Protection ID info thread - v6.4.0 (build 08.07.2010)

[Alger27]

to find your mirror site Eagle.


Is it the site in your profile?

[juanamm]

@TippeX's website is down, someone can share a link to the program tool.
Thank you

[Joe Forster/STA]

Here's a direct link: https://web.archive.org/web/20180909...ember.2017.rar . (It downloads with the extension .zip but it's still a RAR archive!)

[juanamm]

Originally Posted by Joe Forster/STA

Here's a direct link: https://web.archive.org/web/20180909...ember.2017.rar . (It downloads with the extension .zip but it's still a RAR archive!)

Thanks bud

[acal3000]

It's looks like the Protection Id development has ceased complelety..

[kj911]

Please help me analyse the results. (Tech info only!)*

*0x00000000 --> not copyable, ...01 --> once time, ...02 --> all?

Note: Funny bug from my new PC's LG DVD-Writer or/and old DVD-Recorder issue. Older time used older DVD-Writer from PC and any older different DVD-/+RW disc, burned any recordings, not protected. (Checked.) Rewriting old any recordings with newest blank DVD-RW dics, see the results. Funny! (Not flagged the recordings with any DRMs, and taken from ~25-30 years SECAM/PAL vhs tapes.) Recorders, not deleting these recordings after DVD-burning. The flagged DVD readable and copyable to PC. Rare bug??

[cdkiller]

faster, more accurate, still better and no more beta - ProtectionID v6.1.3 (build 26th dec 2008)

download / autoupdate available

check the included helpfile for additions / improvements / bugfixes / detections etc.

[cdkiller]

PID v6.1.6 is out

core additions / changes

- new: enabled the PE Stuff dialog (still in early stages)
- new: smbios reporting added (misc tools portion)

- update: pid entrypoint code optimised
- update: updated resizing core, and squashed a few bugs
- update: false positive with some anti virus programs is now fixed (gdata and avast)
- update: folderwatch, task manager, cd/dvd filter driver report, services report and folder locations all have right click context menus allowing the data to be saved to file
- update: uninstaller code tweaked - various fixes on some entries that would not uninstall
- update: update portion is now tweaked, a bit better and more futureproof
- update: windows 7 is now detected right and everything is functional (we are windows 7 compatible)

- bugfix: gui issue when run from context menu (log window will be shown)
- bugfix: file open doing nothing bug fixed - happened on WinXP with no service packs
- bugfix: folderwatch - bugfix in window handler, could have caused a lockup in 9x/me systems


detection additions / changes

- new: check_protectdisc.asm - added ProtectDisc exact v9.0.0, v9.1.0 & v9.2.0 detection
- new: check_g4wl.asm - added Games for Windows Live detection (xlive)
- new: check_steam.asm - added Steam (basic stub) detection
- new: check_activemark.asm - added ActiveMARK v6.50.767 detection

- new: check_breakpointcrypter.asm - added Breakpoint Crypter v0.0.79 detection
- new: check_expressor.asm - added exPresor v1.6.1 (Pro) detection
- new: check_fearzcrypter.asm - added fEaRz Crypter v2.2.0 detection
- new: check_hellcrypter.asm - added HellCrypter v1 detection
- new: check_kratoscrypter.asm - added Kratos Crypter detection
- new: check_npack.asm - added nPack v1.1.800.2008 + unknown version detection
- new: check_obsidium.asm - added Obsidium v1.3.6.1 detection
- new: check_pespin.asm - added PeSpin v0.1 (x64) detection
- new: check_rdgpack.asm - added RDG Pack Lite Edition v0.4 detection
- new: check_roguepack.asm - added RoguePack v4.0 Beta 1 detection
- new: check_rlpack.asm - added RLPack v1.21 detection
- new: check_simplecrypter.asm - added Simpl3 CrYpT3R detection
- new: check_xcrypter.asm - added X-Crypter v2.01 detection
- new: check_zprotect.asm - added in *generic* ZProtect detection

- new: dongle_softdog.asm - added SoftDog Dongle detection

- update: check_protectdisc.asm - removed protection level output (basic/pro) when detecting v9 (this version is all 'Pro', no more 'Basic' v9 games)
- update: check_activemark.asm - ActiveMark v6.1.335 detection rewritten (thx Nacho_dj for reporting a bug in American McGee's Grimm Bundle)


CD/DVD/Image file/sector scan

- update: sector scan updated to handle various movie protection(css/cpmm, cprm, aacs hddvd, aacs bd), this code is still in the experimental stage, and needs testing, but seems to work

[I] Init cd/dvd sector scan for Drive O
[i] Detected CSS / CPMM Protection! (0x00000001)
[i] Region Lock Detected -> RegionBitMask: 00000002
[.] Region(s) allowed : 2 (Drive region will need to be changed, you have 2 changes remaining, your current region is : 1)
- Scan Took : 0.828 Second(s)

- bugfix: fixed bug in cddvd sector scanning code (register got trashed) - not critical..

[cdkiller]

greetings folks! we are proud to announce a new public release of Protection ID.
this time it's v6.4.0 wich features up2date detections, improvements & bugfixes.

here is the changelog, enjoy

core additions / changes

- new: added in whois capabilities to IP/Name resolver
- new: compiler detector updated to detect:
- more Borland Delphi
- more Visual C/C++
- more MinGW
- Visual Objects
- Liberty BASIC
- PureBASIC
- REALbasic

- update: changed output for rar/zip etc. wich is non protection related to be displayed in the logwindow only.
(protection report will only display protected files like securom/starforce containers etc.)
- update: some tweaks for the shortcut creation system
- bugfix: possible digital signature check crash fixed
- bugfix: peid extension code tweaks & some fixes
- bugfix: fixed closing a bad handle


detection additions / changes

- new: check_cenega.asm - added in Cenega ProtectDVD detection (custom protection for cenega .pl games)
- new: check_protectdisc.asm - added in generic v9.27 (or higher) detection
- new: check_protectdisc.asm - added in exact Protect DiSC versions for v9.26, v9.28 & v9.30
- new: check_steam.asm - added in Valve CEG - Custom Executable Generation detection for Steam exe's
- new: check_ubidrm.asm - added in UBISoft Online DRM detection

- new: check_armadillo.asm - added in Armadillo v7.20 (or newer) detection
- new: check_asprotect.asm - added in ASProtect v2.56 (or newer) detection
- new: check_boxedapppacker.asm - added in detection for BoxedAppPacker bundled files
- new: check_clisecure.asm - added in detection for CliSecure .NET Code Protector
- new: check_codewall.asm - added in detection of CodeWall Technologies .NET Protector
- new: check_dyamarobfuscator.asm - added in DYAMAR Obfuscator detection
- new: check_enigmaprotector.asm - detection of Enigma Protector v2.xx wrapped files
- new: check_obsidium.asm - added in Obsidium v1.4.0.0 (or newer) detection
- new: check_reflexivearcade.asm - added in Reflexive Arcade Wrapper version info for build 179, 180, 181, 182, 183 & v184
- new: check_safeengine.asm - added Safengine Licensor v1.7.2.0 (or newer) detection
- new: check_salamandernet.asm - added in detection of Salamander .NET Protector & the core.dll (incl. version)
- new: check_shoecakedrm.asm - added in detection of Shoecake Games Activation
- new: check_softanchor.asm - added in UniLoc SoftAnchor detection
- new: check_themida.asm - detection of Themida using a new variant of Hide from PE Scanner
- new: check_xenocode.asm - added in detection for Xenocode Postbuild 2009
- new: check_xenocode.asm - added in detection for XenoCode Virtual Application Studio 2010

- new: check_apecsoftswftoexe.asm - added in ApecSoft SWF2EXE Converter v1.0 module detection
- new: check_babelobfuscator.asm - added in Babel .Net Obfuscator v3.x (or higher) detection
- new: check_exedefender.asm - added in ExeDefender v1.0 detection
- new: check_larp.asm - added in LARP v2.x detection
- new: check_netspider.asm - added in NET.Spider v1.0 (or older) and v1.1 (or higher) detection
- new: check_noobyprotect.asm - updated to detect NoobyProtect v1.7.x.x
- new: check_refruncycrypter.asm - Refruncy Crypter detection added
- new: check_scobfuscator.asm - added in SC Obfuscator detection
- new: check_scpack.asm - added in SC Pack v0.1 & v0.2 detection
- new: check_vprotect.asm - rewritten to detect VirtualizeProtect v1.0 (or newer)
- new: check_yincrypt.asm - added in YinCrypt v1 (Public) detection

- new: license_activelock.asm - added in ActiveLock Licensing Module for DotNET detection
- new: license_icelicense.asm - added in detection of IonWorx - ICE License
- new: license_iceni.asm - added Iceni Technology License Wrapper detection
- new: license_interlok.asm - added iLok USB device driver detection
- new: license_protectionplus.asm - added in detection of the Protection Plus v4.6 Wrapper

- new: dongle_marx.asm - now detects the MARX CryptoBox PE Envelope
- new: dongle_proteqcompact.asm - added in Proteq Compact-500 Dongle detection + driver & version reporting
- new: dongle_sentry.asm - added in detection for the Sentry Hardware Lock USB driver + version
- new: dongle_softdog.asm - added in SoftDog driver check + version reporting

- new: installer_adobeextract.asm - added in Adobe Extractor detection
- new: installer_nanozip.asm - added NanoZip SFX Module detection

- improved: check_activemark.asm - ActiveMark is now detected properly in games with a digital signature
- improved: check_copyminder.asm - updated CopyMinder scan, does now detect on a game it didn't see before
- improved: check_dotnetreactor.asm - rewritten dotNet Reactor detection (more accurate)
- improved: check_ea_custom.asm - update cucko detection with another pattern using a new routine
- improved: check_execryptor2.asm - added in another generic check & updated to detect on 2 files it didn't 'see' before
- improved: check_moleboxultra.asm - now detects on MoleBox Virtualization Solution v4.2321 too
- improved: check_pecompact.asm - added in two more generic checks
- improved: check_popcapdrm.asm - now detects on recent popcap games too
- improved: check_protectdisc.asm - better handling for newer versions
- improved: check_securom.asm - updated to detect SecuROM SLL files a bit better
- improved: check_securom.asm - improved paul.dll detection (were version info is removed)
- improved: check_solidshield.asm - added in another generic check for the core.dll
- improved: check_themida.asm - tweaked, detects now on a file it did not 'see' before
- improved: check_upx.asm - added in another check for unknown / modified UPX
- improved: check_vmprotect.asm - added in another generic check

- improved: check_cryptic.asm - added in another check for Cryptic v2.0
- improved: check_darkcrypt.asm - updated DarkCrypt 1.2 detection with heuristic check
- improved: check_gieprotector.asm - added in two more checks for Gie Protector v0.2
- improved: check_mpress.asm - updated to handle MPress v2.12 (and newer)
- improved: check_noobyprotect.asm - NoobyProtect code adjusted to handle 2 files it didn't 'see'
- improved: check_pearmor.asm - added in another check for a newer version
- improved: check_pecrypt.asm - tweaked code results in faster scanning
- improved: check_privateexe.asm - updated detection code for v3.x
- improved: check_rdgpolypack.asm - tweaked, now detects on an exe it did not see before (thx ReverseB00n)
- improved: check_safeengine.asm - updated Safengine Licensor with another check
- improved: check_yodacrypt.asm - tweaked YodaCrypt v1.3 detection (does now detect on an exe it didn’t see before)
- improved: check_zprotect.asm - ZProtect signature updated + it detects unknown versions now

- improved: dongle_copylock.asm - added detection for another variant
- improved: dongle_dinkey.asm - now detects on an application it did not 'see' before
- improved: dongle_rockey.asm - updated to detect Rockey2 on an application it did not 'see' before
- improved: dongle_softdog.asm - updated with another check for SoftDog dongles

- improved: installer_7zip.asm - another variant of 7z SFX gets detected now
- improved: installer_bitrock.asm - rewritten BitRock InstallBuilder detection to be more generic
- improved: installer_install_anywhere - added another check for (newer) InstallAnywhere Self Extractor Modules

- bugfix: check_securom.asm - fixed matroschka detection in securom - the name output was fucked on a recent exe
- bugfix: dongle_copylock.asm - fixed internal bug
- bugfix: installer_gkwaresfx.asm - fixed double output


download the fresh version at http://pid.gamecopyworld.com

[Joe Forster/STA]

ProtectionID 6.4.0 is unable to determine the compressor/encryptor used in the newest versions of UltraISO. You might want to look into it. (Unless it's already done in unreleased betas... )

[Blazkowicz]

Just tried with beta on UltraISO 9.3.6.2750:
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 1233408 (012D200h) Byte(s)
[x] Warning - FileAlignment seems wrong.. no solution calculated (using NULL)
[File Heuristics] -> Flag : 00000000000001001100000000100001 (0x0004C021)
[!] ASPack v2.12 compressed !
- Scan Took : 0.63 Second(s) [00000003Fh tick(s)]