FileForums

FileForums (https://fileforums.com/index.php)
-   PC Games (https://fileforums.com/forumdisplay.php?f=6)
-   -   Protection ID info thread - v6.4.0 (build 08.07.2010) (https://fileforums.com/showthread.php?t=45299)

ByteMare 26-08-2003 22:56

Quote:

Originally posted by cdkiller

lol some guy want to write a book and will mention my tool(s)
inside :rolleyes: [/B]

Damn, you gonna get famous:D I don't see the connection between software security and your tool though...hmmm...
scanning the exe and getting the "group-tags"/ protection + version etc. is no big thingie...but hey! What the hell!:rolleyes:

krondike 03-09-2003 10:25

Got a bug report!

When you scan mod.dll for Battlfield 1942 1.45 cracked version, is do a forbidden thing, in Windows XP, protection ID 3.4

cdkiller 03-09-2003 10:40

can u mail me a picture of the windows msgbox,
wich says 'error at offset xxx...' ?

iīve scanned the BF1942 MOD.dll cracked by iMMERSiON
and ProtectionID showed the message: cracked by iMMERSiON
no error...

but i used v3.5 for scanning ;)
(maybe i will release it next weekend)

krondike 03-09-2003 13:38

Ehm in Windows XP home edition SP 1, it's no problemo...

But I have Windows XP PRO SP1 (+ latest updates) at home....at there are problemo there...I send you over screen pic if I got the same problem again. :o

krondike 06-09-2003 13:32

I've got a big suggestion. Maybe so big that's it's should be calling 4.0

You should add a button, that scans all the CD:s (even the face ones) what protection the CD have. Becuase some CD:s miss .exe file, to scan, and you must first install the game before you can see what protection the game had.

BUT when the NO cd are mounted or iputed to the cd driver, the button is grey and you can't push it! ;)

And should detect everything from, SafeDisc to Playstation, X-box disc...

ONE BIG suggestion...:D

TippeX 06-09-2003 15:06

Quote:

Originally posted by krondike
I've got a big suggestion. Maybe so big that's it's should be calling 4.0

You should add a button, that scans all the CD:s (even the face ones) what protection the CD have. Becuase some CD:s miss .exe file, to scan, and you must first install the game before you can see what protection the game had.

BUT when the NO cd are mounted or iputed to the cd driver, the button is grey and you can't push it! ;)

And should detect everything from, SafeDisc to Playstation, X-box disc...

ONE BIG suggestion...:D

the reason they probably cant find any protection on a cd is because the exe might be packed in a .cab file or whatever...

last time i checked you cant read xbox dvd's on a pc.. if you're going to suggest things suggest things that you know about.

ByteMare 07-09-2003 00:01

In this case, scanning the cab for a possible protection is just a waste of time, it's much easier just to install the soft and then check it.

Don't know about the format of the xbox disc, but I guess the old
m$ added something mean, which probably stops you from even creating/mounting images and check them. As mentioned, I don't know much about the format....

cdkiller 07-09-2003 06:19

Quote:

it's much easier just to install the soft and then check it
and ProtectionID will only be developed in this way...

i donīt have much knowledge about the Console Protections
like PS2 / X-BOX.

btw, GLH told me i got competition ;)
http://kskiller.copybase.ch/

nice GFX, but the rest will be ****ty...
developed by 'KS Killer' lol, canīt wait to test his tool.
but it will never beat ProtectionID :D

expect version 3.5 to be released later today.
i just need to fix a bug with the Neolite detection...

cdkiller 08-09-2003 00:55

v3.5
-----
* added: detection for Neolite
* added: detection for PE Nightmare
* added: detection for PE Ninja
* added: detection for PE Shield
* added: detection for PeX
* added: detection for Softdefender
* added: detection for VGCrypt
* added: Easteregg ;-)
* improved: CD-Check detection strings and messages
* improved: detection if a file has been cracked by RAZOR 1911 (Age of Wonders: Shadows of Magic v1.10)
* improved: detection if a file has been cracked by DRUNK (Enigma Rising Tide v1.1)
* improved: general code optimizations

@ krondike
if u still got the error, make a pic wich shows the offset and mail it to me.

krondike 08-09-2003 16:09

1 Attachment(s)
Isn't I the best. Took me 3 seconds to find the easter egg!

Here are a pic to proof it. But it's censure becuase. I don't wanna tip off others that haven't found the Easter Egg. ;)

RincewindTheWiz 08-09-2003 16:34

I like my easter eggs to be made of chocolate :D

cdkiller 09-09-2003 04:19

Quote:

I like my easter eggs to be made of chocolate
sorry but itīs only a MessageBox ;)

ByteMare 09-09-2003 05:45

As long as there is no giant f-cking bunny popping up on the screen, i'm stick with the egg...

"Holy sh-t! I put a bpx on OEP and giant freaking bunny with green teeth bounced up on the screen, it was unbeliveable"

*arf*:D

krondike 10-09-2003 13:14

@CDKiLLER
an internal bugreport has been mailed to you! some of them...very funny....:D

cdkiller 12-09-2003 12:34

thx for the test report u mailed me.

i know most of the bugs and they are already fixed.
but i will release a bugfixed version to the public in 1 or 2 weeks.

Quote:

Neverwinter Nights Manual.pdf
heh donīt scan pdf files ;)
version 3.6 only alows scanning for executable files.
(i check the exe/dll/dat for the exe strings MZ / PE).

Quote:

Cracked mod.dll (Battlefield 1945) version 1.45.
hmm it doesnīt crash for me... but i will trace my code to find
the cause.

Quote:

RavenShield.exe version 1.41 drunk
fixed

Quote:

Adobe Reader 6.0 SV version, pecompact
itīs really PECompact and i doubt there is an easteregg ;)

Eagle 12-09-2003 12:44

... too lazy to look for an easter egg :) ...

krondike 12-09-2003 13:35

Quote:

Originally posted by cdkiller
heh donīt scan pdf files ;)
version 3.6 only alows scanning for executable files.
(i check the exe/dll/dat for the exe strings MZ / PE).

Haha but you know...there are only SOME PDF-files there are wrong....ehm, message. And I was tired to scan .dll and .exe files :p. But hope you put an special message for unsupported files ;)

cdkiller 15-09-2003 13:48

the bugs u reported are fixed.
iīve sent u v3.6 beta to test...

krondike 16-09-2003 04:05

Well I am impress :D

Battlefield 1942 working great!

And I've seen you added "scan for cd-checks" in a cracked SecuROM message.

But look at this:

Quote:

UPX0....................................UPX1.....0 ... ..."[email protected].......&.. ............ ..`UPX3.........`.......6..
this is from ColdFusion shouldn't Protection Scanner find UPX compress?

And when I've scan a none .dll, .exe, .dat file, it's says "not a valid .exe file" and more, but the thing is. after that message, the scanner crash. Maybe that's a god thing....or not...:D
What happen to -> 20MB limit question?
I've scanned battefield 1942 1.41 patch that's about 130 MB or something... took very long time.... :p

Anyway great program! You have done well with bug fixing ;)

JoyBoy 16-09-2003 07:54

Scan Razor's crack for that new Nascar update... ;)

GLH 16-09-2003 10:40

When i scan the original/not cracked YDKJ4.EXE (You Don't Know Jack 4 / german version) Protection ID V3.5 tells me
"File was protected with SecuROM. But the protection has been cracked."
But when i want to play the game with a normal backup cd insert it tells me the SecuROM "Wrong disc" message...

@CDKiller:
If you want the original exe tell me. I will send it to you. (Its RAR 2,2 MB)

cdkiller 16-09-2003 12:56

lol Nascar_Racing_2003_Season_v1.2.0.1_Patch-RazorDOX
is lame ;)

@krondike
UPX will now be detected even if the sections and the tags are removed.

"not a valid .exe file" + crash => it was a bug with the multiscan feature, now fixed.

@glh
i know about this problem with the newer securom.
iīm still on bugfixing the securom code.

krondike 18-09-2003 10:19

I've got a big suggestion again... when you mark more then 1 files, and right click and "Scan with Protection ID" many protection id console are open... what about just have one protection id console but many message... istead....


There are still problems with UPX detection... I've compressed an .exe file with UPX and it's don't find it.

Quote:

UPX0....................................UPX1...... [email protected]................ ................ ..`UPX3.....0.......$... ..............@..@$Id: UPX 0.72 Copyright (C) 1996-1999 Laszlo Molnar & Markus Oberhumer $..$Id: NRV 0.61 Copyright (C) 1996-1999 Markus F.X.J. Oberhumer $..$License: NRV for UPX is distributed under special license $.
but his work
Quote:

.......................UPX0....................... .............UPX1................................@ ....rsrc....0.......,..................@.......... .................................................. .................................................. .................................................. .................................................. .................................................. .................................................. .................................................. ......1.20.UPX!........i.&n.h..=.......&..V
edit: (hehe i found a forum bug also)

my gues is that the protection ID is looking for UPX! as a tag....


SafeDisc 2.10 is found in a cracked SafeDisc 2.10 file..
Black And White cracked .exe file with out any tags! So should protection ID detect it's.....

cdkiller 18-09-2003 11:49

ohh yeah the upx detection for versions older than v1.0 is now fixed.
yes itīs right i am looking for 'UPX!' in the header but also for some signature bytes and a special UPX byte pattern.
(i need to update my code to support the very early UPX version)

i canīt just check for UPX1,UPX2 coz it could be TeLock (nasty!).
but v4.0 detects TeLock now really proper :)

iīm downloading the cracked B&W.exe to check it out.

krondike 23-09-2003 13:42

I have notice one problem. Protection ID 4.0 BETA.

Quote:

[email protected] X1.....@.......:[email protected].... ...........>[email protected].........
Protection ID find UPX protection..... it's not..becuase you can't extract it with UPX...so I think it's "aspack" protection...acourding to "aspack" tag...so...maybe there are som problem here...:D

cdkiller 23-09-2003 14:58

test the newest beta iīve sent u ;)
itīs a huge list of improvements...

the code snipped from the header was patched by u manually,
coz no known packer adds this sections together.

but PiD will greatly improve scanning, coz it checks for specific byte patterns for each version of a packer / encrypter and not only the section names...

krondike 03-10-2003 14:38

1 Attachment(s)
4.0 BETA 3 first bug.

Please see the image and add the text your search for CD-checks! ;)

cdkiller 04-10-2003 03:50

it will not be detected coz itīs a DLG Reference...
(p.l.e.a.s.e...in.s.e.r.t....) i donīt scan for dlg refs, coz this really
slows down the whole scanning speed and is used only in a very few games...

you know that the tron2.exe has additional cd-checks ;)

krondike 04-10-2003 15:38

Well in the UK version of TRON 2.0 there isn't any tron2.exe there is a tron.exe and a Lithtech.exe.

Lithtech.exe is protected with SecuROM.

tron.exe has CD-Checks in it.
(I've manage to get the root of the CD-Checks and dissable it)

But the image I showed you, is what the user se. But there are some other text string to in the .exe file. But if you do this, if you search for "disc" or "tron2.exe" than you know it's protected with CD-checks..becuase how many programs/games has text string call "tron2.exe" ?

but it's strange that there isn't any file call tron2.exe in the folder.....:confused:

cdkiller 05-10-2003 04:29

Quote:

if you search for "disc" or "tron2.exe"
many exefiles can have the string 'disc' inside so i wonīt scan for it. like i said, i only check error strings and no dlg references.
dlg references like in tron 2.0 are used only in a very few games.

about the v4.0 release... it should be around next week.

cdkiller 08-10-2003 05:28

v4.0 is released and itīs the most enhanced version ever...

Changelog v4.0
--------------------
* added: new logo by Eboy [SAC]
* added: check if the scanned file is a valid Executable
* added: message when scanning files >20 MB
* added: scanning for CD-Checks in cracked SecuROM files
* added: detection for ASProtect
* added: detection for BJFnt
* added: detection for Def v1.0
* added: detection for Exe Bundle
* added: detection for ExeProt
* added: detection for Krypton
* added: detection for PE Mangle
* added: detection for PE Pack/Crypt
* added: detection for PhrozenCrew PE Shrinker
* added: detection for PKLite32
* added: detection for Simple PE Crypter
* added: detection for Stoneīs PE Encrypter
* added: detection for TeLock
* added: detection for hacked UPX versions
* added: detection for VBO Watch
* added: detection for VGShrink
* added: detection for WWPack32
* added: more CD-Check detection strings to database
* added: detection if ASPack was unwrapped with ASPackDie
* improved: Armadillo detection
* improved: ASPack detection (v2.11, v2.12)
* improved: CD-Check API detection (now also checking for 'cmp eax,5')
* improved: CodeLock detection
* improved: FSG detection scanning speed + support for hacked versions
* improved: Neolite detection
* improved: NFO detection
* improved: Noodle Crypt detection
* improved: Obsidium Software Protection
* improved: PEnguincrypt detection
* improved: PeX detection
* improved: Petite detection scanning speed + support for hacked versions
* improved: VGCrypt detection for both encryption modes (added section, installed code into cave)
* improved: SecuROM detection code optimized
* improved: detection if a file has been cracked by CLASS
* improved: detection if a file has been cracked by DRUNK (i.e. Runaway Train: A Road Adventure)
* improved: detection if a file has been cracked by DYNASTY (i.e. Gothic 2 AddOn)
* improved: detection if a file has been cracked by MYTH / DEViANCE (i.e. American Conquest Fight Back, Chrome)
* fixed: UPX detection bug
* fixed: 'lame' bug in Razor 1911 SecuROM detection ;-)
* fixed: ProtectionID cannot be started more than once at the same time
* fixed: some grammer issues (thx Bounty Warrior)
...and finally the easteregg has become a picture...

GLH 08-10-2003 08:04

Wow! What a huge changelog...

Some questions:
- is it wanted that the EasterEgg only get closed when PID4.0 is closed
- when i scan my cracked Chrome.exe it tells me it is protected with securom 4.8.. and not cracked
- when i scan the Lemmings Revolution cracked exe, you've maked for me, it tells me protected with CD Check and not cracked by you.

RincewindTheWiz 08-10-2003 08:18

Quote:

Originally posted by cdkiller
* fixed: some grammer issues (thx Bounty Warrior)
grammAr. And who are you going to thank for this correction ? :D

cdkiller 08-10-2003 08:20

Quote:

is it wanted that the EasterEgg only get closed when PID4.0 is closed
yes ;)

Quote:

it tells me protected with CD Check and not cracked by you
i dont scan for my tags anymore...

wich chrome.exe do u use ? i guess the one from Keops...
(i tested the flt nocd and it works fine)


Quote:

grammAr. And who are you going to thank for this correction ?
:rolleyes:

Eagle 09-10-2003 02:28

now i got the easteregg, damn that took me a loooong time :D

krondike 14-11-2003 04:57

First bugg report from me.

Age of Wonders - Shadow Magic is protected with new SecuROM 4.8->

And the protection id says it has already been cracked, on the original 1.1 file and the original 1.2 file :p

Edit:
And the same for Vietcong 1.4.

cdkiller 16-11-2003 05:09

i know this problem, itīs caused only by a very few games...
most securom games will work, but iīm on the way to fix this problem with PiD v4.1 when i got some more time...

Zurke 21-11-2003 13:44

Hi All
 
I found this site because I was searching for the developer of Protection ID.

I downloaded it as freeware.

When I used an unRAR to open it the "cracktro.exe, notes.txt and install.reg file were extracted.
But when I try to access the Protection ID.exe I get prompt for a password.

I was under the assumption this was a freeware. Is there a cost to this program that would then give me a password?
Or am I missing something?

The program sounds great and I am impressed with the knowledge of the owner and the threads I have read on this post.

Hope to hear from someone.

Eagle 21-11-2003 14:14

a password? not that I know.

re-download it from my mirror (eagleeye). I _definatively_ have no password.
And please make sure you have the latest version of WinRAR!. Check www.rarlabs.com for that.

Zurke 21-11-2003 15:10

I am at a loss
 
to find your mirror site Eagle.


Is it the site in your profile?


All times are GMT -7. The time now is 23:25.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
FileForums @ https://fileforums.com