Page 3 of 3 FirstFirst 123
Results 31 to 34 of 34

Thread: AntiDetectOllyPatch-Also works with Execryptor

  1. #31
    Super Moderator Shub-nigurrath's Avatar
    Join Date
    May 2004
    Location
    Obscure Kadath
    Posts
    430
    Hi, try following manually what I told at post #20 of this same thread.

    http://www.woodmann.net/forum/showpost.php?p=46066&postcount=20
    (`._.[*~-.,.-~* ŜħůβŇĝŕřāŧħ ₪*~-.,.-~*]._.)
    There are only 10 types of people in the world: Those who understand binary, and those who don't
    http://www.accessroot.com

  2. #32

    Unhappy waaaa...

    So more broken...
    i do like this...

    1. i patch the OllyDgb.exe with these progy...
    2. i clone OllyDbg.exe 1 name is same, 1 is my name OllyDebug_execryptor.exe
    3. i open lordpe->directory->exports change rva and size to 0 (zero)
    4. i save...
    5. i repair .exe with RE-Repair.exe -> and new olly was created (Myr05.exe)...
    6. now i have 3 olly...
    - Original
    - Patched
    - Repair

    problem is :
    - when i running the patched olly some my plugin (sometime all) not load...
    - when i running the repaired windows send the fatal error...

    question is :
    am i wrong on that ?

    thx
    .: Allow Me To Learning :.

  3. #33
    sorry, have to reply..

    hiding olly like that is totally and utterly lame, and there HAS to be a better approach.. if you have to use tools like lordpe and re-pair to mess with executables then something is seriously wrong.. you should (assuming you are not a newbie) at least have the experience and knowledge of the pe format to either.. 1. do it manually.. carefully or 2. code a tool to do it

    i had to hide my softice from various anti debug measures, and i sure as shit didnt use 3rd party tools to do it, and i learned a lot from it.. maybe people should just learn....

  4. #34
    crusher
    Guest
    yes it has, you have to change all references by hand, and after it you must change in plugins as well, then no problem with missing function entries
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Article on Execryptor 2.2.50
    By pnluck in forum Malware Analysis and Unpacking Forum
    Replies: 14
    Last Post: November 15th, 2005, 12:23
  2. Execryptor
    By jorono in forum Malware Analysis and Unpacking Forum
    Replies: 28
    Last Post: July 19th, 2005, 00:52
  3. Plugin for Ollydbg and AntiDetectOllyPatch
    By guest in forum Plugins (General)
    Replies: 3
    Last Post: July 12th, 2005, 10:49
  4. Execryptor unpacking.
    By souz in forum The Newbie Forum
    Replies: 1
    Last Post: May 19th, 2005, 07:37
  5. Execryptor
    By Scarabee in forum Malware Analysis and Unpacking Forum
    Replies: 7
    Last Post: February 22nd, 2004, 17:28

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •