@cdkiller
Yep, now I am really jealous of you!! :D

You lucky bugger! :p

(Um just incase the word 'bugger' gets lost on you, its nothing bad. ;) )

depends if you're the bugger-er or the bugger-ee :)

@TippeX
The word 'bugger' has many meanings in Australia but I surely didnt mean it in the sense you have mentioned. lol

For example:

When I say "What a lucky bugger" i am really saying you are a very lucky person and I am jealous. :)

If I was to put a small dent in my car I would say "Oh bugger", which would loosely translate to "Oh shit!!" lol

If I was to say, "That TippeX is a really nice old bugger" that would be.........well calling you old! lol (which i have no idea if you are or not :p )
But calling you a "nice....bugger" would not be a bad thing. ;)

If I was to make a mistake fixing the small dent in my car I would say "shit I just 'buggered' that up!!" :)

If someone was annoying me I would say "bugger off!" Now that can also be taken 2 ways:
1. F...k off! (In a bad sense)
2. Go away! (more in a fun sense)

Hmmm, I am sure some other Aussies will come up with some more meanings for the word but then that would be totally 'Off Topic' for this thread now wouldnt it. :)

But honestly, I would never tell cdkiller to bugger off or use the word towards him in a bad sense, only in the humerous sense, and he knows that. :)

So on that note I might just bugger off. :D

heh agreed, we use the bugger thing in uk too, confuses tons of ppl, and you're probably younger than me :)

just found a bug in the SecuROM scan, detecting latest Titan Quest Patch as SecuROM 7.21 wich is of course wrong. it´s newest 7.26.0010 and has already been fixed for the next version 5.1f.

yeah, i never knew the real meaning of the word till now ;)

@cdkiller

Could you please check the exact securom version of El Matador which is in the following link: http://rapidshare.de/files/31199788/pc_matador.rar

-=[ ProtectionID v5.1e ]=- (c) CdKiller & [x/xxx]
Build 17-08-2006....
> Ready

Scanning -> L:\El Matador\pc_matador.exe
File Type : Exe, Size : 9842688 (0963000h) Bytes
-> Suspicious MZ Header..
[!] SecuROM Detected - Version 7.26 or newer
- Scan Took : 2.860 Seconds

EDIT: Thank you very much cdkiller.

-=[ ProtectionID v6.0 *PRiVATE* ALPHA ]=- (c) CDKiLLER & [x/xxx]
Build 2006-08-29
> Ready

Scanning -> L:\__pid collect\PC-GAME PROTECTiONS\SecuROM\SecuROM 7.26.0006 (El Matador German).exe
File Type : Exe, Size : 9842688 (0963000h) Bytes
-> Suspicious MZ Header..
[!] SecuROM Detected - Version 7.26.0006
- Scan Took : 3.0 Seconds

Just a request..
 

Hi I downladed the tool..Run it..

İf you care or not but if you say help me improve this tool I want to tell something about the usage impreovement..

-the color is so dark..you should made some changes in GUI
-Waht if we show just a folder (ex: d:progeam files) and it scans for it?
chooisng exe's are hard.. you know we noobs like the easy way....;)

as written just a request...

thanks in advance

drag the folder onto the window then, pid supports drag and drop...

Folder drag n drop ...
Kewl :)

... but no command line interface? Ts-ts-ts... ;)

oh im sure a commandline version might be present for v6..

(assuming my mind reading of cdk's mind went correctly) :)

your mindreading could be successful ;)

atm pid supports scanning from cmdline.
create a batch file with the following line:
Protection_ID.EXE -scan TargetName.exe

Ok, where is the download for the file?
Cannot see it on cdkiller's page at all.

pid.gamecopyworld.com

click the 'protection id' on the left side.. it'll change the window
then see the line with 'mirror'.. click it...

alternatively, if that still gives you difficulties...

http://pid.gamecopyworld.com/ProtectionID_v5.1e.rar

sorted.

securom & protect disc updated their protections, so here´s a newer Protection ID :)

v5.1f changelog
---------------
- added: SecuROM 7.27.xxxx detection
- added: Protect DiSC v7.5 (or newer) detection
- added: Starforce 4 protection level (Basic / Pro) detection
- added: Starforce ProActive v4 Protect.exe detection
- added: Safedisc detection for v4.70 in executables without version string
- added: PC Guard v5.01 detection
- added: SD Protector v1.12, v1.16 and [unknown version] detection
- added: TheMida v1.0.0.0 - v1.8.0.0 (or newer) detection
- added: License - eLicense v3.x, v3.20 and v4.0 detection
- added: License - Protection Plus v4.x detection
- improved: ActiveMark detection splitted into v4 & v5
- improved: Xtreme Protector detection code improved
- improved: SecuROM 7.26.xxxx detection, added more detailed versions
- improved: Protect DiSC version detection, added support for most common versions
- fixed: crash during Tages scanning if entrypoint is between offset 2h to 4h

direct download http://pid.gamecopyworld.com/ProtectionID_v5.1f.rar

1.1 Patch of "Die Gilde 2":

-=[ ProtectionID v5.1f ]=- (c) CdKiller & [x/xxx]
Build 15-09-2006....
> Ready

Scanning -> N:\Die Gilde 2\GuildII.exe
File Type : Exe, Size : 11341824 (0AD1000h) Bytes
-> Suspicious MZ Header..
[!] SecuROM Detected - Version 7.27 or newer :(
[!] Possible CD/DVD-Key or Serial Check -> CDKey
- Scan Took : 2.734 Seconds

http://rapidshare.de/files/33236876/GuildII.rar

BTW thank you very much for scanning last time.

The Gilde 2 v1.1 is wrapped with SecuROM 7.27.0010.
as its published by jowood i´d say it gots some custom checks too.

v5.2 changelog

- added: Protect DiSC protection level scan (Pro/Basic)
- added: SecuROM exact version detection for lots of v7.27.xxxx and the first of the new v7.28.xxxx
- added: Safedisc API detection Method 1 (available at oep dump of protected exe)
- added: Safedisc API detection Method 2 (scan protected executable)
- added: CDCops detection (scan *.QZ_ file)
- added: JoWood X-Prot v2.x detection
- added: Armadillo v4.54 detection
- added: ActiveMARK v6 detection
- added: Obsidium version detection for most files
- added: Petite v1.2, v1.3, v1.4, v2.2 & v2.3 exact version detection
- improved: Safedisc v4.70 detection in files with removed version string
- improved: SecuROM 7.26 / 7.27 detection, added more checks for detailed version
- improved: JoWood X-Prot v1.x detection improved
- improved: Protect DiSC 6/7 scan, added more detailed versions
- improved: BJFNT detection rewritten (version detection for v1.1, v1.2 & v1.3)
- improved: EXE32Pack detection rewritten (version detection for v1.37, v1.38 & v1.42)
- improved: ExeCryptor2 detection (also fixes possible false detections)
- improved: Krypton detection rewritten (version detection for v0.2, v0.3, v0.4 & v0.5)
- improved: NeoLite detection rewritten (faster & more accurate)
- improved: Obsidium generic detection, added one more check
- improved: PEBundle detection
- improved: PE Lock v1.0x detection rewritten
- improved: PE Pack detection rewritten (version detection for v0.99 & v1.0)
- improved: Perplex PE Protector v1.01 detection rewritten
- improved: PE Shield detection (version detection for v0.1d, v0.2, v0.25 & unknown versions)
- improved: Shrinker detection rewritten (version detection of v3.4, v3.5 & unknown versions)
- improved: SVKP detection rewritten, detection of v1.051, v1.11, v1.3x - v1.4x (or newer)
- improved: YodaCrypt detection rewritten (version detection for v1.1, v1.2 & v1.3)
- improved: detection for lots of minor exe protectors/packers rewritten, including: cEXE, Air EXE Lock,
DEF, EXEProt v1.x, E-Zip, Lamecrypt, NFO, Noodlecrypt, Passlock 2000, PeX,
PE Diminisher, PE Mangle, PE Nguincrypt, PE Ninja, PKLite32, SEPP, Softdefender,
UPX Scrambler, VBO Watch, VG Crypt, Winkrypt, WWPack32
- fixed: possible crash in Xtreme Protector detection when scanning ExeCryptor v2.2.x wrapped files
- removed: Protection Options in Armadillo scan (will be readded & improved later)
- implemented check for Win32 DLLs with EntryPoint 00h (also fixes rare ASPack/ASProtect crash)
- plus several protection version updates (i.e. Obsidium, MoloBox, PE Compact...)

due the amount of changes the version was raised to v5.2
most of the detection routines were recoded, resulting in faster scanning speed & being more accurate.

we´ve made improvements again in detection of the most common used pc game protections.
SecuROM 7.28 detection is here (older ones also updated and wrong detections fixed),
JoWoods new X-Prot will be detected, CDCops detection was added, ActiveMARK´s
latest version 6 will be recognized, Safedisc routine is able to detect the latest v4.70 games
with removed version and protection level (SDAPI or Safedisc Standard).
Protect DiSC detection is up to date (improved exact version scan) and now also detects
if the protection features are Basic / Pro.

thx to the people who helped with the more advanced features :-)

Great Work Again !!!
:)

Nice work, dude
Arma protection check sounds nice, never knew PiD was actually capable of that :)

btw, I love MoloBox :D

What shall I say, buddy ?

Excellent work......again

I may test it in detail, when I find some time.....

thx m8 i will apprecciate any help to trace down the bugs :)

i already found 2 bugs wich made it in v5.2 :/
1. detecting the safedisc api in non safedisc files (bah, must be drunk when coding this, bug happens very rarely tho but it could happen)
2. starforce 4.50 version display bug

also i´ve improved the safedisc version detection in files with removed version info (FIFA/NBA 2007 = Safedisc 4.60, Madden 2007 = Safedisc 4.70).

I think I found one more bug:

-=[ ProtectionID v5.1f ]=- (c) CdKiller & [x/xxx]
Build 15-09-2006....
> Ready

Scanning -> C:\Programme\Gothic III\engine.dll
File Type : Dll, Size : 6841344 (0686400h) Bytes
[!] NSPack compressed !
- Scan Took : 1.843 Seconds




-=[ ProtectionID v5.2 ]=- (c) CdKiller & [x/xxx]
Build 01-11-2006....
> Ready

Scanning -> C:\Programme\Gothic III\engine.dll
File Type : Dll, Size : 6841344 (0686400h) Bytes
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 1.969 Seconds

greetz dest

@dest4ever

that was a bug in v5.1f wich got fixed in the current v5.2.
engine.dll isn´t NSPack compressed, it is JoWood´s X-prot dll wrapper (added support for this too now).

v5.2b

- added: SecuROM 7.29.xxxx detection
- added: Starforce v4.50 (or newer) Protect.exe detection
- added: Protect Disc v7.5 exact version info for more subversions
- added: PE Spin exact version detection for v0.3, v0.41, v0.7, v1.0, v1.1 and v1.3 (+ unknown version)
- added: UPack version detection for v0.10 - v0.12, v0.20, v0.21, v0.22 - v0.2, v0.24 - v0.28
v0.29 - v0.33, v0.34 - v0.35, v0.36 and unknown versions
- added: MEW 11 detection (exact version detection for v1.0 & v1.1 - v1.2)
- added: NSPack v3.7 detection
- improved: PE Lock v1.0x detection rewritten (faster & more accurate)
- improved: UPX detection, added more generic checks
- fixed: Safedisc API could be detected in a few non-safedisc files
- fixed: Safedisc detection for v4.60/v4.70 in files without version
- fixed: Starforce v4.50 version display bug

Thank you cdkiller, already downloaded a few moments after your post ^^.

http://img155.imageshack.us/img155/2788/piddc1.jpg


Why does the baloon-info say "ProtectionID v5.1e", though I've got the v5.2b?

well i am only human too, this just hasn´t been changed to v5.2b :rolleyes:

no hypercool special christmas version? :(

:rolleyes::D

a new version will be out soon, detecting the recent securom 7.30 + tages exact version + other updates...

Booyah to that. Always happy with your dedication on new versions.

v5.2c is done. this one will be the last version based on the old source wich is written in TASM.
We are currently working on the new v5.3 of Protection ID.
It will feature a major code overhaul and is ported over to
MASM allowing much more interesting stuff to be done.
Expect some news regarding the future of Protection ID soon!

here´s the small but up2date changelog, the big one comes with v5.3 ;-)

- added: SecuROM v7.29.0010, v7.29.0011, v7.29.0012, v7.30.0010, v7.30.0011, v7.30.0012, v7.30.0013, v7.30.0014 and v7.30.0015 detection
- added: Protect DiSC v7.6.1 detection
- added: Tages detection rewritten, added exact version detection of v5.2, v5.3, v5.4, v5.5.0 and v5.5.2
- added: Tages v5.5.2 (or newer) + Additional SoftShield detection
- added: Themida v1.8.2.0 (or newer) detections
- improved: X-Treme Protector detection improved

It seems new SecuRom is already out and PID 5.2c can't detect it^^

Full Game Title: ArmA: Armed Assault
Version: 1.0.5
Language: Euro version
Copy Protection:[!] SecuROM Detected - Version 7.21

Don't have game any more, i sold as it wasn't so good.

yup i already noticed the new SecuROM v7.31 gets detected wrong.
next update fixes it.

first great work that youre doing

but i have some games that only say securom 7.xx

Scanning -> H:\ hca\Resources\HCA.exe
File Type : Exe, Size : 6737920 (066D000h) Bytes
-> Suspicious MZ Header..
[!] SecuROM Detected - Version 7.xx
- Scan Took : 0.578 Seconds

hope there will come a new version

well, what version are you actually using?

forget to mention that i use latest version 5.2c

so i think securom 7.31 or higher

Send cdkiller or me a pm with exe and we will scan it for you. Just upload .exe on rapidshare and give us the link in pm.