my old post
    Attached Files Attached Files
    Last edited by guest; August 14th, 2005 at 14:30.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  12. #27
    Why are ypu answering your own Posts and Why did you start another Thread when you posted the previous version in the "other" Thread??? You can use the "Edit" Button to add later comments.

    Are you just facinated with seeing your nick as many times as you can Post?

    Regards,
    JMI

  13. #28

    Unhappy hi...

    Quote Originally Posted by guest
    Hide you OllyDebugger with new - AntidetectOllyPatch!
    Patch against execryptor - all version!
    -----------------------------------
    Ok! JMI i delete Subscribtions and my old post
    hi sir...
    when i use your patch some of my olly plugin cannot be load...
    what happend with me...

  14. #29
    guest
    Guest
    Hi .It's need Rename XXOllydbg.exe and place original copy Ollydbg.exe
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  15. #30
    Quote Originally Posted by guest
    Hi .It's need Rename XXOllydbg.exe and place original copy Ollydbg.exe
    i have error like this when i renaming olly...

    This application has failed to start because OllyDbg.EXE was not found. Re-installing the application may fix this problem.
    is any other suggestion ?

    thx...
    .: Allow Me To Learning :.

Similar Threads

  1. Article on Execryptor 2.2.50
    By pnluck in forum Malware Analysis and Unpacking Forum
    Replies: 14
    Last Post: November 15th, 2005, 12:23
  2. Execryptor
    By jorono in forum Malware Analysis and Unpacking Forum
    Replies: 28
    Last Post: July 19th, 2005, 00:52
  3. Plugin for Ollydbg and AntiDetectOllyPatch
    By guest in forum Plugins (General)
    Replies: 3
    Last Post: July 12th, 2005, 10:49
  4. Execryptor unpacking.
    By souz in forum The Newbie Forum
    Replies: 1
    Last Post: May 19th, 2005, 07:37
  5. Execryptor
    By Scarabee in forum Malware Analysis and Unpacking Forum
    Replies: 7
    Last Post: February 22nd, 2004, 17:28

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •