Protection ID info thread - v6.3.5 (build 25.12.2009)

[cdkiller]

PID v6.1.6 is out

core additions / changes

- new: enabled the PE Stuff dialog (still in early stages)
- new: smbios reporting added (misc tools portion)

- update: pid entrypoint code optimised
- update: updated resizing core, and squashed a few bugs
- update: false positive with some anti virus programs is now fixed (gdata and avast)
- update: folderwatch, task manager, cd/dvd filter driver report, services report and folder locations all have right click context menus allowing the data to be saved to file
- update: uninstaller code tweaked - various fixes on some entries that would not uninstall
- update: update portion is now tweaked, a bit better and more futureproof
- update: windows 7 is now detected right and everything is functional (we are windows 7 compatible)

- bugfix: gui issue when run from context menu (log window will be shown)
- bugfix: file open doing nothing bug fixed - happened on WinXP with no service packs
- bugfix: folderwatch - bugfix in window handler, could have caused a lockup in 9x/me systems


detection additions / changes

- new: check_protectdisc.asm - added ProtectDisc exact v9.0.0, v9.1.0 & v9.2.0 detection
- new: check_g4wl.asm - added Games for Windows Live detection (xlive)
- new: check_steam.asm - added Steam (basic stub) detection
- new: check_activemark.asm - added ActiveMARK v6.50.767 detection

- new: check_breakpointcrypter.asm - added Breakpoint Crypter v0.0.79 detection
- new: check_expressor.asm - added exPresor v1.6.1 (Pro) detection
- new: check_fearzcrypter.asm - added fEaRz Crypter v2.2.0 detection
- new: check_hellcrypter.asm - added HellCrypter v1 detection
- new: check_kratoscrypter.asm - added Kratos Crypter detection
- new: check_npack.asm - added nPack v1.1.800.2008 + unknown version detection
- new: check_obsidium.asm - added Obsidium v1.3.6.1 detection
- new: check_pespin.asm - added PeSpin v0.1 (x64) detection
- new: check_rdgpack.asm - added RDG Pack Lite Edition v0.4 detection
- new: check_roguepack.asm - added RoguePack v4.0 Beta 1 detection
- new: check_rlpack.asm - added RLPack v1.21 detection
- new: check_simplecrypter.asm - added Simpl3 CrYpT3R detection
- new: check_xcrypter.asm - added X-Crypter v2.01 detection
- new: check_zprotect.asm - added in *generic* ZProtect detection

- new: dongle_softdog.asm - added SoftDog Dongle detection

- update: check_protectdisc.asm - removed protection level output (basic/pro) when detecting v9 (this version is all 'Pro', no more 'Basic' v9 games)
- update: check_activemark.asm - ActiveMark v6.1.335 detection rewritten (thx Nacho_dj for reporting a bug in American McGee's Grimm Bundle)


CD/DVD/Image file/sector scan

- update: sector scan updated to handle various movie protection(css/cpmm, cprm, aacs hddvd, aacs bd), this code is still in the experimental stage, and needs testing, but seems to work

[I] Init cd/dvd sector scan for Drive O
[i] Detected CSS / CPMM Protection! (0x00000001)
[i] Region Lock Detected -> RegionBitMask: 00000002
[.] Region(s) allowed : 2 (Drive region will need to be changed, you have 2 changes remaining, your current region is : 1)
- Scan Took : 0.828 Second(s)

- bugfix: fixed bug in cddvd sector scanning code (register got trashed) - not critical..

[ShadowDuke]

thanks, nice work ppl

[cdkiller]

v6.2.2

core additions / changes

- new: incorporated PEiD / PE Tools database usage
-> additionally displays the protection found via the userdatabases
-> peid database is expected to be in the same folder as protection id
and should be called peid_database.txt
-> petools database is expected to be in the same folder as protection id and should be called petools_signs.txt

- enable/disable: go to Configuration -> Allowed Scanning Types -> peid / petools (3rd party scan)
- once enabled you can browse the signature files when
clicking the 'Extensions' tab (second icon from the bottom right)
- note: in cases of multiple hits, the highest probability is automatically figured out and reported

- new: work on compiler detection began
-> The compiler detection simply reports what compiler was used to make
the executable, It can also sometimes report the programming language
the executable was made with.

current detections: dotnet, visual basic & visual basic.net, some visual c/c++, borland c++, delphi

enable/disable: Configuration -> Allowed Scanning Types -> Enable Compiler Detection Scan


- new: tooltip preview (configurable option in the settings - under the gui portion)
- new: added in drive type reporting in the misc tools section
- new: added in option in configuration to dedicate 1 cpu to scanning core (if multiple cpu's are found on the system)
- new: added in little pause/resume button in the main dialog (green circle when you load pid)
- new: added in activity reporting on hdd reads, pid is so quick though, you may not notice it, but on large files, its useful because its an indicator pid is doing something


- update: turned on scan inside microsoft cab files as default
- update: added more informative comments into pe stuff
- update: file queue now reports the amount of files it has processed
- update: updated detection routine to report dll compiled in native mode
- update: folderwatch cleanup now works and reporting is handled correctly
- update: updated version info core to handle 'strange' exes with fucked version info, or version information that version.dll does not 'see'
- update: fixed some imports so that pid now loads on windows nt 4.0 (and probably 3.x) without the system throwing an import missing error and exiting the process
- update: services now disables itself if the os is 9x/me (9x/me doesnt have 'services') shares also disables itself if the os is 9x/me (api not present in these os'es)
- update: gui -> cd/dvd tools and the folderwatch buttons are now automatically disabled if the operating system is windows 9x/me (ie: less than windows 2000)
- update: folder location shell32 output now made 9x/me compliant(old comctl32.dll listview issue)
- update: added in minimize to systray if its set in the configuration. if set, pid will minimize itself when its loaded for the first time
- update: added in another handler for smbios, its quicker, but only available in vista or higher
- update: windows product key updated code, now should be good for all windows versions except nt 4.0
- update: windows product key is now also reported for 9x/me
- update: updated code so that windows 95, windows nt 3.x and nt 4.x do NOT have ownerdrawn menus (95 couldn't handle them properly anyway, and nt 3/4 had issues too)
- update: added battery reporting into misc tool window
- update: dep reporting done in misc tools information section
- update: fixed icons in 9x looking too big (now pid looks the same in 98, me, 2k, xp, vista)
- update: pause / resume is now properly functional
- update: added in pause checking into the cab file handler
- update: progress bar resets once scan is complete
- update: added in animated rect for sizing (work in progress)
- update: added tooltip to sizer window

- bugfix: fixed 9x/me crash (bsod) issue in petools stuff
- bugfix: fixed crash issue when viewing reloc information on some x64 files
- bugfix: silent exit / crash issue fixed in win2000 server
- bugfix: fixed position saving bug (reported by Blazkowicz)
- bugfix: fixed os detecton (win nt was detected as 2000)
- bugfix: fixed the strange drag -> drop, file added to queue but scanning not started bug
- bugfix: fix for buffer overrun error when saving a protection log containing lots and lots of files
- bugfix: folderwatch - fixed crash when trying to add more than 2 folders
- bugfix: dirty buffer used in folderwatch reporting code
- bugfix: 9x sizing issue fixed
- bugfix: fixed some problems with windows 95 original (before 95a, 95b and 95c...) where the versioninfoex struct is expected to be a different size, this resulted in a failure in detecting the operating system
- bugfix: various other tweaks & fixes...


detection additions / changes

- new: check_protectdisc.asm - added ProtectDisc v9.5.0 detection & detection of ProtectDisc drivers
- new: check_byteshield.asm - added ByteShield Software Activation Client detection
- new: check_safedisc.asm - now also detects Safedisc 1 icd file as being protected &secdrv.sys
- new: check_tages.asm - code updated to detect Tages protection drivers
- new: check_armadillo.asm - added Armadillo v6.24 (or newer) detection
- new: check_pcguard.asm - added PC Guard v5.03 detection
- new: check_themida.asm - added detection for Themida / Winlicense with Hide PE Scanner Option
- new: check_asprotect.asm - added exact detection of ASProtect v2.3 Build 05.14 & ASProtect v1.40 Build 11.20
- new: check_privateexe.asm - added Private EXE Protector v3.0 (or newer) detection
- new: check_stardock.asm - added Stardock Product Activation Module detection
- new: check_reflexivearcade.asm - added ReflexiveArcade Wrapper - Build 171 and newer detection
- new: check_realarcade_drm.asm - added in RealArcade DRM Module detection
- new: check_popcapdrm.asm - added PopCap DRM Protect detection
- new: check_elefunwrapper.asm - added Elefun Trial Game Wrapper detection
- new: check_playfirst.asm - added PlayFirst DRM Module detection
- new: check_oberonmediatime.asm - added detection for Oberon Media Time Protection Module
- new: check_wildtangent.asm - added detection of the Wild Tangent Wrapper v2.1.2.26 (or newer)
- new: check_dotnetreactor.asm - added .Net Reactor v3.x Library mode (+ Necrobit) detection
- new: check_macrobjectnet.asm - added Macrobject Obfuscator.NET 2008 detection
- new: check_noobyprotect.asm - added NoobyProtect v1.0.x.x and v1.1.x.x - v1.4.x.x.
- new: check_spicesnet.asm - added Spices.Net Obfuscator detection
- new: check_pegasyscustom.asm - added PEGASYS Custom Layer detection
- new: check_serialshield.asm - added Ionworx SerialShield Core.dll & it´s version detection
- new: check_dotnetguard.asm - added detection of the DotNet Guard HVM Runtime Library Module
- new: check_eakey.asm - added in EA Key Module detection
- new: check_sevlock.asm - added sevLock detection

- new: check_asscrypter.asm - added ass - crypter detection
- new: check_billarcrypter.asm - added Billar Crypter v2.0 detection
- new: check_bitfrostcrypter.asm - added Bifrost Crypter v1 detection
- new: check_cigicigi.asm - added Cigicigi File Crypter v1.0 detection
- new: check_cryptdmarnar.asm - added Crypt Dmar Nar v0.5 detection
- new: check_darkavengard.asm - added DarkAvengard Crypter detection
- new: check_dexcrypt.asm - added DeX-Crypt v2.0 detection
- new: check_dirtycrypt0r.asm - added DirTy CrYpt0r detection
- new: check_dhcripter.asm - added DH Cripter v0.1 detection
- new: check_etcv.asm - added ETCV v1.0 detection
- new: check_fishpacker.asm - added FishPacker v1.03 & v1.04 detection
- new: check_flashbackscrambler.asm - added Flashback Scrambler v1.3.x detection (all 3 modes :-))
- new: check_idapplicationprotector.asm - added ID Application Protector v1.2 detection
- new: check_freecryptor.asm - added FreeCryptor v0.3b Build 3 detection
- new: check_gentlemancrypter.asm - added Gentlemen Crypter v1 detection
- new: check_gkripto.asm - added GKripto v1.0 detection
- new: check_haccrewcrypter.asm - added Hac-Crew Crypter detection
- new: check_hipacryp.asm - added HipACryp v0.0.1 detection
- new: check_icrypt.asm - added ICrypt v1.0 detection
- new: check_keycrypter.asm - added KeyCrypter detection
- new: check_lordcrypter.asm - added L0rD Crypter v1.0 detection
- new: check_maskpe.asm - added MaskPE v2.0 detection
- new: check_ncode.asm - added N-Code v0.2 detection
- new: check_nidhogg.asm - added Nidhogg v1.0 Final, v1.1 Beta 1 and [unknown version] detection
- new: check_novacipher.asm - added NovaCipher 1.0 Beta detection
- new: check_npack.asm - added nPack v2.0.100.2008 detection
- new: check_pfecx.asm - added PFE CX v0.1 detection
- new: check_poherna.asm - added Pohernah v1.02, v1.03 & v1.07 detection
- new: check_pokescrambler.asm - p0ke Scrambler v1.2 detection added
- new: check_rdgtejoncrypter.asm - added RDG Tejon Crypter v0.6, v0.7 & v0.8 detection
- new: check_rewolfdllpackager.asm - added ReWolf DLLPackager v1.0 detection
- new: check_roguepack.asm - added RoguePack v4.1 detection
- new: check_scancryptic.asm - added ScanCryptic v2.0 detection
- new: check_securepe.asm - added SecurePE v1.6 detection
- new: check_supercrypt.asm - added Super Crypt v1.0 detection
- new: check_tgrcrypter.asm - added TGR Crypter v1.0 detection
- new: check_vegancrypter.asm - added Vegan-Crypter v0.7 detection
- new: check_yokohcrypter.asm - added Yokoh Crypter v1.3 detection

- new: license_adobelm.asm - Adobe Systems License Manager Module detection added
- new: license_deploylx.asm - added DeployLX Licensing for DotNet detection
- new: license_esellerate.asm - added eSellerate Activation System Core Module detection
- new: license_infralution.asm - Infralution Licensing System for DotNET detection added
- new: license_isquicklicense.asm - added Interactive Studios Quick License Manager detection
- new: license_mirage.asm - added detection for Mirage License Protector
- new: license_sentinelrms.asm - added SafeNet Sentinel RMS Core.dll detection
- new: license_xheolicensing.asm - added Xheo Licensing Module for DotNet detection

- new: dongle_biteboard.asm - added Bite-Board USB Dongle detection
- new: dongle_copylock.asm - added CopyLock Dongle detection
- new: dongle_marx.asm - MARX Crypto-BOX Dongle detection added
- new: dongle_rockey.asm - added Rockey2 / Rockey4 Dongle detection
- new: dongle_sentinel.asm - added detection of the NetSentinel Win32 Client DLL
- new: dongle_sentry.asm - added Sentry Hardware Lock detection
- new: dongle_wizzkey.asm - added Wizzkey Dongle detection

- new: installer_digital_river_downloader.asm - Digital River Download Manager detection
- new: installer_gpinstall.asm - added GP-Install Module detection
- new: installer_lymesfx.asm - added Lyme SFX Extractor Module detection
- new: installer_install_anywhere.asm - added InstallAnywhere detection
- new: installer_installshield.asm - added InstallShield v15 detection & Installshield PackageForTheWeb Installers
- new: installer_lindersoftsetup.asm - added Lindersoft Setup Builder Module detection
- new: installer_omnisetup.asm - added Omni Setup Module detection
- new: installer_popcap.asm - added PopCap Installer detection
- new: installer_realarcade_downloader.asm - added RealArcade Download Manager detection
- new: installer_reflexive_arcade.asm - added Reflexive Arcade Install Wrapper detection
- new: installer_smart_install_maker.asm - added Smart InstallMaker detection
- new: installer_visual_patch.asm - added detection for Visual Patch Installer

- improved: check_starforce.asm
- updated to handle those strange starforce 5.60 exe's that
didn't have version information
- updated to handle Gothic 3 Forsaken Gods (russian)
- improved: check_securom.asm - code updated to detect the drm dyn data module
- improved: check_protectdisc.asm - added one more older version (v7.7.0)
- improved: check_codelok.asm - scanning speed optimizations
- improved: check_sysiphus.asm - optimized detection & scanning speed
- improved: check_solidshield.asm - update for those strange exe's and dll's with no version information
- improved: check_themida.asm - better version detection (v1.8.2.0 - v1.9.5.0, v1.9.7.0 - v1.9.9.0, v2.0.0.0 - v2.0.2.0, v2.0.3.0 - v2.0.4.0, v2.0.5.0 (or newer))
- improved: check_acprotect.asm - faster scanning results
- improved: check_armadillo.asm - armadillo detection code updated
- improved: check_asprotect.asm - rewritten for better version detection
- improved: check_xenocode.asm - tweaked detection
- improved: check_thinstall.asm - updated with another detection method for v3.207
- improved: check_upx.asm - fixed UPX detection code so it detects upx'ed dlls too
- improved: check_xprotector.asm - added in another check (this also fixed a possible wrong detection of Themida / WinLicense protected DotNet executables)
- improved: check_vmprotect.asm - made more generic, adjusted version info output
- improved: check_andpakk2.asm - rewritten, additionally we exactly detect the 2 versions (v0.06 & v0.18) now
- improved: check_anslympacker.asm - rewritten
- improved: check_cicompress.asm - tweaked & optimised
- improved: check_exestealth.asm - added in one more generic check
- improved: check_mew10.asm - tweaked mew 10 detection
- improved: check_pebundle.asm - updated, now detects on an exe wich didn´t before
- improved: check_rdgtejoncrypter.asm - added in a more generic detection method
- improved: check_telock.asm - tweaked TeLock v0.96 detection

- improved: license_elicense.asm - completely rewritten (better v3.2 & v4.0 detection)
- improved: license_flexlm.asm - optimized detection & scanning speed
- improved: license_flexnet.asm - optimized detection & scanning speed
- improved: license_haspsl.asm - added another check for HASP SL
- improved: license_interlok.asm - added in one more generic check
- improved: license_salesagent.asm - optimized detection & scanning speed
- improved: license_sentinellm.asm - optimized
- improved: generic speed improvements in almost all license scans

- improved: dongle_keylok2.asm - updated KeyLok2 Dongle detection for better detection
- improved: generic speed improvements in all dongle scans

- improved: installer_7zip.asm - code updated, now detects an exe it never 'saw' before
- improved: installer_installaware.asm - updated to detect a custom version wich was un-detected before
- improved: installer_installshield.asm - installshield detection is now more generic and improved
- improved: installer_mscabsfx.asm - microsoft cab sfx format detection is now made better
- improved: installer_nullsoft.asm - updated to handle nullsoft sfx exe's with the data in the resource section
- improved: installer_rarsfx.asm - WinRAR SFX detection updated
- improved: installer_zylomgames.asm - detection of another variant of Zylom Games Setup

- bugfix: fixed bug in Cactus Data Shield file scan (discovered by Blazkowicz on acrobat.dll)
- bugfix: check_obsidium.asm - bugfix in obsidium detection code
- bugfix: check_polyene.asm - fixed possible crashbug
- bugfix: installer_redshift.asm - fixed potential bug

still #1 again
currently detecting 430 different (!) 32/64bit exe protectors/packers/crypters, dongles, licenses, installers...

[cdkiller]

v6.2.3

- bugfix: check_starforce.asm - starforce 'crap output' bug fixed
- update feature - updated to show version number on update as well, instead of some 'strange' number

[Magyar]

Scanning -> C:\Program Files\Ubisoft Entertainment\Wheelman\Binaries\WheelmanGame-Final.exe
File Type : Exe, Size : 25567232 (01862000h) Byte(s)
[Heuristics] -> Flag : 00000000000000000000000000000001
[!] SecuROM Detected - Version 07.39.0005
[!] LiCENSE - FlexNET v11.4 protected !
[!] DONGLE - Hardlock detected !
[!] DONGLE - SENTiNEL detected !
[!] Possible CD/DVD-Key or Serial Check -> evaluation version
[!] Possible License Protection String -> license server
- Scan Took : 1.969 Second(s)

are you kidding me ??
this game uses securom and none of the dongles or some of the other stuff..
talk about giving bad info..

[TippeX]

nope, its not bad info.. next time do the research

the game is typically protected with dongles and so on when it is in development, rarely do the developers remove the libraries when it is final.. so the code is still there... its just not used.. pid detects this... this is also evident in other games as well...

so next time you want to state stuff like this do some research first before looking stupid when you're corrected..

[jlster]

Downloaded PROTECTiON iD v0.6.2.3March 2009 today (5/11/09), unzipped to a temp folder, opened it, clicked the SCAN button (also selected scan from Tray icon), selected my D:, and later E:, drives and nothing was reported from/about either... as best I can tell (Interestingly I can EJECT and LOAD both DVD players from the Tray Icon). D: has my Rosetta Stone language DVD and E: a movie DVD. After no result with D: I tried E: with the movie to see what is revealed about it--nada.

Why is nothing being reported vis-a-vis the drives (I would think that no protection, if the case with the movie DVD, is a valid report). Does PiD need to be in a special directory

SYS INFO-per PiD which gives tons, just nothing about my CDs/DVDs

Free Physical: 51%
Free Page File: 65%
Free Virtual: 97%
CPU Load: 3% to 5%
Mem Load: 48%

Windows 5.1 - Build 2600
CSDVersion : Service Pack 2
PlatformId : 02 (Win32 NT)
Service Pack : 2.0
SuiteMask : 0100h
> VER_SUITE_SINGLEUSERTS
ProductType : 1 [Workstation]
Reserved : 0
VerInfoSize : 156 bytes
------
Windows XP Professional 32 Bit Service Pack 2
Cpu Count : 1
------
Active Cpu -> Cpuid -> GenuineIntel
Processor Architecture : Intel (x86) Based
Extended Processor Detection -> Intel(R) Pentium(R) 4 CPU 2.80GHz
Active Processor Mask : 000000001h
Processor Count : 1
------
Allocation Granularity : 010000h / 065536
Minimum Application Address : 000010000h
Maximum Application Address : 07FFEFFFFh
Total Physical Memory : 1340063744 byte(s) (1277 MB)
------
Boot Type : Normal
------
64 Bit OS : No
------
Terminal Services Present : Yes
------
WPK :<removed>
------
Administrator : Yes
------
PiD 'influenced' by App Verifier : No
------
Windows Install Date (registry) : 24/04/2004 - 07:22:00
Windows Install Date (folder) : 31/03/2004 - 17:13:44
------
Windows Dir : C:\WINDOWS
------
Graphics Adaptor #0 -> Intel(R) 82865G Graphics Controller
---------- DeviceName : \\.\DISPLAY1
------
Graphics Adaptor #1 -> NetMeeting driver
---------- DeviceName : \\.\DISPLAYV1
------
Graphics Adaptor #2 -> RDPDD Chained DD
---------- DeviceName : \\.\DISPLAYV2
------
Monitor Count : 1
------
[Copmuter Info deleted]
------
WindowBlinds Detected : No
Windows Shell = explorer.exe
------
System reports 05 cd/dvd/blu-ray/hd drives
PiD reports 05 cd/dvd/blu-ray/hd drives
------
DEP Setting : Opt In

Notes: I use ZoneAlarm Pro, AVAST anti-virus and Spybot all of which I turned off to see if they were interfering. They were not--that is the results were the same for the SCANs. Task Manager shows 100% CPU usage with PiD running, typically 80+% Explorer, 11+% PiD and miscellaneous. The PiD percentage stays the same whether or not I select SCAN DVD..., and when SCAN is activated the STATUS is operational whether PAUSE is selected or not.

[TippeX]

yup, unfortunately this bug was discovered.. the scan cd/dvd->file mode is broken, a new release is planned incredibly soon, only 3 people reported this (including yourself)...

100% cpu in pid i've never heard reported though, thats quite odd

i also edited out your product key (you probably don't want that on the inet)

i can send you a beta copy of the next build if you like, just send me a pm

[unRheal]

Hello,

Sorry - I just sent a message/feedback thing saying this before I realized there's a thread for PID!

Anyway - I have v0.6.2.3 March 2009 and I just bought the game Alone In The Dark for PC, so I thought I'd run PID on it and see what it said.

I basically had enabled context menus and selected the "Scan with ProtectionID" option from the menu I got when right-clicking on the drive with the 1st DVD of Alone In The Dark in it.

A bunch of stuff scrolled by in the log window (Nice that you can re-size the window's *width* but it'd be even better if we could make the *height* bigger as well! - just a thought) but eventually it crashed with the standard "do you want to submit this to Microsoft" dialog, etc.

I saved the log info that had been displayed up to the point when it crashed (it still let me select & copy from the window despite having crashed) as well as the two files that it'd made for the crash info to send to MS - I selected not send it, but just made a copy of the files first - one being the .dmp file.

So I'm not sure if you care for any of the files/info/log stuff, or if you have any other thoughts or suggestions as to what else I might try to get it to work or whatever... I thought at least i'd let you know and go from there.

No worries. Thanks!

[TippeX]

Originally Posted by unRheal

.....but eventually it crashed with the standard "do you want to submit this to Microsoft" dialog, etc.

that should not have happened, protection id has its own built in seh, which will intercept such a dialog appearing.. very strange, but if you have the logs etc, it can't hurt to take a look, can you email them? (protectionid**********com)
rar'ed up preferably

new build coming soon too.. finishing some stuff in it currently..

[cdkiller]

a little status update:

our next version is called 6.3.0 due major improvements
it features highly optimized scanning routines resulting in an more accurate & faster detection than before.

we´ve tested several exe-fakers wich add signatures for other common exe protectors. the goal of this tools is to 'hide' the real protection. all of the other available scanners are fooled, we aren´t, not even in a single test, and we did a hell lot of them

also we did optimize the scans for the ' more common' protections / added more detailed info, like SecuROM, SolidShield / Tages, Protect DiSC & ActiveMark, added more info for the newly used Byte-Shield protection, more upx packed file infos etc...

there will also be 2 more 'tools' in pid. one will be usefull for crackers, the other one is a quite usefull for every windows user.

and as usual the bugfixes & core improvements

when it will be out? well... tomorrow, i´m going to visit the 'with full force' festival (http://withfullforce.de/deutsch/index.html)
i´ll be back at monday, so i think a release in that week is very possible.

[chron]

Scanning TWW.exe from the whispered world results in crashing of v6.2.3.

[TippeX]

can you put the exe online somewhere (rapidshare etc..) ?, so i can download and fix the crash, there's a high probability its already fixed, but it'd be nice to check before we release 6.3.5 (maybe 6.4.0), quite soon (main delay was caused by optimising code and switching to masm 9)

thanks in advance

[chron]

http://rapidshare.com/files/276711593/whisp.rar

I have packed the copy prot relatated files also.

It would be nice to see pid more focusing on copy protection again than on all the other tools. Furthermore I dont understand why it has to store stuff in registry and create icons everywhere.

[TippeX]

it stores stuff in the registry for the settings (last window location, context menu and so on, also (optionally) it adds in the setting to autoload with windows, and stores the settings like which protections to scan for etc.. allowing you to customise its scanning depending on your needs), as for 'icons everywhere', it only makes 2 shortcuts on the desktop (only if it was not loaded from removable media), one for pid itself, the other for pid safe mode (which can be used to diagnose problems), and you can easily delete them.. or did you mean something else?

grabbing files now will check and report back soon

*edit* scan completed

[scan report]

Scanning -> W:\temp\crashpid\TWW.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 3070024 (02ED848h) Byte(s)
-> File has 3053128 (02E9648h) bytes of appended data starting at offset 04200h
[File Heuristics] -> Flag : 00000000000001001100001100010111 (0x0004C317)
[!] SolidShield EXE Wrapper detected !
- Scan Took : 0.891 Second(s)

Scanning -> W:\temp\crashpid\dvm.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 33530022 (01FFA0A6h) Byte(s)
-> File has 33224870 (01FAF8A6h) bytes of appended data starting at offset 04A800h
[File Heuristics] -> Flag : 00000000000001001100000100000100 (0x0004C104)
[!] SolidShield Core.dll [unknown version]
[i] Tages Setup Version: v5.5.7.2
- Scan Took : 0.641 Second(s)

all the other files had nothing, so the crash appears fixed, thanks for the report