Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 03-20-2006, 02:17
The Day Walker!
 
Posts: n/a
which dongle is it using????

pals, facing some prob.....

today,,, i got a dos program that uses a dongle

for its running, if the dongle is attached then the prog gets reg, and runs

good, else when i print reports, it shows unreg. message....

i tried using hasp emulator pe, but it didnt detected any hasp calls....

its an lpt dongle,,,

i want 2 dump the dongle,, so needed info regarding it,


i even checked the installation folder of the prog, but couldnt find

and relevent files, like haspnt or hardlock or anything...

so needed 2 know, how is it protecting itself......

thanx

TDW {RES}
Reply With Quote
  #2  
Old 03-20-2006, 04:06
MarkusO
 
Posts: n/a
If it is a DOS program like you write, you never can find any drivers included in the program since under DOS no driver is needed.

How does the dongle look like? Is there some text on it?
Reply With Quote
  #3  
Old 03-20-2006, 04:40
k2k2000 k2k2000 is offline
Friend
 
Join Date: Aug 2004
Posts: 48
Rept. Given: 6
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 4
Thanks Rcvd at 2 Times in 2 Posts
k2k2000 Reputation: 0
maybe in this list
http://www.woodmann.com/fravia/fp_dong1.htm
http://www.woodmann.com/fravia/fp_dong2.htm
Reply With Quote
  #4  
Old 03-20-2006, 09:54
Sabor Sabor is offline
Friend
 
Join Date: Sep 2005
Posts: 68
Rept. Given: 0
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 0
Thanks Rcvd at 2 Times in 2 Posts
Sabor Reputation: 3
hmmm

Well if its dos based its definetly old. If you have the dongle post here the label of the dongle or color. If not, check to see if the application is encrypted. If it is encrypted (packed) it will likely be ssi_activator. If it is not packed could still be that. The only dos application i have seen use a dongle was with ssi_activator so far.
Reply With Quote
  #5  
Old 03-22-2006, 12:32
xtx
 
Posts: n/a
I take it that the dongle is HASP/Hardlock or at least it looks like one otherwise I think that you are fighting a loosing battle with the available dongle cloning tools. However, my money is on these not working anyway because the application is probably using built in code to access the dongle. If that turns out to be the case, it will be necessary to disassemble the application code and find the checks. It could also just have a wrapper around it for the dongle protection that checks to see the dongle is present and then allows the application to run. Pretty sure that DESkey provided that type of protection for DOS applications.

If you are unsure of the dongle type, the first thing that I would do is carefully cut or crack the case open and look for identification marks. Or just for fun, try and check if someone already has a cracked version floating around, it is dos after all.

Also, the links that k2k2000 posted don't seem to be working anymore (I had those same ones bookmarked too) here are the ones that still work.

http://fravia.frame4.com/fp_dong1.htm
http://fravia.frame4.com/fp_dong2.htm
http://fravia.frame4.com/frogpr3.htm

xtx

Last edited by xtx; 03-22-2006 at 12:48.
Reply With Quote
  #6  
Old 03-22-2006, 19:25
MarkusO
 
Posts: n/a
HARDLOCK also comes with a DOS API and probably HASP as well.

Since this list is now nearly complete, you know as much as before, unless you can tell us how the dongle looks like.
Reply With Quote
  #7  
Old 03-23-2006, 03:55
The Day Walker!
 
Posts: n/a
i dont have the dongle at present, ill b getting it by 2moro,,,,, then i can tell u more abt it... thou i can tell that its an lpt dongle.
2ndly, the program is a local built in my city,, (INDIA), so no foreign comp. dongle would be used, thirdly, i checked the exe file in peid, and it shows nothing.
also found that there is a window based exe also, called test lock, which is just made 2 check teh dongle presence. as far as i know.

when i run the prog, it displays this message,

Step 1 : Logging Into Dongle :
Result : -1 (Error: Dongle Missing)

attaching the testlock file.....

the webaddress of the firm who provides the software is, www.compaqt.com
and the program name is "dangerous".

thanx

TDW {RES}
Attached Files
File Type: zip temp.zip (239.6 KB, 20 views)
Reply With Quote
  #8  
Old 03-23-2006, 04:37
MarkusO
 
Posts: n/a
PEiD means "Portable Executable Identifier".

DOS programs are no PE files, they are just DOS executables. Therefore PEiD can't show anything.
Reply With Quote
  #9  
Old 03-23-2006, 20:09
s0cpy s0cpy is offline
Friend
 
Join Date: Jul 2004
Posts: 30
Rept. Given: 10
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 2 Times in 2 Posts
s0cpy Reputation: 0
it is not a DOS executable - it's NE file(win16 application)
Reply With Quote
  #10  
Old 03-24-2006, 02:12
MarkusO
 
Posts: n/a
No, it is a DOS application just like The Day Walker! wrote. He explained that only the dongle test program is a Windows program. And he said that he tried PEiD on the program (= DOS executable).
Reply With Quote
  #11  
Old 03-24-2006, 03:03
The Day Walker!
 
Posts: n/a
pals...

will the attached file b of any help 2 know how and wot sort of dongle is used.???

and a way 2 bypass it.

cause the whole prog,,is of 64mbs,,,which also includes pressive sql server.

thanx

TDW {RES}
Reply With Quote
  #12  
Old 03-24-2006, 16:34
Kerlingen
 
Posts: n/a
Are you really sure that the program is a DOS executable? Or is it only a PE running from commandline?

Nobody can tell if the you can bypass the protection unless he has seen how it was implemented.
Reply With Quote
  #13  
Old 03-25-2006, 03:46
The Day Walker!
 
Posts: n/a
if thats the case,,,then ill upload the entire prog, on rapidshare,,, then may b, ppl can check it out....and help me....

still attaching the main exe file of the prog.... 2 chec it out.....

just the exe file of the prog....

download:- http://rapidshare.de/files/16328419/main.zip.html

thanx

TDW {RES}
Reply With Quote
  #14  
Old 03-25-2006, 15:26
souz souz is offline
Friend
 
Join Date: Jan 2005
Posts: 134
Rept. Given: 0
Rept. Rcvd 26 Times in 18 Posts
Thanks Given: 13
Thanks Rcvd at 86 Times in 35 Posts
souz Reputation: 26
Software and programs uses:
"Copylock Dongles combines the high level of ASIC-based security with the flexibility of up to 100 to 400 bytes internal read/write memory. The Dongle & its memory can only be accessed through supplied API libraries and control software utilities of the system."
Reply With Quote
  #15  
Old 03-25-2006, 15:27
souz souz is offline
Friend
 
Join Date: Jan 2005
Posts: 134
Rept. Given: 0
Rept. Rcvd 26 Times in 18 Posts
Thanks Given: 13
Thanks Rcvd at 86 Times in 35 Posts
souz Reputation: 26
site:
hxxp://www.intecsystem.com/product.htm
It calls copylock.sys to call the dongle.
Compiled in CLIPPER and uses the read-write memory calls.
there is LPT dongle can be following models:
copylock-MX
copylock-NetMX
copylock-EC
copylock-NetEC
copylock-SX
copylock-NetSX

Last edited by souz; 03-25-2006 at 15:32.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 07:14.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )