Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 11-25-2004, 21:45
TmC TmC is offline
VIP
 
Join Date: Aug 2004
Posts: 330
Rept. Given: 1
Rept. Rcvd 15 Times in 9 Posts
Thanks Given: 2
Thanks Rcvd at 23 Times in 17 Posts
TmC Reputation: 15
Kazaa 2.6.6 Protection

Hi all,
just wondering what tool does kazaa 2.6.6 use to protect itself. Realisty crack does no more work because kazaa detects the altered dll and complains that ads have to be shown and that will quit untill ads restoration.
So i begun looking into it by myself.

PEiD does not help, nor ProtectionID does, "Nothing Found *" is the response, and no known crypto algorythms(nor crc32 but i suspect there is but it is encrypted), oep cannot be found because "error in reading process memory" and there is only one process in windows taskbar(so no child and father). The only thing i know is that it is packed because running a hardcore scan, the entropy and all boxes report is as packed.

I tried procdump but the process is not in the list, so no dumping available and if i try to unpack it it says that the process is not 32-bit or it is already finished.

ImpRec finds it but it detects a wrong oep and all import table is invalid.

Did someone manage to do something with this program or know which protection system it uses(if not custom created by Sharman Networks)?
Reply With Quote
  #2  
Old 11-26-2004, 01:46
MaRKuS-DJM's Avatar
MaRKuS-DJM MaRKuS-DJM is offline
Cracker + Unpacker
 
Join Date: Aug 2003
Location: Virtual World / Network
Posts: 553
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 16 Times in 10 Posts
MaRKuS-DJM Reputation: 6
i don't know if it is the same as with kazaa lite... but kazaa lite used a loader which loaded a *.kpp-file, wrote the "real bytes" to it and then executed. this kpp was packed with PeX 0.99
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
App protection RR5 General Discussion 1 11-10-2006 12:10


All times are GMT +8. The time now is 07:34.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )