View Single Post
  #353  
Old 01-04-2006, 12:10
Monty Burns's Avatar
Monty Burns Monty Burns is offline
Die Hard Member
 
Join Date: Apr 2001
Location: Springfield
Posts: 1,173
Thanks: 0
Thanked 0 Times in 0 Posts
Monty Burns is on a distinguished road
Quote:
Originally Posted by cdkiller
yeah the Armadillo protection has been improved a lot. PID can detect versions like v4.00 - v4.05, v4.10 - v4.20, v4.30, v4.40...
i´m also thinking about detections if some arma features like Import Elemination, Debug-Blocker, Copy-Mem2 etc are used.

REALLY ??

Oh man, that sounds fantastic. I don't know how this could be coded, but anyway...when you tell me it does, I think I can rely on you
Detecting certain arma versions (e.g. 4.10 and NOT 3.78-4.xx, like PEID does) would already be rather cool, but detecting IAT elimination, CopyMem II, Code-Splicing, Nanomites, etc., would be..................
well, I am speechless

Can't hardly wait to see this tool "in action".
__________________
[b][i]Monty says:[/i][/b]

Here's a phone. Call somebody who cares.

Ah, Monday morning.... Time to pay for your two days of debauchery, you hungover drones.

I could crush him like an ant. But it would be too easy. No, revenge is a dish best served cold. I'll bide my time until.... Oh, what the hell. I'll just crush him like an ant.
Reply With Quote