Why can't I re-Dillo it?

[JMI]

Well, let's put on our thinking caps here. Ploop. Hat goes on.

Do you suppose ASPR also adds something to the PE header to check if its "already" protected by ASPR.? Well, how the heck would someone be able to determine that? Ponder, ponder, ponder. Think, think, think.

I know. Let's look at the PE header for something we already have we know is not packed by ASPR - Notepad (unless, of course, yours already is ). Yah, Yah, but then what do we do , huh, huh? Well, why don't we just ASPRize the darn thing and then look at the PE header again. Maybe even use a file compare program (insert name of your favorite here) and actually see if that sneaky guy with the long Russian surname puts something in the header.

Well gosh. Why didn't I think of that?? I must be too old.

Regards,