Protection ID info thread - v6.4.0 (build 08.07.2010)

[cdkiller]

would be nice if you can help me improving this tool
and finding bugs :)

i´ve written this tool,
cause there is no other available wich detects the major protection alll together.

protection ID scanns exe files for:
* Safedisc
* SecuROM
* Starforce
* VOB Protect CD
* Laserlock

next version adds support for even more protections and
detailed securom and safedisc version.

get it on my website -> Download Section

[cdkiller]

new update:
----------------
DLL Support
detects SecuROM version (code by CirKutz)
added second check for VOB Protect CD
improved Laserlock and SecuROM detection

[krondike]

Hehe if ya want to know, it don't work with Windows XP Longhorn. Ether do SafeDisc Unwarper by Boolseye.
But it is about 2 year for the final releas. So U got very much time. Or it is a bug in Windows. I don't know.
I'm just giving U info.

[cdkiller]

haven´t tried it on winxp longhorn yet ;)
but i´m sure it will work, cause i´m using the win32apis...

new update v0.4
----------------------
* detection of UPX
* DAT files can be scanned (e.g. Aquanox2)
* added VOB Protect CD Serial hint
* support for newest VOB Protect CD (e.g. Highland Warriors)

[krondike]

Originally posted by cdkiller
haven´t tried it on winxp longhorn yet ;)
but i´m sure it will work, cause i´m using the win32apis...
Nope. I can se the start box, where U thanks peoples. But when I press OK. The thing dissapering/exit.
On the bOOlsEyE:s, Unwarper I can start the unwarper, but when I press on the unwarp button, the program dissaper/exit.
I've try to the emulation, en press in Windows XP, and still there is a problem.
I've try to the emulation for Windows 98 and still there dissapering.
So it's somthing wrong with the programs, so it can't go for Windows XP Longhorn.
BUT! It also can be a bug in Windows XP Longhorn. Becuase it's plenty of bug there.
For example U can't download anything with Internet Explorer that is larger then 50kb, becuase if it is, U get a error message. Forbidden thing. So I most use getright.
But that's It's a hole other story.

But to be focus, try to see if there is any bug on the source code, that can eject/exit it self, for example in Longhorn. Maybe more and I have problems with a diffrent OS. :rolleyes:

[krondike]

Now I've tested in Windows XP SP1.
Nice program. Hopfoly I can be a part to cange the appearens, becuase I've have a few requestions.

I've tested to look what protection Harry Potter 2 has. And it just saying SafeDisc version 2. Not more. Couldn't the program be more specific?

And if I want to look up for more, couldt U do a menu like.

So I can look the proctetion for more than one file. With out restart the program. and if I can't see a protection I can open a new file and don't start the program again. ;)

The menu could have things like these:
Open file
Exit
About

And the program could'nt see if the .exe was clean or not. So U can have like boolseye, when I try to unwarp a unwarped file. It's say like. It's was found a SafeDisc string, but how ever the file seams to be clean.....more one...

Just a request, could be cool if U do these for the next update. ;)

[cdkiller]

upadate v0.5
-----------------
* scanning for CD-Checks (really works ;)
* detects ASPack
* added some more protection informations

i will fix all known bugs till version 1.0
maybe i will add a GUI with menus and stuff later...
btw, good idea ;)

[cdkiller]

new version v0.6
--------------------
* finally the Safedisc version will be detected
(thanx to bOOls eYe for the code)
* Safedisc unwrapping hint
* many improvements to the CD-Check detection
(tested on 18 game executables ;)
* improved Starforce detection (Anstoss 4)
* removed WriteAcces when opening files (hint by bOOls eYe)


you should now be able to detect the Protection
of every game executable !!!

[krondike]

U should need a mirror. Becuase the http://members.lycos.co.uk/ seams to be down. That's mean that your page is down.. :(
I'm only inform u ;)
Keep up the good work. I realy can recomend this program. I'm waithing for the 1.0 reales. :):):)

[cdkiller]

my site isn´t down. i uploaded the files for 3 mins.
just sometimes it´s not available...
try again later ;)

i know about the cd-checks problem
---------------------------------------------
- it scans for a software protection (sd, securom, starforce,vob)
- if no protection was found, it looks for
GetVolumeInformationA and GetDriveTypeA (cd-check apis)
- if nothing was found it looks only for GetDriveTypA
this can be in all apps like in ICQ.exe or Notepad.exe
- this can also be a string inDivX503Bundle.exe ;)

but i will boost it up.
i´m now looking scanning for strings like:
"Please insert the original cd"
"Disk not found"
...

next version supports safedisc 3
and a much better laserlock detection ;)

AND use it only on game executables and it will work fine !!!

[krondike]

Cool! ;)
The members lycos. Has been un available for more than 17 ours.... hmm :(

[cdkiller]

v0.7
----
- detection for Safedisc V3 - cooming soon
-i mproved the Laserlock detection - thanx again bOOls eYe for the Warrior Kings v1.3 exe :p
- CD-Check scanning algorithm improved
- some tweaks to Safedisc Detection Code

@ krondike
i´be sent you the ProtectID 0.8 Beta 2
it contains many improvements to the CD-Check detection.
now it scans for more than 20 strings like:
- please insert original...
- disk not found...
- cannot locate cd...

[cdkiller]

v1.0 Beta 1
---------------
- added 20 different CD-Check Strings to scan for (Game CD not in drive, please insert the original, disk not found, cannot locate cd-rom ...)
- detects possible CD-Checks (GetVolumeInformationA + GetDriveTypeA)
- Safedisc V1 detection
- Petite detection
- fixed MessageBox issues in CD-Check detection
- removed scanning for MessageBoxA, cause it´s nearly used in every Executabel


now it works with nearly executable :)

[krondike]

Thank U realy thank U that U put in my name on the program and thanks me for my testen and everything!
Gud it is a hounor to be in the program. so glad.. wee.. :D
But I still have problems with Longhorn.
I've tested in XP it works great.
But I have problems with Longhorn.
I've haven't found any thing on the web that could help solve my problems. But I still hope with every new reales it works with longhorn.
I've only have problems with the open box.
The first message is appearing. But when the open box should come out, the program just exit. Like I've written before. :(
I've gonna test it in Windows 98 SE and Windows 2000, soon. But it works with XP. But haven't get the chans yet to test the BETA 0.8 version on a system that works. And not 1.0 BETA but the latest version shell I test so soon as I can. And I'v gonna testit hard. And I'm gonna write every singel problems that I'v got. :p. Just for U cdkiller just for U. Dam I am so happy.

[cdkiller]

thanx for your testing help !
the fileopen dialog error it must be a bug in WinXP Longhorn :(

when you have any ideas what i can add just tell me,
maybe it´s in the next version.

[krondike]

I've got a little Idea but maybe it doesn't work.
If U created a .dll file for the .exe file.
In the .exe file, include U the .dll file.
the .dll file is written in anotother program language. like C# (Microsoft) or C++ (Borland)
and the .exe program in that program language U are doing right now. And the .dll is the open file manager.

But maybe it's 2 problems with that.
Hard to compile. And easy to others to dissamble.
or I don't know.

Maybe that should solve my problems.
I realy should test it in Windows 2003. But I've don't have it.

I'm just saying. Maybe I'm not the only one with that problem. And it should be a program for every OS to enjoy. But U do what U fealing to do becuase it should be alot of work if U rewrite it. But I don't know.
And it is just the open message box. so it isn't a big deal for right know. the Longhorn is gonna be reales in 2005 or somthing. Is pleant of bug should be fixed in the Longhorn and it's planty of time for U to see if the problems reamains.. :D

[cdkiller]

version 1.0 released
-------------------
- added 21 different CD-Check Strings to scan for (Game CD not in drive, please insert the original, disk not found, Cannot locate CD-ROM ...)
- rewritten CD-Check detection (much better now)
- detects possible CD-Checks (GetVolumeInformationA & GetDriveTypeA)
- check if safedisc / securom protected exe is already cracked
- Safedisc V1 detection
- removed scanning for GetDriveTypeA, GetLogicalDriveStringsA and MessageBoxA cause it can be in every executable

version 1.1 will follow next week and includes checks if a safedisc protected game was already unwrapped or not.

[GLH]

HAPPY BIRTHDAY >>>CD KILLER<<< !!!

Great project these Protection_ID !!!

[ByteMare]

Yeah Happy birthday, mate!! =)

[Special Agent]

Yes, Happy 18th CDKiller....

.... and thanks for your hard work!

-=SA=-

[cdkiller]

thank you all :)

[krondike]

I haven't seen these message.... oh.. :( HAPPY BIRTHDAY.
HAPPY BIRTHDAY TO U.
HAPPY BIRTHDAY TO U.
HAPPY BIRTHDAY DEAR CDKILLER.
HAPPY BIRTHDAY TO U.

Lovely wishes from Krondike :)

[coffin filler]

Just to say Happy bday (sorry its late but i been away)
ps the protection scanner you coded is Very easy to use:)

[cdkiller]

about Safedisc + CD-Checks
------------------------------------
when a file is protected with Safedisc, all strings
and API Calls are encrypted.
that means i can´t do a search for CD-Checks.

Sim City 4 is protected with Safedisc and additionally CD-Checks,
but my filescanner only detects the Safedisc Protection !

it isn´t possible to detect CD-Checks in a Safedisc´ed EXE
only if i had an unwrapper ;)

[coffin filler]

@ CD KILLER : we have faith in you ;) and im sure you will sort it eventualy..tread carefully and dont follow the light:p May the force be with you....

[krondike]

I'vet tested the MASM 32 program. and it can generated a GUI version. and a open box file. And that works fine.

Isn't the protected scanner coded in ASM or what the language is?

So if it is. I think U have a bug. Becuase I can't open any files in windows XP Longhorn. And what that program has done. U can do it. But I've can have totaly wrong and no bugg report should do. But if I've have right, U need to look U're code up.

Lovely greating Krondike

[cdkiller]

with MASM v7.0 I have some problems.
i coded some tools, but they will only run on WinXP.
if they run on win9X, they will crash.

but when i will compile with TASM, it runs on every OS.
Protection ID is coded in TASM.
cause it should run for everyone :)

and i have already found some good source codes for a GUI.
btw, version 1.1 will be released on 22. february

[packer]

Gee looks cool, i will check outr this cool Prog! I havent been here lately, What new protections are about?

[krondike]

I have found a new bug. Or somthing. but I'm waithing for the 1.1 reales. Before I can say if there is a bug.

[krondike]

How does it goin man?
Are U finnish with the update of the Protection scanner?
Haven't heard from U in this forum for awhile. :(
C Ya =)

[cdkiller]

new version released.

v1.1
----
* when scanning a Safedisc unwrapped file, the Safedisc version wich was used will be shown
* improved scanning for English & German CD-Check messages
* first scanning for English CD-Check messages, than German messages

[krondike]

I've have test the scanner a little bit.
These problems have I found out.

Battlefield 1942 1.3 (Road to rome exp) cracked .exe, CD-Checks found, no CD-checks are.


James Bond Nightfire cracked.exe file. SafeDisc 2.8 found. (cracked.exe aren't safe disc removed?)

Suggestion. U are tipping how U can crack the game. Why can't U first search like U do now, and then look if the file is patched or not? like with jmp that U tipping.
When they found a unwarped file. It's only goin up to 2.6 (U should write it so everyone knows)
and it's only the unwarped file U got question if U want to scan for CD-checks. Why can the question bee for every protection.
And if it found CD-Checks first then ask for SafeDisc scan.

Just some sugestions.

[cdkiller]

ok i will install BF1942 RTR + Nightfire and have a look at the executables.

James Bond Nightfire:
when scanning the Bond.exe a message will pop up wich says:

------------------------------------------------------X-
File WAS protected with Safedisc 2.80.010
But the Protection has been unwrapped.

Scan for CD-Checks ?
---------------------------------------------------------

i´ll send you the newest version 1.2 BETA

[~$LaY3!2~]

greetings..
Send me that v1.02 Beta =-)
cosaverystoned**********com

[cdkiller]

if anyone has a game executable wich is protected,
but my filescanner don´t recognize
please let me now.

the version 1.2 BETA detects the new Slovak Protector.
(used in ArxFatalis 1.16a.exe).

anything i should add for future versions ?
just tell me.

[krondike]

O sory I mean Nightfire 1.1 patch. Not Nightfire 1.0, 1.1 I mean. Sorry I forgott to write that. Slovak Protection have I never run in to, so I gues I don't see any difffrent.

[cdkiller]

version 1.2 fixed all the safedisc problems !!!
it also detects if safedisc was unwrapped or not
(99% working!).
even in fixed executables from GimpsRus / Fairlight
who don´t riped sections inside the exe :)

still needs some tweaking,
but should be released today...

[cdkiller]

1.2 released :-)

* detection for Slovak Protector (thanx to Mplayer Warlord for the ArxFatalis 1.16a.exe)
* detects if a Safedisc protected file was cleaned by GimpsRus and Fairlight
* scanning for 5 more CD-Check strings:
- "Please Insert" (Street Legal)
- "Check CD" (Drift: When World Collide)
- "InsertCD" (Iron Storm Launcher)
- "Insert CD" (Safedisc unwrapped Nightfire Bond.exe)
- "cd-rom" (Safedisc unwrapped C&C Renegade Game.exe)

[gnozal]

The best protection scanning tool available ! :D
What about an unCDcheck function, so we can transform a Fixed-EXE into a NoCD ?

[cdkiller]

a uncdcheck function is hard to realise.

[krondike]

I've got files that the scaner are saying I'm having Cd-checks wich I'm not having...

[cdkiller]

this bug can´t be fixed.
cause it scans for cd-checks strings, wich are always in there.
in normal files and also in nocd files :(

[cdkiller]

it get´s even better with every future release :)
now the nasty SecuROM bug is also fixed !

v1.3
-----
* added scanning for CD-Checks in cracked Safedisc - Executables by Fairlight (their releases are often protected with CD-Checks !)
* able to detect if a cracked Safedisc - Executable was cracked by Deviance / Fairlight / GimpsRus / MYTH
* able to detect if a cracked SecuROM - Executable was cracked by Deviance / Fairlight / GimpsRus / MYTH
* fixed some lines in SecuROM detection code (found SecuROM 4.xx.xx in a SecuROM unwrapped file is now fixed)

[krondike]

I've gonna test it right away ;)

[cdkiller]

new release :)

v1.4
-----
* added Support for CD Lock protected files (Tomb Raider 3)
* improved scanning speed for Deviance / Fairlight / GimpsRus / MYTH Tags in Safedisc / SecuROM Executables (only scanning PE-Header)
* improved Safedisc scanning speed (50% faster now)
* added scanning for CD-Checks in cracked SecuROM - Executables by Fairlight
* fixed Scanning for CD-Checks in Fairlight Releases didn´t work properly
* scanning for 2 more CD-Check strings:
- "cdcheck" (Dungeon Siege)
- "NEED CD" (Soldier of Fortune 2)

[krondike]

Okay very god that's you are searching for CD-checks and safedisc. I have been waithing for that along time :p
But I have found a bug. And I don't know if a bug U can fix (again) but how ever it is a little bit a bug that's should be fix very soon (if it's can). I was scanning a program yes I'm testing program compabitly, how ever. It says it's no CD-Check! File is only protected with SafeDisc. And it's not protected with SafeDisc. Not your other version has said so. So there most be a bug or something. Hope I've been a little bit of help!
:D

Edit:
I found out the thing!
If the scanner doesn't found any protections, it's says is protected with SafeDisc. Becuase it's scan for the CD-Check first. Be out with a 1.5 version quick man ;)

I've tested some installation file in Windows 98 and a nother program and Word 2000. Try it for your self.
And I've tested to scan you own program. First I make a copy becuase it's cannot scan when I'm running it, how ever Windows is doing a forbidden thing or error or what U call it. So U got some works to do ;)
How ever a very god idea of the program and I've like it sence the begining. Hope I have been a help ;)
Sheers :)

[cdkiller]

"If the scanner doesn't found any protections, it's says is protected with SafeDisc" -> this is wrong -> it says: no protection
(next version will have a better safedisc / safecast detection.)

what file did you scanned ?
can u send it per mail so that i can have a look inside ?

[krondike]

If I could I would. But this is the thing. I can't send I don't have so much mail space.

But I've tested many programs, .dll and .dat and it's says the same thing. If it's not found any Cd-Cheks.
But I do know that's im was using windows 98SE. Iäm gonna try in Windows XP
If there still problems. Maybe I send pictures of the message ;)

[cdkiller]

i know this bug. it has already been fixed.
i´ve sent you the 1.5 BETA.

- detection for safecast
- support for older VOB Protect CD versions
- bugfixes

just compiled ;)

[krondike]

NEW BUG!
Well know I've tested the unwarped CIv3 1.29F and it's says it isn't unwarp. It did in 1.4 and then ask my for scaning for CD-checks.
That prompt the image that I'v mailed U.
So the 1.4 is batter then 1.5 BETA :/

But it's fix Civ3 - Play the world 1.21F .exe error and all files that's don't contains any protection.

[cdkiller]

do u mean this file ?
Civilization 3 v1.29f ENG_gimpsRus - no CD

i´ll check it out. will be fixed as soon as possible.

[krondike]

No I mean I've cleaned with SafeDisc cleaner 1.2.
With the 1.4 it's says it's find SafeDisc but it has been unwarped do U wanna search for CD-Checks.

But in 1.5 BETA is the same message that I'm was mailing U. So U kind of replace the old "unwarp find" message with the other one. :/

[cdkiller]

yes i know this. i will contact bools eye for help.

[cdkiller]

version 1.5 released :)

* support for Armadillo (Gothic 2)
* support for Safecast (Midtown Madness 2 Jukebox Patch)
* support for older versions of VOB Protect CD (Port Royale)
* able to detect if a cracked Safedisc Executable was cracked by Immersion / bOOls eYe
* highly improved scanning speed for SecuROM / Starforce / VOB Protect CD
* "no additional CD-Checks found" in an unprotected exe is now fixed
* fixed bug when Safedisc was found and cracked by an unknown group

[krondike]

U are one hell of the guy ;) *hehehe*
You own program was "protected with safe disc 3422007.1954051187.3422007!
But the proctection has been unwarped."
How du U do that? :p protected your own program with higher protection then the creater do self.
And U have done a unwaper :p. Please sher it with meee... :p

No im just kidding. But U have a bug. I did a copy of your program and scan your own program (the copy one) with the original. And the message pop up. Nice bug ;)

[cdkiller]

yes there can happen funny things,
when scanning the Protection_ID.exe ;)

maybe i will inlcude some lines of code
that you cant scanProtection_ID.exe

[cdkiller]

it´s not easy in these days with a website offering gamecracks...
my site has been taken down again.
(forum is still here: -cut- /cdk)

here is the official mirror of my Protection Scanner
http://www.cdmediaworld.com/hardware/cdrom/cd_utils_2.shtml

i´m currently searching for another free webhoster.
if you can help me finding a free host, please contact me.

cya

[cdkiller]

new version released

v1.6
-----
* generic speed improvements (thanx to CirKutz for some allocated memory hints)
* better detection wich Group cracked the Game (try scanning the Splinter Cell exe and dll cracked by GimpsRus)
* many improvements to CD-Check detection (also checks if CD-Check has been cracked)
* Armadillo Detection disabled (strange bug inside!), will come back in a later version
* improved Armadillo Detection (only scanning first 500 Bytes)
* fixed Crashbug when scanning for CD-Checks in a Safedisc unwrapped file by Fairlight
* scanning for 1 more CD-Check:
- "No CDROM Title" (MOrrowind v1.2 Nort American)

includes Test Report by Krondike.
it´s time to update your report ;)

@ Krondike
the Morrowind 1.2 (north american) protection string
is not inside the exe.
it is stored in the *.ini so my scanner was unable to detect it.
but i found another String inside the EXE, "No CD Title",
wich checks the INI strings.

[krondike]

Updated version are emailed. Done to day. ;)
1.5 are the version.
If any one is instresting of the changes.

Test report 1.5
-------------------

* protection ID 1.6 are tested
* Change some outlooks.
* Deleted, change and add some text.
* 2002 are change to 2003.
* Now in 2 colors. RED and BLACK :p

Download the test report and the protection scaner on CDkillers homepage.
Link are listed in my signature.

The updated Test report should be able to download soon. More info by CDkiller

[cdkiller]

new release :)

v1.7
-----
* speed improvements
* Armadillo detection is back (all Bugs fixed)
* SecuROM ID Code improved (thanx to CirKutz for a better code :p )
* improved Laserlock detection and show group wich cracked Laserlock
* able to detect if a executable was cracked by CD Killer / CLASS / DarKneZZ
* optimized detection code for cracked Safedisc / SecuROM games
* fixed small bug in bOOls eYe / CD Killer / Deviance / Fairlight detection when scanning for SecuROM / Safedisc
* added second check for Fairlight releases (Safedisc & SecuROM)
* scanning for 1 more CD-Check:
- "cd2:\" (Icewind Dale 2)

Krondike, i will upload your new Test Report when i got it.
(try to compress with winrar with max compression)

[krondike]

I'm working seven-eleven. And I'm realy trying to compress the .pdf file. But the .pdf file are som tight compress. But I'm trying to find sulutions! ;)

[krondike]

If you want to know, the protection ID bug with longhorn is erase. Seams that microsoft has fix it. Im looking for alternativ for my testreport. Its take about 1.5 MB with PDF and 1.4 with max compressed rar. So I working hard to see what format I can do. I alsways can have the .doc format, but I dont know... will see about that.. ;p

[cdkiller]

so i can write in my messgeBox that it has been successfully tested in Windows Longhorn ? ;)

[krondike]

Yepp! build 4008 ;)
The earlier version sucks!
Okay I can run the program and one thing it can do that other can't it can open your program. It's can scan your .exe file when I'm running it. In other version it's say error open the .exe file. And then I did a copy the it goes.
but funny thing longhorn have.

I have not scan any other files then your protecion ID. And it's works.

But funny thing that now you have both have unwarped high SafeDisc version and CD-Checks ;)

[krondike]

I'm gonna start a homepage. With all test. I'll update with more info.
if started a page on krondike.t35.com
How ever...there are so far just a forum up. And the forum has porno pop ups. I've have NO clue where the string are, and I realy need help to delete the porno pop ups. Soon the hole Test Report for Protection Id are gonna be upload. I mean time file free to test out the forum. How ever ALL the post are gonna be removed or moved.

[cdkiller]

page works.
were did u get this nice forum ?
is it part of T35.com ?

[krondike]

Hehe no I did all by my self! :rolleyes:
And the page are a little bit rare sometimes. So I gonna solve some problems.. :/

www.phpbb.com

There can you get the free forum.
I'm gonna start uppload some test...see if it works...

There are some test up now. If you got a problem to see the page. Please write here. I recomend Internet Explorer 6.

The page have popups, so download popup killer to get rid of that.

[taprick]

i went on this site, i tryed your program, i'm only novice, and i didn't understand all things said in messages before (because of language, and because of low level) nether the less i tryed it and managed to understand more things about protection. so thanks a lot

[krondike]

The forum is half way up half way down. I'm gonna move the forum to another server later on this month... so my server now is just a test...
But there are som uggly test report up.
check it out on krondike.t35.com

[cdkiller]

PROTECTION ID 2.0 BETA RELEASED

with GUI, Bugfixes, Improvements...

i need a Logo !!!
if someone can create a nice Logo wich i can use in my
Protection ID would be nice.
i´m no big gfx artist, so i need some support.
proper Credit is given in my Tool.

[krondike]

A very nice tool! ;) VERY NICE!
One thing you should fix, that you have in the non GUI versions.
The CD-Check scaner after SafeDisc or Cracked SafeDisc. ;)

[cdkiller]

v2.0 Beta 2
-------------
* updated GUI style with better Logo
* Window will now popup on the center of your screen
* fixed bug that forces program to quit when no protection was found
* fixed bug in multiple filescanning routine
* fixed bug where no protection will be detected after scanning more than 7 files

now it looks more professional ;)

[krondike]

I've done a mirror. the URL are posted to CD-Killer. check his site for the mirror ;)

[cdkiller]

new mirror if one fails -> krondike.t35.com/protection_id/20b2.zip

[krondike]

the forum is online again. krondike.t35.com

[cdkiller]

v2.0 Beta 3
-------------
* new Logo (done by Monty Burns, thx)
* full Safedisc 2.90.040 support (e.g. Devastation, removed small bug)
* added detection if a cracked file was cracked by SoulDrinker
* fixed bug wich says "No Protection found" in a already cracked SecuROM file by Razor 1911 (Vietcong.exe)
* fixed all known memory leaks
* tweaked messages

@ Krondike: please update your Mirror !

[krondike]

on lunch at monday the mirror for BETA 3 should be able...

Soon I get a paid host....for the forum and the mirrors and stuff like that.. :D
YEAH!

[krondike]

The mirror is updated send to you.
But I've found a bug.
Most of the SecuRom protected .exe file and are cracked, the new protection ID say that are still protected with SecuRom.

tested RCT2 and Championschip Manager 4 1.03 .exe file... so.....maybe that's a bug?

[cdkiller]

thats a problem with cracked SecuROM executables
by Immersion wich cannot be fixed.

Immersion is a group wich don´t kill the SecuROM sections inside the exe and they also dont have any Tags like "iMS" in SecuROM EXEcutables.

[krondike]

How about....find out what they do, search for what they do, and if it's match, say that is cracked by the group! :D
YEEAH! Much easier to tell how...insted of doing that.. :p well well...I can live with that...=)

[cdkiller]

finally version 2.0 is here :D

v2.0
-----
* random logo generator (thanx to bOOls eYe for some code)
* added detection if a cracked file was cracked by Dynasty / Drunk
* improved VOB Protect CD detection
* removed Armadillo Protection (only used in Gothic2.exe and no other games as i know)
* fixed detection bug in Files with CD-Checks wich are cracked by Souldrinker
* Window will now really popup on the center of your screen
* scanning first 1000 Bytes for Safedisc 2/3 (fixes Bug in Morrowind.exe)
* allocated memory will now ever be freed when you close the ProtectionID.exe
* scanning for 1 more CD-Check:
- "CD was" (Castles & Catapults)

[cdkiller]

i moved to a new server cause my old site is not reachable,
don´t know why (traffic reasons or taken down).

http://wave.prohosting.com/cdkiller/index2.htm
here you can download the Protection ID 2.0

[cdkiller]

new release with lots of bugfixes and improvements :D

v2.1
----
* generic improvements in detection wich group cracked the game
* added scanning for CD-Checks in Safedisc unwrapped files by Deviance
* better detection if SecuROM was unwrapped by a group (i.e Purge 1.4.4 by Fairlight)
* SecuROM will now be detected if the "cms_d" and "cms_t" tags are located at the End of the PE-Header (Offset 600 - 900)
* ASPack / Safecast / StarForce / UPX detection improved
* Scanning speed for Safedisc version improved
* added second check if a file was cracked by Deviance (i.e. fixed DTM Race Driver 1.1 exe by Deviance)
* added detection if a cracked file was cracked by Bughunter [EVOlution]
* tweaked some messages
* scanning for 1 more CD-Check:
- "CD-ROM in drive" (Civil War Battles Campaign Ozark)

[krondike]

I've got problems to download the 2.1 protection ID.
It came up ")bÃeõ´" etc stuff.
And I can't right click to get the file ether.
Can you please fix this things ;)

I currently think to kill down krondike.t35.com
And just working on www.gamebuzz.tk
So I think my next test report stuff are in www.gamebuzz.com and not on krondike.t35.com

[GLH]

It's because the Internet Explorer show you the RAR file an don't start to download it.
I've solve this by making an own htm-file with the following in:
<a href="http://cdkiller-news.netfirms.com/Protection_ID_v21.rar">DOWNLOAD</a>

Start the HTM-file...
Now you can right-click the link and choose "Save as"...

[krondike]

I think this would work to.
http://cdkiller-news.netfirms.com/Protection_ID_v21.rar

Save as a html file.
Rename it to Protection_ID_v21.rar
from Protection_ID_v21.rar.html

[cdkiller]

i fixed the problem.
right click -> save as...

[ThaShadow]

Great job on this program cdkiller - really takes away the hassle of detecting protections. Keep up the good work.

[cdkiller]

next version detect the cd-checks in the core.dll in
Unreal 2 Engine Games like Postal 2, Splinter Cell and RavenShield.
i need some test reports for fixing the bugs.

[krondike]

Yeah!
I'm proud that I've just finnish a install version of Protection ID 2.1.
This install version is a BETA.
Can be download at members.lycos.co.uk/krondike

@CDkiller
If you whant a licence agreement please write one to me. So I can add it.
Please have suggestion of the install file, I think it's realy cool.
Add an icon at the start meny and have a uninstall string in the Add/remove programs.
And if you got XP click on the support link in the ADD/remove programs and look.
I've have some suggestion and I think it should be the name 3.0 if you do that changes. I whant/suggest that the program should support a direct open. If you select that the file should open by Protection Scanner it should display the protection then quit. Like the 1.x and if you open the protection ID it will be a GUI.
Now if I whant to open like a .dll file and I suggest protection ID it's just open the program with the GUI then I need to manaly find the file and open it again. Do you understand what I'm trying to say?

I know how to fix that in the install file so it automatik add a string like "Scann with Protection ID" or something. But the thing is that the program need to be supported with that kinds of stuff! Just a suggestion.

[GLH]

He mean an entry "Scan with Protection_ID" in the context-menu of a file.

VERY COOL IDEA !!!

[cdkiller]

hmm cool idea ;)

i have to add some registry entries to HKEY_CLASSES_ROOT
and you should be able to scan an exe, dll or dat when right clicking on it and select "scan with Protection ID"

i´m searching some tutorials about how to do this.
can u also search tutorials for TASM like
"adding own contect menu"...

maybe there are some TASM coders in this forum who can help.

[cdkiller]

a new release is out, it´s version 2.2 :D

* added Codelok support (i.e. Gangsters2.exe, thanx Krondike)
* added detection wich group cracked a VOB Protect CD protected file
* Slovak Protector detection rewritten (old one did only work with one executable)
* fixed bug wich made the ProtectionID to not detect Safedisc V1
* fixed bug wich doesn´t free allocated memory after scanning with the "Scan" button
* better UPX detection (i.e. in german Devastation.exe)
* smal Tweaks to SecuROM Version detection code
* faster Safecast detection
* some spelling "bugs" fixed ;)
* scanning for 1 more CD-Check:
- "ValidateCD" (Splinter Cell´s Core.dll)

i have a website for protection id ready it´s http://protectionid.topcities.com/

[krondike]

Originally posted by cdkiller
hmm cool idea ;)

i have to add some registry entries to HKEY_CLASSES_ROOT
and you should be able to scan an exe, dll or dat when right clicking on it and select "scan with Protection ID"


I can do the regedit part with the setup file I first created to you. (if you like the setup file, if you do I might need if you whant a Licence agreement and I should convert your HTML file TXT file with your permittion)
I've still got the template ;) So is no ther should be a big deal to reg and unreg with the setup file.
I already mannage the desktop icon thing.
(you can do it public for those who whant. Or they can request to me.)

@GLH:
:D you don't need the _ part. or is the name for the program Protection_ID or Protection ID? if there are the first I need to rename some stuff :rolleyes:

[GLH]

Don't know if it name is "Protection ID" or "Protection_ID".
I think it's not so important, or?
(But the file name is PROTECTION_ID.EXE, so i was thinking that's the name.)

CDKILLER HAVE TO CREATE A RULE: "WHAT'S THE REAL AND FOREVER UNCHANGEABLE NAME OF MY VERY COOL TOOL" (lol)

[cdkiller]

THAT'S THE REAL AND FOREVER UNCHANGEABLE NAME OF MY VERY COOL TOOL:

---> "Protection ID"

the executable is named Protection_ID to avaid a compiling problem with the TASM.exe...

[krondike]

So I was right then..mohaha...

[GLH]

Hi CDKiller, you are back with 150 MByte !!!
But you're not up-to-date.
There is Protection ID V2.1 for download, but i have downloaded V2.2 a few days ago.... ?

[cdkiller]

i´m still searching for another webhoster.
cause yet i have a 12 MB traffic limit per hour :(
so the site is mainly down...

but i also have an extra page for Protection ID.
see my signature.

[cdkiller]

v2.3 rlsed, now i´ll take a break

* added scanning for SecuROM version in SecuROM unwrapped files
* detection if a Codelok encrypted file has been cracked by a group
* fixed a bug where it wasn´t possible to detected if Safedisc V1 has been cracked
* fixed: memory won´t be freed when no protection was found
* some more tweaks
* added a Creditz.com file, only 904 Bytes ;-)
* scanning for 2 more CD-Checks:
- "CD missing" (Tactical Manager 3)
- "CD in" (X-Plane 6.5x)

you can help me with v3.0 when you got a source or tutorial with
maybe a tray icon or an entry to the context menu of a file.
should be in TASM.

thanx
/cdkiller

[podunkviller]

nasm is more l33t ;)

[cdkiller]

i don´t want to change to nasm... i´m staying with tasm it´s good and fast ;)

[podunkviller]

i guess ill have to bridge the gap between the 2 this summer then ;)

[cdkiller]

version 2.4 will be release into the next 2-3 days.
it supports securom with random sections, wich us used in some newer securom games and of course other bugfixes.

[cdkiller]

v2.4 is ready to fix some bugs

* SecuROM with random sections will be detected (i.e. Championship Manager 4 v4.04)
* generic SecuROM detection improvements
* added Message wich asks you if you really want to scan a file wich is bigger than 20 MB (requested by Krondike)
* fixed a bug wich don´t detect if a file with CD-Checks has been cracked by Dynasty
* only one Logo (thanx to Monty Burns who made it) for smaller filesize
* new Cracktro.exe
* scanning for 1 more CD-Check:
- "CD PROMPT" (Enigma Rising Tide)

version 3.0 RC1 is also done, but for my testers only (email me)

go go go... ;)

[cdkiller]

i got many mails like: "Great Tool... Can we have the newest RC?...", so i decided to release the 3.0 RC3 to the public.
will be done today when i´m at home ;)

[cdkiller]

v3.0 RC3
-----------
* added: full documented source, maybe i will release it for the public one day...
* added detection if the following protections have been cracked: Starforce / CD Lock / Slovak Protector
* added: two more checks if a file was cracked by Immersion
* improved: rewritten most code for more speed and to allow an easy implementation of new detections
* improved: better Starforce detection and second check (thanx to you know who for some infos)
* fixed: small bug wich don´t detect if a safedisc file was cracked by Drunk (i.e. cracked Big Mutha Truckers.exe)
* removed: ASPack detection (not used in Games, exept Domino Day)
* added: scanning for 1 more CD-Check:
- "NoCD" (Gun Metal)

it´s not final, it´s still Release Candiate...
i´m on bug tracing for the next time.

[cdkiller]

here it is, and it´s a blast ;P

* added: Shell Context Menu "Scan with ProtectionID..." for exe/dll files (thanx to a friend for coding this)
select an exe/dll you want to scan -> right click on it -> Scan with Protection ID...
* added: Commandline support (Protection_ID.exe -scan filename)
* added: detection if the following protections have been cracked: Starforce / CD Lock / Slovak Protector
* added: detection if a file was cracked by Team FAS
* added: two more checks if a file was cracked by Immersion
* changed: a warning will now pop up when scanning a file wich is bigger than 30 MB
* changed: scanning first for UPX and SVKP and then for commercial ISO Protections
* improved: rewritten most code for more speed and to allow an easy implementation of new detections
* improved: better Starforce detection and second check
* improved: optimized some CD-Check detection strings
* improved: Cracktro.exe
* fixed: small bug wich don´t detect if a safedisc file was cracked by Drunk (i.e. cracked Big Mutha Truckers.exe)
* fixed: missing param in ExitProcess (thanx for reporting)
* fixed: small bug in safedisc detection wich could slow down scanning speed
* fixed scanning bug for a german error message (Red Faction 2)
* removed: ASPack detection (not used in Games, exept a dll from Domino Day)
* added: scanning for 3 more CD-Checks:
- "CD not found" (Legion Gold)
- "NoCD" (Gun Metal)
- "CD-ROM drive" (Thorgal)

thanx to all my friends who helped me with coding,
testing and bugfinding / bugfixing :D

[Mplayer-Warlord]

One word " Awesome " :) keep it up bro

[cdkiller]

next version will support execompressor / encrypter like
ASPack, teLock, PEPack, Armadillo...
wich are used in shareware tools and commercial appz.

[cdkiller]

v3.1
----
* added: *.reg file for uninstalling the context menu for exe / dll files
* added: ASPack detection (i.e. Dr.DivX´s prot.dll)
* added: EXE32 Pack support
* added: EXEStealth detection (used in some shareware tools)
* added: FSG detection (often used with Keygens)
* added: Lamecrypt detection
* added: NFO encrypter detection
* added: Noodle Crypt detection
* added: Obsidium Software Protection detection
* added: PE Bundle detection (contains extra dlls in the executable)
* added: PE Compact detection (i.e AdAware 6.0 Plus executable)
* added: Petite detection
* added: Yoda Crypt detection
* added: second check if a file was cracked by Drunk (ie. Gothic II)
* changed: starting Protection.ID will not force the fileopen dialog to show up anymore
(it was needed for the Commandline support, but i found a solution for it...)
* changed: Protection ID will quit after showing wich protection is used, when scanning with the shell context menu
* improved: About Message changes, centered text
* removed: detection wich group cracked the Slovak Protector (no need for it...)
* added: scanning for 1 more CD-Check:
- "the CD-ROM" (Close Combat 5 v5.01)

if you know some appz protected with commercial exe / dll encrypters or compressors drop me a mail and i will add support for it in the next version...

[cdkiller]

v3.3 PUBLIC is ready for download.
it improves the safedisc detection and adds support
for some more executable compressors.

v3.3
----
* added: detection for Anti Crack Software Protector
* added: detection for Special EXE Password Protector
* added: detection for Xtreme Protector
* added: detection if the Slovak Protector (SVKP) has been cracked
* added: detection if a file was cracked by Razor 1911
* improved: Armadillo detection
* improved: speed of Safedisc / Safecast scanning routine
* improved: Safedisc will be detected if the version info was removed
* added: scanning for 1 more CD-Check:
- "NOCD" (Waterloo - Napoleons letzte Schlacht)

i decided to not include the files in an installer.
so if u have any problems concerning the shell context menu 'Scan with Protection ID...', write them down in this thread.

time will show if i´ll continue the public version...

[cdkiller]

new version ready to download.
forget the ClonyXXL **** ;)

v3.4
----
* added: detection for PE Diminisher
* added: detection for PEnguincrypt
* added: detection for PE Lock
* added: detection for WinKrypt
* added: detection if a file was cracked by NEMESiS
* added: scanning for CD-Checks in iMMERSiON and RAZOR 1911 releases
* added: second detection if a file was cracked by GiMPSRUS (i.e. Real War v1.6)
* improved: cleaned up SecuROM detection code
* improved: FSG detection and scanning speed
* improved: AC Pack detection
* improved: detection if a file was cracked by MYTH / DEViANCE
* improved: formated most messages
* removed: MessageBox when the selected file is bigger then 30 MB
* fixed: Messagebox when scanning for CD-Checks in a FAiRLiGHT release

@ Eagle
time to update your mirror

[krondike]

Can I ask you... HAVE RAZOR 1911 and R!SC coperate?
Becuase when you unwarping with unsafedisc 1.3.3-> the RAZOR 1911 taging are in the .exe file.
And when you scan with Protection ID it's found the RAZOR 1911.

Any way, and when you delete those tag (will not say ;p) it's cannot find R!SC tag.... why haven't to you make it scan for R!SC tag? Isn't/where he/they a big and good crack/cracker? :confused:

[ByteMare]

Originally posted by krondike
Can I ask you... HAVE RAZOR 1911 and R!SC coperate?
Becuase when you unwarping with unsafedisc 1.3.3-> the RAZOR 1911 taging are in the .exe file.
And when you scan with Protection ID it's found the RAZOR 1911.



Who knows :) But R!sc implemented a random tagger in his tool,
therefore you're not getting the same tag everytime you use the unwrapper.


Any way, and when you delete those tag (will not say ;p) it's cannot find R!SC tag.... why haven't to you make it scan for R!SC tag? Isn't/where he/they a big and good crack/cracker? :confused: [/B]

First, it's ****ing lame to remove the tags just because you want to claim that you have cracked the game. That is plain bs cause you've only used someone elses hardcoded tool(s) to auto-remove the crap. Well, I guess CDkiller can pick the tags outta the USD source and include it in his tool (a very nice one :) )

R!sc is still a very good cracker, but this starts to look like some "scene"- discussion, which might end up with wareztalk..
And I don't want the mods to kickban my sweet, shiny ass
:D

[cdkiller]

lol i just received that mail:

I am a re seller who has a customer interested in your product...can you provide me with federal discounted or reseller pricing? Thank you!

Sarah E. Hazel
Account Manager
GC Micro Corporation
100% Small, Minority and Woman-Owned with SDB Certification
tel. 800-426-4276 x226
fax 415-883-9471

don´t know what to think of it ;)
imagine protection id will gone retail...
but this will never happen...

--------------------------
@ krondike
why haven't to you make it scan for R!SC tag?
that´s why i have a private version of protection id :D

sure r!sc is on of the bests crackers around there.
but please stop talking about 'scene happenings' in this
PUBLIC forum...

--------------------------
@bytemare

I don't want the mods to kickban my sweet, shiny ass
won´t happen, coz u bring a lot of fun into this forum ;)

[ByteMare]

OMG!! Jeez, that must be one of the funniest things I have read here...

Bet the customer is Macrovision or Sony:D Maybe you should sell it to them with some EULA like "you are allowed to used this on copyprotected disc (i.e Macrovison Safe****, Sony Sexxurom). If you do, you must ask the companies to remove the protection first)..yeah, you know the drill..

[cdkiller]

haha it becoms even more funny with this mail :D

---------------------------
information about your app protection id,
i´m making a book where i talk about software security,
i wanna talka about your app in this book but i need your express permision ?
---------------------------

lol some guy want to write a book and will mention my tool(s)
inside :rolleyes:

[seaneyb2003]

hey can you send me your program it looks pritty good

[cdkiller]

lol read my signature and u know where to get it.

download it from the first Mirror.
disable downloadmanager and popup blocker
or the download will fail.

[ByteMare]

Originally posted by cdkiller

lol some guy want to write a book and will mention my tool(s)
inside :rolleyes: [/B]


Damn, you gonna get famous:D I don't see the connection between software security and your tool though...hmmm...
scanning the exe and getting the "group-tags"/ protection + version etc. is no big thingie...but hey! What the hell!:rolleyes:

[krondike]

Got a bug report!

When you scan mod.dll for Battlfield 1942 1.45 cracked version, is do a forbidden thing, in Windows XP, protection ID 3.4

[cdkiller]

can u mail me a picture of the windows msgbox,
wich says 'error at offset xxx...' ?

i´ve scanned the BF1942 MOD.dll cracked by iMMERSiON
and ProtectionID showed the message: cracked by iMMERSiON
no error...

but i used v3.5 for scanning ;)
(maybe i will release it next weekend)

[krondike]

Ehm in Windows XP home edition SP 1, it's no problemo...

But I have Windows XP PRO SP1 (+ latest updates) at home....at there are problemo there...I send you over screen pic if I got the same problem again. :o

[krondike]

I've got a big suggestion. Maybe so big that's it's should be calling 4.0

You should add a button, that scans all the CD:s (even the face ones) what protection the CD have. Becuase some CD:s miss .exe file, to scan, and you must first install the game before you can see what protection the game had.

BUT when the NO cd are mounted or iputed to the cd driver, the button is grey and you can't push it! ;)

And should detect everything from, SafeDisc to Playstation, X-box disc...

ONE BIG suggestion...:D

[TippeX]

Originally posted by krondike
I've got a big suggestion. Maybe so big that's it's should be calling 4.0

You should add a button, that scans all the CD:s (even the face ones) what protection the CD have. Becuase some CD:s miss .exe file, to scan, and you must first install the game before you can see what protection the game had.

BUT when the NO cd are mounted or iputed to the cd driver, the button is grey and you can't push it! ;)

And should detect everything from, SafeDisc to Playstation, X-box disc...

ONE BIG suggestion...:D

the reason they probably cant find any protection on a cd is because the exe might be packed in a .cab file or whatever...

last time i checked you cant read xbox dvd's on a pc.. if you're going to suggest things suggest things that you know about.

[ByteMare]

In this case, scanning the cab for a possible protection is just a waste of time, it's much easier just to install the soft and then check it.

Don't know about the format of the xbox disc, but I guess the old
m$ added something mean, which probably stops you from even creating/mounting images and check them. As mentioned, I don't know much about the format....

[cdkiller]

it's much easier just to install the soft and then check it
and ProtectionID will only be developed in this way...

i don´t have much knowledge about the Console Protections
like PS2 / X-BOX.

btw, GLH told me i got competition ;)
http://kskiller.copybase.ch/

nice GFX, but the rest will be ****ty...
developed by 'KS Killer' lol, can´t wait to test his tool.
but it will never beat ProtectionID :D

expect version 3.5 to be released later today.
i just need to fix a bug with the Neolite detection...

[cdkiller]

v3.5
-----
* added: detection for Neolite
* added: detection for PE Nightmare
* added: detection for PE Ninja
* added: detection for PE Shield
* added: detection for PeX
* added: detection for Softdefender
* added: detection for VGCrypt
* added: Easteregg ;-)
* improved: CD-Check detection strings and messages
* improved: detection if a file has been cracked by RAZOR 1911 (Age of Wonders: Shadows of Magic v1.10)
* improved: detection if a file has been cracked by DRUNK (Enigma Rising Tide v1.1)
* improved: general code optimizations

@ krondike
if u still got the error, make a pic wich shows the offset and mail it to me.

[krondike]

Isn't I the best. Took me 3 seconds to find the easter egg!

Here are a pic to proof it. But it's censure becuase. I don't wanna tip off others that haven't found the Easter Egg. ;)

[RincewindTheWiz]

I like my easter eggs to be made of chocolate :D

[cdkiller]

I like my easter eggs to be made of chocolate

sorry but it´s only a MessageBox ;)

[ByteMare]

As long as there is no giant f-cking bunny popping up on the screen, i'm stick with the egg...

"Holy sh-t! I put a bpx on OEP and giant freaking bunny with green teeth bounced up on the screen, it was unbeliveable"

*arf*:D

[krondike]

@CDKiLLER
an internal bugreport has been mailed to you! some of them...very funny....:D

[cdkiller]

thx for the test report u mailed me.

i know most of the bugs and they are already fixed.
but i will release a bugfixed version to the public in 1 or 2 weeks.

Neverwinter Nights Manual.pdf
heh don´t scan pdf files ;)
version 3.6 only alows scanning for executable files.
(i check the exe/dll/dat for the exe strings MZ / PE).

Cracked mod.dll (Battlefield 1945) version 1.45.
hmm it doesn´t crash for me... but i will trace my code to find
the cause.

RavenShield.exe version 1.41 drunk
fixed

Adobe Reader 6.0 SV version, pecompact
it´s really PECompact and i doubt there is an easteregg ;)

[Eagle]

... too lazy to look for an easter egg :) ...

[krondike]

Originally posted by cdkiller
heh don´t scan pdf files ;)
version 3.6 only alows scanning for executable files.
(i check the exe/dll/dat for the exe strings MZ / PE).

Haha but you know...there are only SOME PDF-files there are wrong....ehm, message. And I was tired to scan .dll and .exe files :p. But hope you put an special message for unsupported files ;)

[cdkiller]

the bugs u reported are fixed.
i´ve sent u v3.6 beta to test...

[krondike]

Well I am impress :D

Battlefield 1942 working great!

And I've seen you added "scan for cd-checks" in a cracked SecuROM message.

But look at this:

UPX0....................................UPX1.....0 ... ..."..................@...UPX2.........P.......&.............. ..`UPX3.........`.......6..
this is from ColdFusion shouldn't Protection Scanner find UPX compress?

And when I've scan a none .dll, .exe, .dat file, it's says "not a valid .exe file" and more, but the thing is. after that message, the scanner crash. Maybe that's a god thing....or not...:D
What happen to -> 20MB limit question?
I've scanned battefield 1942 1.41 patch that's about 130 MB or something... took very long time.... :p

Anyway great program! You have done well with bug fixing ;)

[JoyBoy]

Scan Razor's crack for that new Nascar update... ;)

[GLH]

When i scan the original/not cracked YDKJ4.EXE (You Don't Know Jack 4 / german version) Protection ID V3.5 tells me
"File was protected with SecuROM. But the protection has been cracked."
But when i want to play the game with a normal backup cd insert it tells me the SecuROM "Wrong disc" message...

@CDKiller:
If you want the original exe tell me. I will send it to you. (Its RAR 2,2 MB)

[cdkiller]

lol Nascar_Racing_2003_Season_v1.2.0.1_Patch-RazorDOX
is lame ;)

@krondike
UPX will now be detected even if the sections and the tags are removed.

"not a valid .exe file" + crash => it was a bug with the multiscan feature, now fixed.

@glh
i know about this problem with the newer securom.
i´m still on bugfixing the securom code.

[krondike]

I've got a big suggestion again... when you mark more then 1 files, and right click and "Scan with Protection ID" many protection id console are open... what about just have one protection id console but many message... istead....


There are still problems with UPX detection... I've compressed an .exe file with UPX and it's don't find it.

UPX0....................................UPX1...... ..........................@...UPX2................ ................ ..`UPX3.....0.......$... ..............@..@$Id: UPX 0.72 Copyright (C) 1996-1999 Laszlo Molnar & Markus Oberhumer $..$Id: NRV 0.61 Copyright (C) 1996-1999 Markus F.X.J. Oberhumer $..$License: NRV for UPX is distributed under special license $.

but his work

.......................UPX0....................... .............UPX1................................@ ....rsrc....0.......,..................@.......... .................................................. .................................................. .................................................. .................................................. .................................................. .................................................. .................................................. ......1.20.UPX!........i.&n.h..=.......&..V

edit: (hehe i found a forum bug also)

my gues is that the protection ID is looking for UPX! as a tag....


SafeDisc 2.10 is found in a cracked SafeDisc 2.10 file..
Black And White cracked .exe file with out any tags! So should protection ID detect it's.....

[cdkiller]

ohh yeah the upx detection for versions older than v1.0 is now fixed.
yes it´s right i am looking for 'UPX!' in the header but also for some signature bytes and a special UPX byte pattern.
(i need to update my code to support the very early UPX version)

i can´t just check for UPX1,UPX2 coz it could be TeLock (nasty!).
but v4.0 detects TeLock now really proper :)

i´m downloading the cracked B&W.exe to check it out.

[krondike]

I have notice one problem. Protection ID 4.0 BETA.

........UPX0.....p..........................@...UP X1.....@.......:..................@....rsrc.... ...........>..............@....aspack.........

Protection ID find UPX protection..... it's not..becuase you can't extract it with UPX...so I think it's "aspack" protection...acourding to "aspack" tag...so...maybe there are som problem here...:D

[cdkiller]

test the newest beta i´ve sent u ;)
it´s a huge list of improvements...

the code snipped from the header was patched by u manually,
coz no known packer adds this sections together.

but PiD will greatly improve scanning, coz it checks for specific byte patterns for each version of a packer / encrypter and not only the section names...

[krondike]

4.0 BETA 3 first bug.

Please see the image and add the text your search for CD-checks! ;)

[cdkiller]

it will not be detected coz it´s a DLG Reference...
(p.l.e.a.s.e...in.s.e.r.t....) i don´t scan for dlg refs, coz this really
slows down the whole scanning speed and is used only in a very few games...

you know that the tron2.exe has additional cd-checks ;)

[krondike]

Well in the UK version of TRON 2.0 there isn't any tron2.exe there is a tron.exe and a Lithtech.exe.

Lithtech.exe is protected with SecuROM.

tron.exe has CD-Checks in it.
(I've manage to get the root of the CD-Checks and dissable it)

But the image I showed you, is what the user se. But there are some other text string to in the .exe file. But if you do this, if you search for "disc" or "tron2.exe" than you know it's protected with CD-checks..becuase how many programs/games has text string call "tron2.exe" ?

but it's strange that there isn't any file call tron2.exe in the folder.....:confused:

[cdkiller]

if you search for "disc" or "tron2.exe"

many exefiles can have the string 'disc' inside so i won´t scan for it. like i said, i only check error strings and no dlg references.
dlg references like in tron 2.0 are used only in a very few games.

about the v4.0 release... it should be around next week.

[cdkiller]

v4.0 is released and it´s the most enhanced version ever...

Changelog v4.0
--------------------
* added: new logo by Eboy [SAC]
* added: check if the scanned file is a valid Executable
* added: message when scanning files >20 MB
* added: scanning for CD-Checks in cracked SecuROM files
* added: detection for ASProtect
* added: detection for BJFnt
* added: detection for Def v1.0
* added: detection for Exe Bundle
* added: detection for ExeProt
* added: detection for Krypton
* added: detection for PE Mangle
* added: detection for PE Pack/Crypt
* added: detection for PhrozenCrew PE Shrinker
* added: detection for PKLite32
* added: detection for Simple PE Crypter
* added: detection for Stone´s PE Encrypter
* added: detection for TeLock
* added: detection for hacked UPX versions
* added: detection for VBO Watch
* added: detection for VGShrink
* added: detection for WWPack32
* added: more CD-Check detection strings to database
* added: detection if ASPack was unwrapped with ASPackDie
* improved: Armadillo detection
* improved: ASPack detection (v2.11, v2.12)
* improved: CD-Check API detection (now also checking for 'cmp eax,5')
* improved: CodeLock detection
* improved: FSG detection scanning speed + support for hacked versions
* improved: Neolite detection
* improved: NFO detection
* improved: Noodle Crypt detection
* improved: Obsidium Software Protection
* improved: PEnguincrypt detection
* improved: PeX detection
* improved: Petite detection scanning speed + support for hacked versions
* improved: VGCrypt detection for both encryption modes (added section, installed code into cave)
* improved: SecuROM detection code optimized
* improved: detection if a file has been cracked by CLASS
* improved: detection if a file has been cracked by DRUNK (i.e. Runaway Train: A Road Adventure)
* improved: detection if a file has been cracked by DYNASTY (i.e. Gothic 2 AddOn)
* improved: detection if a file has been cracked by MYTH / DEViANCE (i.e. American Conquest Fight Back, Chrome)
* fixed: UPX detection bug
* fixed: 'lame' bug in Razor 1911 SecuROM detection ;-)
* fixed: ProtectionID cannot be started more than once at the same time
* fixed: some grammer issues (thx Bounty Warrior)
...and finally the easteregg has become a picture...

[GLH]

Wow! What a huge changelog...

Some questions:
- is it wanted that the EasterEgg only get closed when PID4.0 is closed
- when i scan my cracked Chrome.exe it tells me it is protected with securom 4.8.. and not cracked
- when i scan the Lemmings Revolution cracked exe, you've maked for me, it tells me protected with CD Check and not cracked by you.

[RincewindTheWiz]

Originally posted by cdkiller
* fixed: some grammer issues (thx Bounty Warrior) grammAr. And who are you going to thank for this correction ? :D

[cdkiller]

is it wanted that the EasterEgg only get closed when PID4.0 is closed
yes ;)

it tells me protected with CD Check and not cracked by you
i dont scan for my tags anymore...

wich chrome.exe do u use ? i guess the one from Keops...
(i tested the flt nocd and it works fine)


grammAr. And who are you going to thank for this correction ?
:rolleyes:

[Eagle]

now i got the easteregg, damn that took me a loooong time :D

[krondike]

First bugg report from me.

Age of Wonders - Shadow Magic is protected with new SecuROM 4.8->

And the protection id says it has already been cracked, on the original 1.1 file and the original 1.2 file :p

Edit:
And the same for Vietcong 1.4.

[cdkiller]

i know this problem, it´s caused only by a very few games...
most securom games will work, but i´m on the way to fix this problem with PiD v4.1 when i got some more time...

[Zurke]

I found this site because I was searching for the developer of Protection ID.

I downloaded it as freeware.

When I used an unRAR to open it the "cracktro.exe, notes.txt and install.reg file were extracted.
But when I try to access the Protection ID.exe I get prompt for a password.

I was under the assumption this was a freeware. Is there a cost to this program that would then give me a password?
Or am I missing something?

The program sounds great and I am impressed with the knowledge of the owner and the threads I have read on this post.

Hope to hear from someone.

[Eagle]

a password? not that I know.

re-download it from my mirror (eagleeye). I _definatively_ have no password.
And please make sure you have the latest version of WinRAR!. Check www.rarlabs.com for that.

[Zurke]

to find your mirror site Eagle.


Is it the site in your profile?

[Zurke]

Thanks again Eagle.

I must have been the unRAR I was using.
I did download WinRAR and it worked swwweeet.

[krondike]

Razor must had very fun to exploring you Protection ID...

[cdkiller]

i decided to put out v4.1 wich fixes some bugs...

v4.1
-----
* added: more CD/DVD-Check detection strings to database (i.e. Chaos Legion, Kelly Slaters Pro Surfer, NHL 2004)
* added: detection for more UPX versions
* improved: CD/DVD-Check detection
* improved: detection if a file has been cracked by DRUNK
* improved: detection if a file has been cracked by HiGH SOCiETY
* improved: detection if a file has been cracked by MYTH (i.e. Desert Thunder)
* improved: scanning speed of Multiscan function
* improved: SecuROM detection (hopefully fixed the 'was protected with SecuROM but has been unwrapped' bug in non-cracked files)
* fixed: Bug when scanning more then 2 unwrapped Safedisc files wich always showed 'No additional CD/DVD-Checks'
* fixed: Bug in unwrapped SecuROM files wich says 'Protected with additional CD-Checks' caused by a certain string
* fixed: crashbug when scanning files < 4 KB
* fixed: SecuROM version bug (i.e. PiD v4.0 detected SecuROM 4.84.85.0017, but real version is 4.84.85 only)
* removed: detection if a game was cracked by RAZOR 1911 due request

@krondike

check again the Age of Wonders - Shadow Magic from your first bug report and also the other exe files.

btw, i had to shorten your post ;)

[Eagle]

mirror updated (only for cdkiller)

[cdkiller]

However you find SecuROM but the version ID isn't displayed
i know, so i decided to check for securom but don´t display the version coz new securom has some internal changes.
but i´m watching for new securomed executables...

Age of Wonders - Shadow magic 1.2 , it's crashes.
thx for reporting, it´s now fixed.

ITS NOT RECOMENDED TO DOWNLOAD THE NEW VERSIOIN
blablabla ;)
just the securom detection will maybe not work for newest prots.
sure i will fix it soon when i got some games to test.

it´s recommed to download this version, coz it´s the latest wich contains many bugfixes since v4.0

[krondike]

hehee sorry about that, but just saying, becuase it's crashes, don't do "any new" things to the Protection ID it bring some new bug and fix some old bugs :p
Sound like Bill Gate....anyway... should we say, download at your own risk? :p

[Sloopy_DE]

Hi,

i'm using your ProtectionID tool for quite some time now and i'd say: "GREAT TOOL" !!!

It's really great and i just want to encourage you to keep up your good work.

Besides, i have a somewhat offtopic request: I've got my hands on a program protected with ASProtect 1.23 and as you seem to have some experience with protections, maybe you can help me with it? Or you know someone? E-Mail or PM me, please.

Sloopy_DE

[krondike]

go to http://protools.cjb.net/
there you can find an unpacker! :cool:

[cdkiller]

a fresh new version is ready...

v4.2
-----
* added: detection for SecuROM newer than 4.87.00 (thx to CirKutz)
* added: detection for more Armadillo versions
* added: detection for more TeLock versions
* added: detection for Akala EXELock
* added: detection for Stealth PE
* added: more CD/DVD-Check detection strings to database (i.e. Secret Weapons over Normandy)
* improved: SecuROM detection code
* improved: VOB Protect CD detection
* improved: ACPack detection
* improved: BJFnt detection
* improved: Exe Bundle detection
* improved: ExeStealth detection
* improved: FSG detection
* improved: Pex detection
* improved: PE Bundle detection
* improved: PKLite32 detection
* improved: Shrinker detection

[krondike]

You still got a problem (report it earlier don't know if you was taking notice) your protection ID gui, sometimes remains after you scan a .exe file (when you hit the context meny.

If you run protection ID (without context menu) and find your easter egg (what ever meny) you can't close it in the X mark! You must quit the program.

Da**it should seen it earlier!

(This should be fast fixed (becuase it's not big buggs - thinks protection ID is somehow still loaded in the memory when you after you scan then when you click on the mouse on the background it dissapeares) or do you waith to PiD 5? :D)

A mirror has been created
http://members.lycos.co.uk/krondike/forum/index.php?showtopic=82

[munsterbuster]

Question:

Where is the part below the easteregg?? :D

[krondike]

Originally posted by munsterbuster
Question:

Where is the part below the easteregg?? :D
What? Do you wonder where the you can find the easter egg :p well do some research... ;)

[munsterbuster]

No, I've found it but i miss the lower part of egg.

[JoyBoy]

You get to see the rest of her (her being Jordan, who I hear is good at doing :o and :eek: ) when you actually buy the premium version of the software. Check cdkillers site for pricing details. ;)

[krondike]

Originally posted by BountyWarrior
You get to see the rest of her (her being Jordan, who I hear is good at doing :o and :eek: ) when you actually buy the premium version of the software. Check cdkillers site for pricing details. ;)

HAHAHAHAHAHA that's totaly true. And if you whant more than 5 licence you can always contact CDKiLLER for price information... :p

[cdkiller]

Where is the part below the easteregg??

when i include the whole pic, the filesize will be bigger than
400 KB, so i decided to include the upper part only ;)

[krondike]

Originally posted by cdkiller
when i include the whole pic, the filesize will be bigger than
400 KB, so i decided to include the upper part only ;)
You could cut off the head and add the belowing part? :p who cares about the middle part :D

[chaosmaker]

Another Scanner has hit although it's in it's infancy it is detecting tages, securom and safedisc.

[cdkiller]

i´m sure u mean the A-Ray Scanner.
it´s a nice tool for scanning the cd, still in beta but can be a good detection scanner in the future thou.

i would say my scanner is completely different...
both tools are coded in different programming languages.
A-ray scanner´s goal is to scan the cd and check for game protections while my tool scans the protected exe/dll/dat directly and also checks for executable protectors and encrypter used in applications.

maybe the future shows a big surprise for both tools ;)

[cdkiller]

Protection iD is now exactly one year old on february 1st 2004.
It´s constantly updated to detect all at the moment availabe PC Game Protections and most of the EXE / DLL protectors.

The final v5.0 still requires much coding, testing and bugfixing, so i decided to release my current Beta
(and maybe some more soon...) on the net to give you the most accurate detection possible.

greets to all my friends for all the effort you put into my tool, making it what it is today, one of the best Protection Scanners.

here´s the changelog:

v5.0 BETA 3
----------------
quote from Tages developer: 'A tool that is able to detect correctly a TAGES™ protected CD does not even exist'
answer: sorry i was busy with other protections, but here we go..
btw, did u heard about A-Ray Scanner ? greets R!co ;-)

* added: detection for Tages (non generic because i´m waiting for new Tages games to get em generic.)
* added: detection for Laserlock version (if detection is possible...)
* added: detection for Starforce version (not possible for all versions)
* added: detection for Air ExeLock
* added: detection for Perplex PE Protector
* added: detection for UPX Scrambler
* added: more CD/DVD-Check detection strings to database (i.e. Fire Starter, Massive Assault, Apache Longbow)
* added: scanning in all files wich are valid PE files (i.e. in Lords of Everquest, the Lords.ree is SecuROM)
* improved: new protection string database with only the half size of the old one
* improved: Starforce detection
* improved: ASPack detection
* improved: FSG detection
* improved: Krypton detection
* improved: Neolite detection
* improved: PE Compact detection
* improved: PE Shield detection
* improved: Softdefender version checking
* improved: Stealth PE detection (a bit tricky this one...)
* improved: VBO Watch detection
* improved: checks if a file was cracked by an iso / dox / rip group
* fixed: all possible crashes with the help of an UnhandledExceptionFilter
* fixed: bug wich closes Protection iD when closing the Easteregg window
* fixed bug in 'unknown ASPack' version detection, not showing ASPack
* fixed: ASProtect detection bug who detects the protector if it finds the '.asprot' section only
* removed: checks for possible CD-Check APis (i got enough CD-Check strings wich should find the checks)
* removed: checks if a VOB Protect CD or SVKP protected executable has been cracked

[GLH]

Hello CDKiller,

i would say i found a bug in PID5.0b3.
When i click on "Multi Scan" and find a protection in a file, i can click on OK and then the "gimme a file to scan :P" dialog don't open again.

[Eagle]

I cant reproduce this 'bug' :confused:

must be your computer :p

[R!Co]

Greetings to cdkiller ;) nice job m8

[cdkiller]

@ GLH

for me it´s working fine... i don´t know whats wrong.
but i´ll see if i find a possible bug. maybe only after a certain protection was found, the bug appears.

@ R!Co

thx m8 i´ll do my best to keep it up to date.
nice to see your scanner comming along quite fine too.

[GLH]

Now i'm going confuse :confused: :confused: :confused:

I tested it again. Test game is "X2 - Die Bedrohung".
When i scan the original X2.EXE yesterday it was telling me "Securom 5.00.03".
When i scan it now, it tells me "Starforce" and "Scan the protect.dll". Then i turn to dll-files and scan the protect.dll and it found Starforce 3.0 . After that the open file dialog don't open again in MultiScanMode.

And then it going really mad. I click again on MultiScan and scan once again the X2.EXE and the PROTECT.DLL and nothing is found !!! Only after EXIT the PID5.0b3 and restart it i will find Starforce again.

I'm really confused .............


EDIT:
OK. The problem that i found SECUROM yesterday is "solved". Yesterday i was thinking the X2.DEV (from DEViANCE Crack) is a renamed original exe (for redirecting file checks). When i rename X2.DEV to X2.DEV.EXE and scan it, SECUROM5.00.03 is found. Scanning the real original exe (after reinstalling the game) brings me STARFORCE3.0 .

[R!Co]

I am sure cdkiller will fix it :)

[cdkiller]

I am sure cdkiller will fix it
yep already fixed.
the multiscan option had a bug wich closed the fileopen dialog after scanning a securom file.

[Foges]

dear cd killer, i was looking at your credits for protection id and i noticed that there was noone with a capital i (I) in thier name, not even your i in protection "iD" why is this??

[cdkiller]

hmm i dunno. i think it looks smarter with i.e.
'PROTECTiON iD' instead of 'Protection ID' ;)

[EMPiRE]

small bug:

scanned game.exe: SecuROM 4.83.52

scan for cd-checks -> Couldn't.... protected with safedisc only

[cdkiller]

thx EMPiRE for reporting the bug.
anyway it´s fixed now and my next release v5.0 FiNAL
was improved and tweaked in a heavy way.
so expect a nice surprise ;)

[Uncle Cracker]

Hi cdkiller,

I have found bug in PiD. Because if I scan a compiled Delphi source, then I get the following message:

File is protected with Air ExeLock!
A valid passport Word is required to run it.

Compressor-> ASPack v2.12

Even if I copiled an empty source this message also appears, anyway which Delphi-Version I use.

If I should send you an example, say it.


Bye Uncle cracker

[cdkiller]

yeah i know, it´s funny because my old v5.0 Beta 3 will detect
'Air ExeLock' in every Delphi compiled exe.

of course this bug is fixed in my v5.0 FiNAL ;)

[cdkiller]

i uploaded 3 preview screenies of my current *private* version.
check my site http://www.protectionid.owns.it/.

hope u´ll like it ;)

[Eagle]

now that looks cool!

[cdkiller]

updated with 2 more screenies ;)

thx eagle

[cdkiller]

finally here it is !
prepare yourself for a totally new tool :D

greets to all my friends (specially to x/xxx) for all the effort you put into my tool, making it what it is today...
one of the best Protection Scanners for PC Games and Applications.

Features

* scanning of PC Games & Application files to detect the protection used(s)
* detects most of the available executable compressor / crypter and it´s up to date in detecting
the newest PC-Game protections
* scanning CDs / DVDs for Tagés (only available on win2k / winxp, but no ASPI drivers required)
* scan folders with all the included files
* coded in 100% Win32 Assembly language, allowing it to run on every WinOS since Windows 95
* easy scanning with the shell context menu 'Scan with Protection ID...' or drag & drop files into the GUI
* ability to scan a cracked file and to get possible information which protection was originally used
* check for the newest update and download it
* more strong scanning routines allowing it to detect multiple (!) protections in one file
* no additional files like VB Runtimes, MSVC dlls or ASPI drivers are required, you simply need one exe file !
* constantly updated to detect the newest protections available for PC Games & Applications
(hey which other tool has this feature too ? ;-)

* detection for most of the available PC Game Protections
- CD Lock
- Codelok
- Laserlok
- Safecast
- Safedisc
- SecuROM
- Settec Alpha ROM (new !)
- Starforce
- SVKP
- Tagés
- VOB Protect CD
- CD/DVD - Checks
- CD/DVD - Keys / Serials

* detection for todays popular commercial executable protectors including
- ACPack (also known as Ultra Protect)
- Armadillo
- ASPack
- ASProtec
- Petite
- SVKP (Slovak Protector)
- X-Treme Protector

* and also for many other commercial protections including
- Air EXELock (new !)
- Akala EXELock
- Cryptolock (new !)
- E-Zip (new !)
- EXE32Pack
- EXEProt
- EXEStealth
- Neolite
- Obsidium Software Protection
- Passlock 2000 (new !)
- PE Bundle
- PE Compact
- PE Lock
- PKLite32
- Special EXE Password Protector
- Shrinker
- Softdefender
- VBOWatch
- WWPack32

* PiD also detects most freeware protectors
- BJFNT
- cEXE (new !)
- Def
- FSG!
- Krypton
- Lamecrpyt
- NFO
- Noodlecrypt
- PE Diminisher
- PE Mangle
- PE Nguincrypt
- PE Nightmare
- PE Ninja
- PE Pack/Crypt
- Perplex PE Protector (new !)
- PE Shield
- PE Shrink
- PEX
- Simple PE Encrypter
- Stealth PE
- TELock
- UPX
- UPX Scrambler (new !)
- VGCrypt
- WinKrypt
- Yoda Crypt


History

v5.0 FiNAL
--------------
Don´t get me wrong, I labeled it 'FiNAL' because i released a public Beta some weeks ago.
Nor does it mean I´ll stop developing this popular tool ;-)

during the development of v5.0 many things have been added, improved, changed, bugfixed and tweaked.
Protection iD got a totally new core with lots of enhancements, so i don´t write every fix etc
into the changelog because they will make it explode...

also, may I say, my tool is the only one with a 99% Tagés detection.
other tools sometimes have trouble in detecting Tagés or detect Tagés wrong on a CD/DVD where another protection is used.
the Tagés scanning feature is only available on Win2k / WinXP / Win2k3 without the need of ASPI drivers.
soon it will be Win9x compatible, also without any additional drivers !

i want to say 'a very big THANX' to you mate (x/xxx) for all your effort and help u put into v5.xx. u know who u are ! together we brought PROTECTiON iD to the next level !

* added: aggressive scan (read notes) for a more powerfull detection
* added: CD/DVD sector scanning for ISO protections (Tagés only in v5.0, more will follow)
* added: CD/DVD file scanning for all possible protections if executable is present in an uncompressed state
* added: context scan menu for all files (can be enabled / disabled in the GUI) (read notes)
* added: drag & drop support for the GUI, simply select as many files as you want and drop them into Protection iD
* added: folder scanning
* added: glowing buttons to GUI
* added: log window showing all detected protections
* added: online update (systray menu -> support -> check for updates)
* added: progress bar showing total progress of scan to be completed
* added: queue window, displaying the files in queue when doing a multiscan or drag & drop of more than one file
* added: status window displaying the current operations
* added: systray icon / menu (single / multi scan, folder / cd / dvd scan, drop me a mail, check website, download newest update)
* added: updater wich will download the latest version for you (systray menu -> support -> check for updates) (read notes)
* added: detailed information about a program crash
* added: detection for Laserlock version (if detection is possible...)
* added: detection for Settec Alpha ROM (used in Korean games, will hit Europe soon... thx mate for the exe !)
* added: detection for VOB Protect CD version
* added: detection for Air ExeLock
* added: detection for Crypto-Lock
* added: detection for E-Zip
* added: detection for latest EXEStealth v2.74
* added: detection for Perplex PE Protector
* added: detection for UPX Scrambler
* added: detection for latest X-treme Protector v1.07
* added: detection if a CD-Key is required (i.e Call of Duty, Savage, Quake 3 Arena...)
* added: more CD/DVD-Check detection strings to database (i.e. Fire Starter, Massive Assault, Apache...)
* added: scanning in all files wich are valid PE files
* improved: totally new scanning routines (much faster and more stable)
* improved: ASPack detection
* improved: FSG detection
* improved: Krypton detection
* improved: Neolite detection
* improved: PE Compact detection
* improved: PE Lock detection
* improved: PE Shield detection
* improved: Softdefender version checking
* improved: Special EXE Password Protector detection
* improved: Stealth PE detection
* improved: UPX detection (to detect fakes and modified versions)
* improved: VBO Watch detection
* improved: VGCrypt detection
* improved: X-treme Protector v1.00 - v1.07 detection (i.e. Spellforce exe is protected with v1.06)
* improved: checks if a file was cracked by an iso / dox / rip group
* removed: checks for possible CD-Check API Calls (i got enough CD-Check strings wich should find the checks)
* fixed: 4 KB file scanning crash

Aggressive Scan [default: on]
a very usefull feature wich enables you to check if a file is protected by more than one protection.

Games: i.e. you can check if a SecuROM protected exe also has CD/DVD-Checks
Apps: some crypters are faking / hiding the real protection like Stealth PE.
i.e. if you scan an ASPack protected file where Stealth PE is used to hide the real protection, both will be detected by PiD

Context Menu
once enabled in the GUI you are able to scan every (!) file with a right click 'Scan with Protection ID...'

CD/DVD scanning
sector scanning only supports Tagés in v5.0 (for other protections simply scan the programs exe)
file scanning supports all kind of protections.
once Protection iD is started it will pop up a tray icon.
click on it and select 'Scan File(s) / Folders / CD/DVD' -> 'CD/DVD drive file/ sector' -> your drive letter

Auto - Updates
tray icon -> support -> check for updates
will check if a new update is available and it will be downloaded


now grab it from my site and be happy to have one of the most accurate PC Game and Application Protection detector.

[Eagle]

@cdk: mirror updated :)

[cdkiller]

thx for uploading

so ppl use the second mirror if my site is temp unavailable.
http://eagleeye.gmxhome.de/pid.rar

[noyb1]

@cdkiller

First, thanks for the tool, it's a great little gem, your efforts are greatly appreciated.

Second, is this 5.0 final version suppose to be Win98 compatible?

[EDIT] I see that your HTML info file indicates it's suppose to run on every WinOS since Win95 [EDIT]

Reason I ask is, all prior versions, up until 5.0 beta3, worked fine on Win98 box/partition. However, this final version starts up and seems to run okay, but when you either run a scan or just attempt to exit the program, it locks the box solid and only a hard reboot seems to be the solution.

Also, in case it's any help, I noticed that, what best can be described as, a ghost icon image follows the mouse pointer when the box is frozen solid and a reboot is required.

If, it's not Win98 compatible, it's not a big deal, I just keep a Win98 box/partition for testing purposes, etc.

If, it is suppose to be Win98 compatible, then there "seems" to be a bug somewhere, I tend to believe, it's the program and not my OS install, since as stated previously, all other versions of your program worked fine.

[gnozal]

It works under Win9x but it has an interresting 'feature' under Win98SE : when I click on the 'Quit' button (or is it 'End' ?), Win98SE crashes and/or reboots. The same thing if I use Alt+F4 to end Protection_ID.
The only thing that ends it without crashing is to kill the process.

[cdkiller]

atm a Protection_id_v5.0_final_b is in development wich fixes some minor bugs and perhaps (!) the Win9x crash bug.

if it cannot be fixed, i will only support win2k / winxp / win2k3
in my later versions. you will all benfit from this decision
because my tool can have a lot more features in these operation systems.

check the autoupdate or my site to see when the update is available.

[noyb1]

@cdkiller

Thanks for your prompt reply.

Okay, will keep an eye out for the next release.

[krondike]

there is a bug in the PiD 5.0 When I choose to check for an update, it download an "new" file. And then I extract and bla bla bla....it's download the thing again.... so I gues I got the l8est...but Protection ID dosen't think so.....:rolleyes:

[cdkiller]

this bug is already fixed in v.5.0.final.b wich i will release in a few days. when you got the latest version it will display 'no new version available'.

v5.0. final.b also let´s you choose the mirror from where you want to download the newest update. currently it supports my new site (http://protectionid.gamecopyworld.com) and eagles site.

so i suggest everyone to download the new version (once it´s released) so you have the usual bugfixes and a working auto-update feature.

[cdkiller]

as promised here´s the bugfixed version.
you cannot use the update feature because i moved to a new server.
but for all the future versions you can use the update feature to get the newest package.

v5.0b (bugfixed)
sorry for the fixed version... but there were some minor annoying bugs in the FiNAL ;-)

- added: Auto Update feature to support my new website (protectionid.gamecopyworld.com)
- added: Server selection when doing an Auto Update (my mirror and eagle eyes website)
- added: VOB Protect CD [modified version] detection (i.e. Sacred *german* )
- added: 2 more CD-Checks to scan for (MVP Baseball 2004, Battle Mages)
- fixed: Win9x system lock
- fixed: corrupt path names in log window when scanning a rar file
- fixed: [!] Unknown Protection issue when file is non executable or too small to be executable
- fixed: CDCheck bug displaying 'No Protection found' when certain CDCheck strings were found
- fixed: SecuROM detection when no version (crypted or unencrypted) was found
- fixed: LogWindow cursor now shown as normal cursor and not like the I-bar one

thx again x/xxx for all your help !

[noyb1]

@cdkiller

Haven't had the time to do a full test of "everything" as yet. However, every problem I encountered with the prior version, seems to be resolved now and overall seems to work fine. Great job, much appreciated, thank you.

[cdkiller]

every problem I encountered with the prior version, seems to be resolved now and overall seems to work fine

thx nice to hear :D

[adrian666]

ProtectionID_v5.0_Final_B

i downloaded this file in rar format and low and behold
my virus scanner called nod32 found a trojan in that compressed file. either the file got infected some how or cdkiller is a hacker
or he does not know about it, if you dont believe me download it
at http://protectionid.owns.it/
and find out for ya self:mad:

[TippeX]

Originally posted by adrian666
ProtectionID_v5.0_Final_B

i downloaded this file in rar format and low and behold
my virus scanner called nod32 found a trojan in that compressed file. either the file got infected some how or cdkiller is a hacker
or he does not know about it, if you dont believe me download it
at http://protectionid.owns.it/
and find out for ya self:mad:

your virus scanner is crap then

[cdkiller]

http://protectionid.owns.it/ is the url redirection of the gamecopyworld server where my file is hosted.
it isn´t infected by any virus, i just checked.
and i won´t do any **** like infecting my files etc cos i hate ppl doing it.

try updating your Norton Antivirus 1997 ;)

[cdkiller]

i´ve uploaded 3 work-in-progress screenies to show some new additions. there are a lot of more additions wich can´t be noticed on the screenshots yet... but i will let u know soon about them.

believe me v5.1. will be the best executable and pc game cd/dvd protection scanner available.

v5.0 was just the beginning of a whole new tool and v5.1 will be a great step forward in development.
the final v5.1 changelog will be even bigger than v5.0 ;)

expect more news soon...

[KAMiKAZE]

sounds nice;)
your proggy is very good it knows every protection.
I tested it even on programs..... :rolleyes: :rolleyes:
(it recognized TELock etc.)

this is one of the proggy's, which a cracker should have!!(if you are not in a famous cracking group *lol*)

KAMiKAZE

[mdruce]

-=[ ProtectionID v5 ]=- (c) CdKiller
Build 17032004....
> Ready
Scanning -> C:\Program Files\Codemasters\Colin McRae Rally 04\cmr4.exe
File Type : Exe, Size : 3600384 (036F000h) Bytes
-> Suspicious MZ Header..
[!] SecuRom Detected - Version 5.02.00
- Scan Took : 0.422 Seconds


Great Job!

Pity there arn't any tools to remove these checks (well new ones at least) cause then we wouldn't have to wait on Deviance or Myth or someone to crack them. Although i know its a perfectly good reason why these tools arn't released. :)

[cdkiller]

this is one of the proggy's, which a cracker should have!!
that´s the goal of my tool... detecting all protections for applications and pc games. and v5.1. does nearly detect all apllication protections now, including infos on the version even for
Ultra Protect, Obsidium, X-treme Protector, TeLock and much more.

[Luci]

cd killer do you think that it would be better to make a button(add one not replace the other)that scans the whole cd and tells you what crack the cd has?(like clonyxxl)i mean it would be much easier.i don't have a problem but some maybe have...

[cdkiller]

if u look at the newly posted screenshots of pid v5.1 on my site u will see a window called 'CD/DVD util'.
it exactly does what u requested ;)

í´ve uploaded a new screenshot showing the 'Protection Report' window after doing a Folder Scan. quite simple now, just click folder scan and choose your game directory. all files will be checked (thout it´s fast) and only protected files will be shown in the 'Protection Report' window.

[Luci]

thanx man.seems your scanner is the most popular now.just curious but how old are you?

[cdkiller]

just spotted http://club.cdfreaks.com/showthread.php?s=&threadid=94384 and http://boardv3.copybase.ch/index.php?showtopic=1384 on the net. it really makes me angry seeing my work getting copied nearly 1:1.

-------------------------

"protectionid - we innovate, we dont replicate other peoples work unlike others"

what i suspected is true now... other authors are taking my detection code and puted it into their own tools.
kinda sad to see they cannot detect some prots in their own way. if u don´t have a game / app protected
with protections where u don´t have support for, u cannot add support for it. simple. stealing other one´s code is lame.
to steal the design too is even more lame...

'protection id - we innovate, we dont replicate other peoples work unlike others'

nuff said, i don´t say any names... the ppl who did it already know it and i know it too. sad...

history time...
PiD was the first tool to...
- decrypt the SecuROM versions newer than v4.87.xx
- give you a 99% accurate Tagés detection
- detect the new Settec Alpha ROM protection
- use a smart Log Window on it´s GUI
...

nice isn´t it ? you can expect more unique features in later versions
and as usual other authors wich will steal them to put them, into their tools ;-)

proof...

PROTECTiON iD
http://pid.gamecopyworld.com/bilder/pid.5.1c.png

Copied Protection ID
http://pid.gamecopyworld.com/bilder/aray.sux.jpg

/me wonders when the tray menu gets copied... i guess in the next version it´s in too.

--------------
current changelog:

v5.1
----
- added: Protection Report window showing a table with filename / protection
- added: File Queue window to GUI showing all the queued files (pause, remove and clear function)
- added: Configuration window with a lot of options the user can choose from
- added: CD/DVD Util window to GUI
- added: filter log, where output in the status window can now be filtered to only report protected files
- added: right click menus into the status window, so that output can be copied to clipboard or saved to file
- added: more servers for the update system
- added: folder drag & drop support
- added: CD/DVD sector scan for Starforce 3 and also extracting and displaying the Starforce key (if possible)
- added: Safedisc v2 and v3 verification code making it possible to detect a faked Safedisc protection
- added: ACProtect (Ultra Protector) version detection for v1.09, v1.10, v1.20 - v1.21, v1.22 and latest v1.23
- added: Armadillo v3.70 (latest version) detection
- added: CodeCrypt detection
- added: EXE Crypter v1.5.1 and [unknown version] detection
- added: EXE Guard v1.x detection
- added: FSG v1.0 setection
- added: FSG [modified] detection
- added: Hide PE v1.0 detection (both methods, ASPack [new strain] v1.2 and VBOX v4.3 MTE)
- added: Krypton version detection for v0.2, v0.3 and v0.5
- added: Obsidium version detection for v1.0.0.61, v1.1.1.0 and latest v1.1.1.4
- added: Pack Master v1.x detection
- added: PEBundle v3.20 (latest version) detection
- added: PE Compact v2.0 Beta Build(s) detection
- added: PE Spin v0.3 detection
- added: Stealth PE v2.x detection
- added: Stone's PE Cryptor v1.13 detection
- added: SVKP version detection for v1.051, v1.11 and v1.3x
- added: TELock version detection for v0.42, v0.51, v0.60, v0.70, v0.80, v0.85f, v0.90, v0.92a, v0.95, v0.96, v0.98 and private versions
- added: XCR v0.12 and v0.13 detection (heh i wanted to add v0.11 too but it always crashed my pc)
- added: Yoda Crypt v1.1 detection
- added: Trojan Small.Dld.FO detection
- added: Virus W32.Netsky.c@MM detection
- improved: many code optimizations wich will result in a highly stable program
- improved: saved a few bytes (5 to 25 bytes, depending on protection) due optimized detection code
- improved: Settec Alpha ROM detection (random section support)
- improved: Armadillo detection code optimized (50% faster)
- improved: EXEProt detection
- improved: NFO detection
- improved: Noodle Crypt v2 detection
- improved: Obsidium detection rewritten to be 100% generic with all available versions
- improved: PE Diminisher v0.1 detection
- improved: PE Lock v1.06 detection
- improved: PE Nguincrypt detection
- improved: PE Ninja detection
- improved: PE Shield detection code optimized (75% faster)
- improved: TELock detection code rewritten
- improved: UPX Scrambler / UPX detection
- improved: Virogen Crypt v0.75 detection
- improved: WinKrypt v1.0 detection
- improved: Yoda Crypt v1.2 detection
- fixed: EXE32Pack wasn´t detected in v5.0 due a filesize checking bug
- fixed: ExeProt crash bug when scanning files < 1500h bytes
- fixed: minor UPX detection bug in rare cases
- fixed: cosmetic bug on status window, if mouse was over it when it was first created, the cursor was an hour glass

----------


i´ve also upped 2 new screennies showing the current progress.
here´s also a current changelog of the next version (release in 1 or 2 months, cos there will be a lot of new stuff and features for you to play with).

tell me what do u think of it...

[Luci]

well we all know that this is your program right?that's what counts.i don't plan to change protection id cause some other stole the sourcecode and did the same thing...i'll keep using yours cause it's the real thing.about 5.1 you didn't upload it yet...

[cdkiller]

i don't plan to change protection id cause some other stole the sourcecode and did the same thing
thx, pid is getting better and better and the other scanners are only doing small updates or design copies ;)

i´ll focus on every availabe protector to add support for it, now pid can even detect a trojan and a wide spreaded virus.
final v5.1 will have a lot of "unique" (well depends how long it takes for other tool-maker to copy it) features and many new and updated detections.

about 5.1 you didn't upload it yet
yeah i said above, it will be released in 1 month because i got many new cool features waiting to be coded and a lot detections waiting to be updated and improved to detect all atm available protectors.

[Luci]

oh sorry.can't you just "lock"the sourcecode?somehow...i don't know

[cdkiller]

i protected my tool twice (compressed and encrypted, crc, anti dump, api redirection etc...). so it´s even more sad to see other tools using parts of my source, well it´s not really code wich gets copied. it was only the string '.settec' to check if a file is protected with Settec Alpha ROM.

hell if someone can unpack it he can also code this fairly simple stuff by himself.

once the design of v5.0 was done i and my buddy were very proud of what we had done. now it suxx seeing it get´s copied.

[Luci]

well it's very very sad but don't worry we all know who did this great job...

[EMPiRE]

Some people can only steal work from others because of lack of creativity... but they are usually not as dedicated as the orginal creator and usual DIE within a few months...

[KAMiKAZE]

Originally posted by cdkiller
- added: Safedisc v2 and v3 verification code making it possible to detect a faked Safedisc protection

so unwrapped exe's, which were protocted with sd aren't longer recognized as protected?

[cdkiller]

-=[ ProtectionID v5 ]=- (c) CdKiller
Build 21042004....
> Ready

Scanning -> H:\_PiD\Games.cracked\Safedisc 3.15.010
File Type : Exe, Size : 6144000 (05DC000h) Bytes
[!] Safedisc 3.15.010 detected but verification not successfull
assuming exe includes a faked Safedisc version or it has been cracked !
[!] -> cracked by ...!
- Scan Took : 6.561 Seconds

[WRFan]

how about making the normal X for closing the programme available? why some programmers always have to mess around with the standard windows features is beyond my understanding.

[Luci]

cd killer i have a question.i just scanned call of duty with clonyxxl and it said it's protected with safedisc 2.9

protection id said it has 3.1

so i believe the game has 3.1 cause clony is old and doesn't support 3.1 right?

[Eagle]

forget clonyxxl

[cdkiller]

so i believe the game has 3.1 cause clony is old and doesn't support 3.1 right?
clony only supports Safedisc till v2.90.
a newer version like v3.10 in Call of Duty will be identyfied as v2.90 in Clony cos the tool didn´t get updated anymore...

forget clonyxxl
true, it´s really outdated with the protections.

[Luci]

clonny is just a 2nd pass.

[pdawg17]

OT: Can someone direct me to a step by step example of removing a cd check from an .exe? I think my main prob is I can't get softice to install on xp...I'm just trying to do a "simple" no-cd .exe

[cdkiller]

keep the thread clean, it´s about protection id...
get compuware driver studio v2.7 and it will work.

[krondike]

when are the final version of 5.1 gonna be released cdkiller? :confused:

[cdkiller]

there are still some features to code, protections to be speeded up and improved and the usual additions.
well atm the current changelog is as 3 times as big as the last v5.0.

but i´m proud to say pid v5.1 is the most enhanced version ever and detects nearly every kind of executable protectors and modifiers, including
the most setup stubs (installshield, wise setup, winzip sfx...), some wide spread virus / trojans including their variants (NetSky, Sober, Bugbear, MyDoom) and all the latest exe crypter / packer i´ve found on the net.
also the cd/dvd sector scanning for protections will see some major changes
(atm only Tagés and StarForce 3 keyless scanning is possible).
the pc game protections will also be updated, no worries about that...
best is the high detection speed due many code improvements and a new PE modification code.

/me loves asm ;)

i´ll keep you up to date with new screens about the GUI and some new features.

[Monty Burns]

That is what I call good news....Keep up your work!

[krondike]

I'll be dam.... very nice update list... but my question...why not version 6? why 5.1 with such a big major update and upgrade... :cool:

[cdkiller]

depends on the progress of the tool. v6.0 is a very huge step.
like i said it´s still a lot to be coded and improved. time will show if it will be v6.0, but chances are very good ;)

[Luci]

ckiller in the new version if you scan the exe and it has starforce, make it show what version of starforce is ok?cause now if it's 1/2/3 it shows just starforce

[GLH]

@Luci:

Each Starforce protected game has a PROTECT.DLL in the Install-Dir.
Scan it and you will get the version of the Starforce protection.

[TippeX]

@Luci:

Each Starforce protected game has a PROTECT.DLL in the Install-Dir.
Scan it and you will get the version of the Starforce protection.

it isnt always called protect.dll though ;P

[cdkiller]

ckiller in the new version if you scan the exe and it has starforce, make it show what version of starforce is ok?
sure. the next version allows you to scan the games.exe and to display the version. (will be auto grabbed from the *.dll wich is referenced in the exe)

[Sara2]

Is there some sort of help guide for using this program? I know it's not rocket science but was wondering...

Do I have to install the game first before scanning?
Difference between agressive/non-agressive scan?
Difference between smart/non-smart scan?
Difference between >20MB & <20MB scan?

Thanks :)

[cdkiller]

i did a manual for the upcomming new version. check the attachment.
new features are stripped so it only shows how to use v5.0 Final B (the last public version).

Do I have to install the game first before scanning?
yes. exept for the cd/dvd file or sector scans (only detects Tagés for Sector Scanning in v5.0). more will come in the next version. when scanning the exe pid will detect nearly everything.

Difference between agressive/non-agressive scan?
hold your mouse coursor over the checkbox and you will see the tooltips.
agressive scan is a recommended beacuse when one protection is found, pid won´t stop scanning to detect a possible second detection. (like SecuROM + CD/DVD-Checks).

Difference between smart/non-smart scan?
it´s non functional in v5.0 Final B. it will be done for the next version.
smart scan allows you to scan huge files (like the 650 MB setup exe in Diablo) in only a few seconds by analysing the executable image and only scanning valid portions of the exe.

Difference between >20MB & <20MB scan?
i.e. when you do a folder scan and disabled the option "Scan files > 20 MB"
means that all files in the folder wich are bigger than 20 MB will be skipped by the scanner. game executables are smaller than 20 MB in nearly all of the games.

[Sara2]

Thanks heaps :)

[Bulk]

hi cdkiller, long time.
Any plans on implementing audio protection detection into PID?
Im looking for specific scanner to detect Key2Audio accurately. Don't recommend Clony XXL. :)
Aray scanner detects proper versions of Cactus Data Shield audio protections, but as yet doesnt support Key2Audio. I wondered if you had any plans or know of a scanner whish fits the bill.

[cdkiller]

Any plans on implementing audio protection detection into PID?
sure why not... i´m trying to get some protected audio cds.

[Bulk]

sure why not... i´m trying to get some protected audio cds.Ok, if you do get audio protection support, Protection ID will surely be the only scanner anyone will need. :cool:
I havnt seen Key2Audio around lately, but its worth supporting the detection of it because there were bucket loads of them shipped by Sony around a year ago.

[cdkiller]

Protection ID will surely be the only scanner anyone will need.
it already is... in the new 6.0 beta build ;)