FileForums

FileForums (https://fileforums.com/index.php)
-   PC Games (https://fileforums.com/forumdisplay.php?f=6)
-   -   Protection ID info thread - v6.4.0 (build 08.07.2010) (https://fileforums.com/showthread.php?t=45299)

cdkiller 11-04-2005 07:32

dunno whats causing the problem...
anyway pid v6.0 will be ported over to MASM. we will test it with lots of different Operating Systems and their service packs to trace possibe bugs.

Thanatos 17-04-2005 02:39

Excellent, looking forward to it :)

noscript 06-06-2005 07:26

any new progress?

cdkiller 07-06-2005 07:30

Quote:

any new progress?
yep, many changes have been done in v6.0.
we will also have features other scanners donīt have and could only dream of ;)
and also lots of suprises.

but pid v6.0 is kinda "on ice" for the public atm.
if new exe crypters/packers, pc game prots etc. are released or updated iīll update pid with the new signatures but the versions will only be given to my
friends to test them.

there will also be a public v5.1 wich adds lots of new and improved detections but no more new features. they will all be used in v6.0.

Krondike's_Shadow 01-07-2005 03:54

Man I'm whated for PID 6.0 for about 1 year now! Wonder how old Im gonna get when it hit the market!

coffin filler 01-07-2005 04:45

PID 5 is a great tool as im sure your aware :) . I to would love to get my greasy little mits on PID 6.0. Oh well i guess we will have to wait a while longer huh. Whats the time scale regarding PID 5.1 (as regards to the general public being able to download ?). Thanks again.

cdkiller 02-07-2005 05:44

Quote:

Whats the time scale regarding PID 5.1
i donīt want to say itīs ready in a few weeks. cos if i wonīt release it then ppl get mad at me ;)
letīs say when itīs done. v5.1 will get a huge detection update to detect the latest prots and to fix some detection bugs.

iīm thinking about some more betatesters scanning their games/applications
and submitting bugs + executables for testing.
drop me a pm if you want to test it. i will accept a few testers only, but you should have some posts here in the forum and a bit more as a basic knowledge about protections.
best is you are unpacking protections in your freetime.
i.e. exe protectors like armadillo & asprotect, dongles, license systems...

ByteMare 02-07-2005 09:24

Quote:

Originally Posted by cdkiller
best is you are unpacking protections in your freetime.
i.e. exe protectors like armadillo & asprotect, dongles, license systems...

wooopps...maybe I should sign up since I'm on vacation right now;)

Monty Burns 25-08-2005 03:55

Hi cdkiller,

just wanted to ask about the state of progress ?

cdkiller 27-08-2005 08:07

well pid detects all the latest pc iso protections.
also we are working on new features of pid wich i canīt tell about.
monty, when i send out the next alpha build youīll get it too so you can see it yourself. i donīt want to make all the new stuff public yet ;)

Monty Burns 27-08-2005 08:26

Quote:

Originally Posted by cdkiller
monty, when i send out the next alpha build youīll get it too so you can see it yourself.

That is good news :D

dd22qq 29-08-2005 07:47

Hi, love the prog, has helped me no end...but thought I'd have a gripe anyways :p and someone else in this thread summed it up perfectly:

Is it possible to make the interface and text a little bigger, it's just kinda on the smallish size.

And, also, for common folk like me who don't really need to read thru the finer details, could you do something simple like change the colour of the text for when a protection type _IS_ identified? It's just that I find myself reading a paragraph of text when there was no actual protection detected. I guess what I mean is to FLAG the text when a protection mechanism is detected.

Cheers :)

GLH 29-08-2005 09:15

Quote:

Originally Posted by dd22qq
...change the colour of the text for when a protection type _IS_ identified...

I think it's a good idea.

Monty Burns 29-08-2005 09:31

I know there is something concerning this issue.....cdkiller can tell you more about it.....:D:D

angel115 29-08-2005 11:21

Quote:

Originally Posted by cdkiller
next version detect the cd-checks in the core.dll in
Unreal 2 Engine Games like Postal 2, Splinter Cell and RavenShield.
i need some test reports for fixing the bugs.

You can download the core.dll V 1.0.0.306 on http://www.down-dll.com/index.html?frameA=dll_C

cdkiller 29-08-2005 16:35

string checks like in core.dll(s) of unreal engine powered games were already added long time ago...
we will have some tests once the gui is done so we can decide about changing the color of detected protections.

coffin filler 05-09-2005 05:55

Yes if i had to comment one thing i would like changed it would be the same issue about a font change once protections are Identified (for the public version obviously)

(ps thanks for the update cdkiller. I only use PID now as a result of all the work thats gone into it and the advances made from when PID was born and its life started to now when PID is enjoying full maturity ;) One thing i like is the "Protection report" tab as it makes using the GUI so much easier/faster. Keep up the excellent work !!

kosmiq 11-02-2006 13:26

You will probably flame me for this or something similar but I am just wondering how PiD6 is going... ?

:)

cdkiller 13-02-2006 04:04

atm development of pid v6.0 is kinda "on hold".
i had a real life drawback the recent time and i need to sort some things...
when will development continue?... honestly i canīt tell yet...
i just have much more important stuff to do...

kosmiq 13-02-2006 06:10

Quote:

Originally Posted by cdkiller
atm development of pid v6.0 is kinda "on hold".
i had a real life drawback the recent time and i need to sort some things...
when will development continue?... honestly i canīt tell yet...
i just have much more important stuff to do...

Ok, then I know. Sometimes real life needs to be maintained too so focus on that... :)

princcce 26-02-2006 02:09

Fan !!!
 
Hallo cdkiller,

Iīm your biggest fan.

I hope u can continue your lifework till perfection.:D

cdkiller 23-03-2006 06:47

itīs me back with a progress update...

in the next 1-2 weeks iīm putting a new PID rls together.
it will only be a Protection Update wich keeps PID up2date.
new features will be introduced in v6.0 wich we are working on from time to time.

what will be new for PC game protetections?

- Securom v7.xx.xx detection
i wonīt show v7.00.00.0xxx because iīm not 100% sure if itīs the real version. just check some games.
i.e. Serious Sam 2 (2005-10-20) is supposed to have SecuROM 7.00.00.0172. (debug the exe and break at the cd-check, search for AddD and youīll see...
but look at more recently released games...
CSI-3 Dimensions of Murder v1.0 appears to have SecuROM SecuROM 7.00.00.0008 but was released 2006-02-22. another example is Tony Hawks American Wasteland with SecuROM 7.00.00.0014 released 2006-01-17

- JoWood X-Prot detection (beeing used together with SecuROM)
- Laserlok Marathon detection
- Ring-Protech detection
- SmartE Copy Protection detection
- Starforce v3.x version is now displayed with build number
- Sysiphus detection
- Safedisc & Safecast detection improved
- VOB Protect CD/DVD v5.9x with build number detection
- Protect DiSC v6 detection (successor of VOB Protect CD/DVD)

updated non PC-game detections:
- armadillo received the biggest update, pid is now able to tell the version as exact as possible
- ACProtection updated and improved
- ASProtect updated and improved
- ExeCryptor v2 detection
- MoleBox detection

fixes:
- yeah they will be included, thou there isnīt much to fix as the last release was pretty stable code-wise.

the list isnīt completed yet, there will probably more new stuff for you ;)

Grumpy 23-03-2006 06:51

Nice! ;)

coffin filler 26-03-2006 12:02

:cool:

Monty Burns 27-03-2006 01:22

:D Good news ! :D

GLH 27-03-2006 03:56

:):):)

Eversun 30-03-2006 21:38

Hello, I ran this tool and deleted the attend data, but when I ran the exe, no error, no open, nothing happened. I use this tool again to check it again, it said:

Scanning -> F:\Games\COD2TC\CoD2SP_s.exe
File Type : Exe, Size : 1789952 (01B5000h) Bytes
[!] Safedisc 4.60.000 detected but verification not successfull
assuming exe includes a faked Safedisc version or it has been cracked !
[!] Possible CD/DVD-Key or Serial Check -> cdkey
- Scan Took : 0.828 Seconds


so was there anything wrong with it? Thank you.

TippeX 31-03-2006 02:26

Quote:

Originally Posted by Eversun
Hello, I ran this tool and deleted the attend data

you mean appended data?

if so, why did you delete it, chances are the protection/crack needs it

cdkiller 31-03-2006 03:03

Scanning -> I:\__pid collect\PC-GAME PROTECTiONS\Safedisc\Safedisc 4.60.000 (Call of Duty 2).exe
File Type : Exe, Size : 3139086 (02FE60Eh) Bytes
-> File has 1353230 (014A60Eh) bytes of appended data starting at offset 01B4000h
[!] Safedisc 4.60.000 detected !
[!] Possible CD/DVD-Key or Serial Check -> cdkey
- Scan Took : 1.391 Seconds

like tippex said, the appended data is part of the safedisc protection.

Quote:

[!] Safedisc 4.60.000 detected but verification not successfull
assuming exe includes a faked Safedisc version or it has been cracked !
u thought you can crack safedisc when removing the appended data?
itīs not that easy. u need a debugger, bypass the anti-dbg, get to the (hardcoded) oep, dump, fix imports, fix redirected calls, recover stolen bytes and rebuild the exe.

cdkiller 31-03-2006 04:23

this safedisc discussion made me have a deeper look at it ;)
iīve coded a better version detection when the version is removed.

-=[ ProtectionID v6.0 *PRiVATE* ALPHA ]=- (c) CDKiLLER & [x/xxx]
Build 2006-03-31
> Ready

Scanning -> I:\__pid collect\PC-GAME PROTECTiONS\Safedisc\Safedisc 4.xx.xxx (real v4.00.001) (NBA Live 2006).exe
File Type : Exe, Size : 10668852 (0A2CB34h) Bytes
-> File has 1481524 (0169B34h) bytes of appended data starting at offset 08C3000h
[!] Safedisc v3.20 - v4.xx or newer [removed version] detected !
[!] removed version is Safedisc v4.00.000 - v4.00.003
[!] Possible CD/DVD-Key or Serial Check -> Unregistered
- Scan Took : 2.437 Seconds

Scanning -> I:\__pid collect\PC-GAME PROTECTiONS\Safedisc\Safedisc 4.xx.xxx + Custom (real v4.60.000) (Need For Speed Most Wanted v1.3).exe
File Type : Exe, Size : 7254894 (06EB36Eh) Bytes
-> File has 1192814 (012336Eh) bytes of appended data starting at offset 05C8000h
[!] Safedisc v3.20 - v4.xx or newer [removed version] detected !
[!] removed version is Safedisc v4.50.000 - v4.60.000
[!] Possible CD/DVD-Check String -> Please insert
[!] Possible CD/DVD-Key or Serial Check -> CDKey
- Scan Took : 1.735 Seconds

---------------

hereīs a list with a few games without any version info:
Flatout
Knight Rider 2
Need For Speed Underground 2
Need For Speed Most Wanted
NHL 2006
NBA Live 2006

iīve only seen EA games without version info in it...

now youīll see the version, not 100% exact but better than before (v3.20 - v4.xx or newer) ;)

Monty Burns 31-03-2006 15:55

Hi mate,

good to here you are making progress.

I have got two questions:

1) When will the next "public" be released ?
2) Will it also detect the most common app protectors/packers (I think, you know what I mean: Das Gürteltier mit all seinen Facetten, z.B.)


Greetz

Monty

cdkiller 01-04-2006 05:59

Quote:

Das Gürteltier mit all seinen Facetten
yeah the Armadillo protection has been improved a lot. PID can detect versions like v4.00 - v4.05, v4.10 - v4.20, v4.30, v4.40...
iīm also thinking about detections if some arma features like Import Elemination, Debug-Blocker, Copy-Mem2 etc are used.

Quote:

When will the next "public" be released ?
during the following week.
no big changes thou, "just" updated and improved detections.
v6.0 will be the big one ;)

Monty Burns 01-04-2006 12:10

Quote:

Originally Posted by cdkiller
yeah the Armadillo protection has been improved a lot. PID can detect versions like v4.00 - v4.05, v4.10 - v4.20, v4.30, v4.40...
iīm also thinking about detections if some arma features like Import Elemination, Debug-Blocker, Copy-Mem2 etc are used.


REALLY ??

Oh man, that sounds fantastic. I don't know how this could be coded, but anyway...when you tell me it does, I think I can rely on you :D
Detecting certain arma versions (e.g. 4.10 and NOT 3.78-4.xx, like PEID does) would already be rather cool, but detecting IAT elimination, CopyMem II, Code-Splicing, Nanomites, etc., would be..................
well, I am speechless

Can't hardly wait to see this tool "in action".

GLH 01-04-2006 16:23

Quote:

Originally Posted by cdkiller
v6.0 will be the big one ;)

I cannot expect it... :)

cdkiller 03-04-2006 19:20

v5.1 is ready to download :D

The last public version (v5.0 Final c) was released 14.12.2004.
Right after releasing it, the development of v6.0 has began and still continues.
Now we release v5.1 to keep you up to date. No core changes, just some files from v6.0 alpha thrown into v5 ;-)
New protections were added, important ones got updated and improved, bugs got fixed...

here´s the changelog:

- added: JoWood X-Prot detection
- added: Laserlok Marathon detection
- added: Protect DiSC detection
- added: Ring-Protech detection
- added: SecuROM v7.xx.xx detection
- added: SmartE Copy Protection detection
- added: Starforce v3.x version is now displayed with build number
- added: Tages v5 detection
- added: VOB Protect CD/DVD v5.9x with build number detection instead of showing "VOB Protect CD/DVD [modified version] detected"
- added: ACProtect version detection for v1.09, v1.10, v1.20, v1.21, v1.22, v1.23, v1.3c, v1.32, v1.35 / v1.40, v1.41 and v2.0
- added: Armadillo version detection for v1.00 - v1.84, v2.00 - v2.40, v2.60 - v3.00, v3.05 - v3.20
v3.30 - v3.61, v3.70 - v3.75, v3.76 - v3.77, v3.78, v4.00 - v4.05, v4.10 - v4.20, v4.30 and v4.40
- added: ASProtect version detection for v1.0, v1.1, v1.11, v1.2, 1.22 - v1.23 Beta, 1.23 RC4 - 1.3.08.24, 1.23 RC4 (Registered),
v1.31, v1.32, v1.33, v2.0 Alpha and v2.1 - v2.11
- added: EXE Cryptor v2.0 - v2.1.xx, v2.2.0 - v2.2.4 and v2.3.0 - v2.3.7 detection
- added: FSG v1.0, v1.2, v1.3 - v1.31, v1.3.3, v1.33a and v2.0 detection
- added: PE Compact v2.xx generic detection
- added: PE Compact version detection for v1.00 - v1.3x, v1.40 - v1.50, v1.55, v1.56 - v1.65, v1.66 - v1.84,
v2.0 Beta Build v52, v2.00 - v2.10 and v2.20 - v2.64
- added: some more CD/DVD-Check detections
- improved: Laserlok detection
- improved: Safedisc [generic v1, v2, v3, v4] verification code making it possible to detect a faked Safedisc protection were the SD string
'BoG_ *90.0&!! Yy>' was simply added to the PE header, also added another piece of code checking for 'real' Safedisc
- improved: Safedisc v3.20 - v4.xx [unknown version] is more accurate due new checks
(i.e. NBA Live 2006, version is removed, PID detects 'Safedisc v4.00.001 - v4.00.003)
- improved: Safecast detection in safecast´ed executables
- improved: SecuROM detection, added one more check to speed up scanning in non SecuROM´ed files
- improved: StarForce detection
- improved: UPX detection
- improved: VOB Protect CD/DVD detection completely rewritten

protection id is going to be more than a pc-game protection scanner in the next release. the most important application protections are already be detected in this version. a lot more will follow later.

heh just noticed my post count beeing at 1111 ;)

Grumpy 03-04-2006 21:56

Well done buddy. Nice work as usual. ;)

Monty Burns 05-04-2006 06:10

Yepp, just tested it on some Arma, AsProtect, Aspack, ExeCryptor etc. files.....very, very nice work.

Many Thanx, dude!

bclkostra 18-04-2006 08:52

http://i.have.been.banned.for.advertising Visit This New Software

coffin filler 18-04-2006 13:15

:D :D He he made me giggle. (I have been banned for advertizing) straight to the point Jor forster.

cdkiller 24-04-2006 19:24

seems like it´s time for v5.1b ;)

Tages detection is broken in Act Of War High Tension.
seems like a new version (v5.4.x.x ?) or a custom one.

also i´ll include "TryMedia ActiveMark" and "KochMedia ePolice" detection cos they´r used in lots of "digital download" versions of pcgames.

the armadillo / asprotect detection will also receive an update to recognize the latest version.


All times are GMT -7. The time now is 00:45.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
FileForums @ https://fileforums.com