Quote:
|
A scan with Protection ID or A-Ray Scanner would also confirm that the "cracked" EXE is actually still protected...
|
aray will still say StarForce even in cracked executables, because aray only checks for the section name '.sforce' (wich can be left in in every cracked executable).
pid checks if the jump to the starforce vm is still there, if not it´s cracked