LordPE Problem

[hosiminh]

I never had any of your problems , i use LordPE Deluxe.

Try with downloading new LordPE zip archive from official site.

Are you loged as admin ?

Can you see armadillo processes within Ollydbg (menu File -> Attach) ?
Can you see armadillo processes in any other Dumping tool ?
Ollydbg plugin IsdebugPresent has some tiny dumper too.

You can dump with ImpRec too (1st attach to process)
Right click -> Advanced commands -> Select code section

, with PEditor 1.7 by yoda or PE Tools v1.5 [hxxp://www.uinc.ru/files/neox/PE_Tools.shtml ]

"Not enough space, can't add new section"

Well , wipe armadillo EP section out of dumped file , rebuild , then use Imprec.

[TmC]

Originally Posted by hosiminh

I never had any of your problems , i use LordPE Deluxe.

Try with downloading new LordPE zip archive from official site.

Done, same problem

Originally Posted by hosiminh

Are you loged as admin ?

Yes

Originally Posted by hosiminh

Can you see armadillo processes within Ollydbg (menu File -> Attach) ?
Can you see armadillo processes in any other Dumping tool ?
Ollydbg plugin IsdebugPresent has some tiny dumper too.

Yes i can, i succesfully detatched father/son of other protected programs with olly and it sees everything.

Procdump can see the process but it crash when dumping.

Originally Posted by hosiminh

You can dump with ImpRec too (1st attach to process)
Right click -> Advanced commands -> Select code section

, with PEditor 1.7 by yoda or PE Tools v1.5 [hxxp://www.uinc.ru/files/neox/PE_Tools.shtml ]


Well , wipe armadillo EP section out of dumped file , rebuild , then use Imprec.

I will try, but it is realy odd that lordpe doesn't work

[Nacho_dj]

Hello!

Do you understand spanish?

If so, try this one (very good process dumper):

hxxp://www.terra.es/personal/guillet/archivos/pupe2002.zip


Good luck

Nacho_dj

[hosiminh]

What is this strange target (direct link please) ?

pupe english:
hxxp://sr2.mytempdir.com/157052

[TmC]

Originally Posted by hosiminh

What is this strange target (direct link please) ?

pupe english:
hxxp://sr2.mytempdir.com/157052

It's not a strange target it's a problem i have with ALL armadilled programs.