Protection ID info thread - v6.4.0 (build 08.07.2010)

[sylar91]

when i start pid, it crash. the error message is :

Protection ID v0.6.3.5 DECEMBER has crashed...
Build 12/24/09-20:33:24

Welcome to the scene of the crash.... take me to the hospital

EAX = 000000030h, EBX = 00000000Ah, ECX = 000000030h, EDX = 000000000h
ESI = 0004F3240h, EDI = 000000031h, ESP = 00022CFD0h, EBP = 00022D018h

DS = 00023h, ES = 00023h, FS = 0003Bh, GS = 00000h, SS = 00023h
DR0 = 000000000h, DR1 = 000000000h, DR2 = 000000000h, DR3 = 000000000h
DR6 = 000000000h, DR7 = 000000000h

CCW = 00000037Fh, CSW = 000004020h, CTW = 00000FFFFh, CEO = 000000000h
CES = 082936FB0h, CDO = 000000001h, CDS = 000000000h, CR0NPX = 000000000h

Crash @ CS:EIP -> 0001Bh:0761E6155h, EFlags : 000010206h
Stack @ SS:ESP -> 00023h:00022CFD0h

Crash Code : 0C0000005h
Crash Report : In Page Error

ThreadID : 03B4h / 0948
ThreadName : PiD Core Thread (thread 1)
Crash Happened in Scan File -> Unknown
Procedure Name : N/A
Crash File Line Range (low) -> 00
Crash File Line Range (high) -> 00
ProtectionID was scanning ->
Last Scan was -> Crash did NOT happen in scan thread
Scan was N/A
Next Scan is -> Crash did NOT happen in scan thread

Thread Start Va / Tag : 0x00408FFD

Pid executable range 0x00400000 -> 0x00574000 (0x00174000 bytes)

Crash address is NOT within pid's image

my os is windows 7 professional 32 bit

edit: in win xp pro sp3, on the same pc, it works fine.

[TippeX]

thanks, i think its the same crash as blazi and fp reported to me, will look into it asap,
just to clarify..
you get this when double clicking on pid? or when you scan a file from the context menu?

[sylar91]

when i open pid, it immediatly crash.

[PrefectFord]

Same here, instant crash on Windows 7 Prof. x64

[TippeX]

weird, will definately look into this.. pf, i've sent you a PM.. let me know if it works out for you (danke in advance) (and fingers crossed)

[TippeX]

for those of you having this crash - do you have unlocker installed?

i ask, because fp discovered if this program was running, the crash happened, i was also able to reproduce this (picking 12+ files seems to do it), it would appear that the program is using setwindowshook to set hooks, im not sure exactly what its doing, but somehow it interferes with pid, possibly it subclasses something, and destroys data pid uses..

for me, the problem is caused by this program, as if you uninstall it pid is perfectly fine, so i think we might have to contact the author about this (unless i can find a workaround - but that doesnt look so simple)..

if you are not using that program and still get the crash, i might need you to run some beta exe's for me

NOTE : this is not related to the running pid -> crash, its related to scanning files from the context menu...

[stf-]

Hi,

I was just wondering if there was a way to get the scan results on the command line (without any gui) ? Somethin' like --no-gui --scan A.exe

I'm testing unattended installations using a bunch of scripts under cygwin. Would be great as Pid is really fantastic to detect installers/packers.

Stéphane.

[TippeX]

we plan to make a console version , protection id 7 development has begun, there will be 2 gui's (one x32, one x64) and 2 consoles (again one x32 and one x64), and has some nice commandline options too

[scbs29]

Just bought Company 0f Heroes - Opposing Fronts. When installed also installs Securom. Using Protection ID 6.5.3 on installation DVD does not pick up Securom, says [!] File appears to have no protection or is using an unknown protection.

[Joe Forster/STA]

Are you sure you're scanning the right executable/DLL?

[scbs29]

Thanks for the reply.
I told Protection ID to scan the entire dvd.

[cdkiller]

game files are usually compressed (mainly cab files due the use of install shield)
on disc to save some space. they´ll get decompressed during the installation.

try scanning the folder on your hdd were the game is installed in. simply drag & drop the folder into pid and check out the protection report window

afaik Company 0f Heroes - Opposing Fronts included a securom protected dll.

[scbs29]

Thanks for the reply.
As you said, scanning the installed game file found the Securom.
I was hoping that ProtectionID could find Securom etc before installing the game,
so that I could know in advance if a game would install this.

[TippeX]

it can sometimes, if you do a sector scan on the disk - it'll report securom 4/5/7 found etc (no exact version number), also it can scan inside msi install files (if you enable that in the configuration)...

so, i'd suggest you actually learn how to use the program before complaining

also securom is NOT installed to the system, the game exe is wrapped with securom, nothing else.. or did i misinterpret what you meant by "so that I could know in advance if a game would install this" ?

[Cowsheep]

Hmm, some securom game installed a "Securom User Access Service (v7)" on my system.