Getright detects IceExt!

The new Beta2 detects IceExt (0.57) (and more?).

Error:

General extraction error
Location ES1


hxxp://www.getright.com/beta51.html


Tschau

Viper Zx

[Edit by JMI: If you had bothered to take a look through the threads here you would have noticed the repeated statement; NO CLICKABLE LINKS, ESPECIALLY TO SOFTWARE VENDORS. Always unclick the "Automatically pares URLs" and use "hxxp", "wxw", "fxp" and the like.]

yeah,

seems like Armadillo has a new customer :-o

good luck unpacking it
CaD

The latest Armadillo versions detect IceExt from this registry key:

"HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Services\ IceExt"

[new_profile]

Originally posted by floorpie
The latest Armadillo versions detect IceExt from this registry key:

"HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Services\ IceExt"

Why not trying to rename the registry key from IceExt to txEecI ?
(I didn't try it yet).

Originally posted by new_profile
Why not trying to rename the registry key from IceExt to txEecI ?
(I didn't try it yet).

That works is Softice NOT loaded.
Is Softice loaded the error occur again.


Tschau

Viper Zx

[JMI]

That's because that is merely the check for IceExt, the only thing you asked about, and not the check for SoftIce. You need to read some of the many tuts available on the net about how to hide softice and how a debugger is detected.

You can also go to the Woodmann site and read the many threads on how to hide softice and softice detection. That is what the Search Button on this Forum and the Woodmann site are made for.

Regards,