Armadillo time-based trials

[wassim_]

Hello everyone...

What procedure does this protector use to prevent a "protected" program from running beyond a certain date? does it use the registry or another trick?

In other words is there a way -beside a full format- to get a new trial period?

Thx guys...

Hmm... I dunno why this subjects hasn't been touched earlier... I'll try to find some time at this weekend, then You'll get You ranswer at monday.

Well then... If someone has something interesting in offer (I mean an interesting application - didn't relased to public yet) - I'm open to write an Armadillo time limit cleaner.

[Squidge]

I find it easier to unpack the program from Armadillo rather than to clean the time in the registry.

[wassim_]

Squidge u r assuming that it uses the registry...
I am not sure about that.
I'll wait for dynio or any other reply that confirms this.

[Squidge]

Well, the last program I refreshed the date on was a program protected with Armadillo 2.65, and that used the registry only. I've no idea about later versions, but for these I just remove the armadillo protection from them as I find it easier than searching for the time and means I only ever have to do it once.

Sorry about the delay... (i just forgot)

Squidge is right. So far, Armadillo (including v3.1) uses ONLY registry tricks. If You can't solve it by Yourself, feel free contacting me. I'll go a "little" deeper inside. But, PLEASE - only If You aren't able to force it.

Regards.

[wassim_]

Thank u for ur kindness and ur willingness to help...

I'll do my homework first, I'll use the tools of the trade and try with some exe that I'll protect with dillo in a time-based manner.

I'll keep u informed of whatever result I get.

Thanks again dynio, people like u r very rare

btw check ur pm.

[Jay]

yeah he does seem to be a obliging guy.

[wassim_]

This is the procedure I followed

I protected a .exe using dillo 3.01, it was a time based trial, I took a snapshot of my registry then I ran the exe once and compared the current registry to the snapshot, found several changed values, deleted them all, tried to set the clock back into the time of the trial validity expecting the exe to run again yet ...It didn't work, it's the same message saying that it's expired....

so now what?

Originally posted by wassim_
This is the procedure I followed

I protected a .exe using dillo 3.01, it was a time based trial, I took a snapshot of my registry then I ran the exe once and compared the current registry to the snapshot, found several changed values, deleted them all, tried to set the clock back into the time of the trial validity expecting the exe to run again yet ...It didn't work, it's the same message saying that it's expired....

so now what?

It is also writing information to the HD

I don't want in any way to compete with Gorge but as I said before: Armadillo (including v3.1) uses only REGISTRY TRICKS. I wouldn't say that if I didn't check it myself. And if I say registry tricks -I mean REGISTRY TRICKS. Not simply storing and querying the values in registry. I could be wrong only if Armadillo uses random techniques during protecting (file, file+reg, reg) - but I don't think so. I've protected executable with Armadillo v3 and successfully cleared registration info. It was placed ONLY IN REGISTRY.

Wassim: I suppose this is Your first approach with "transparent" (I call it that) registry modifying. Try to look a little "deeper" (HexEditor, etc.). Good Luck.

Regards.

hxxp://66.98.132.48/forum/showthread.php?s=&threadid=4672&highlight=armadillo+time


Tschau

Viper Zx

[wassim_]

as I can see from the link to RCE, it was discussed there with no solution, the question is still the same...

Wassim: Please read carefully what I wrote. I suppose You've used Advanced Registry Tracer or similar tool. Am I right? Then You won't discover any difference BUT THERE IS FOR SURE. Go and fight!
If You fail for sure, then I'll do it for You - send me that app. But I would like to hear the solution from You . And I still believe You can do it Yourself.

Regards.

[bunion]

Wassim best bet when installing anything like that is to use an install watcher like Easyclean so that when first running the app you have a list of all files ,registry keys ,that the app used when installing.it means youll have a complete regfile that you can just click to remove any changes made....although advenced registry tracer is cool and handy try to get something smaller that watches "realtime" while you run the app on a normal basis ( after installing) that way you can catch any additional changes on the fly no matter how small...a good tool to get is REGSHOT or INCTRL4..

paul333