ExeInfo PE ver. 0.0.1.7 B by A.S.L public Final

ExeInfo PE ver. 0.0.1.7 B by A.S.L
freeware version for Windows XP

Windows 32 PE executable file checker , compilators, exe packers ....
with solve hint for unpack / internal exe tools

Internal Tools Menu :
- overlay remover - generate new file without overlay data
- save overlay as external file
- Rolo Lamer Protector v0.1b - work on standalone exe < 1MB - EP Corrector ( for Delphi ) - generate many exe file with Entry Point - XoR permutator - create one file with xor data ( 255x2000 bytes ) - Section splitter - save exe sections as files & exe header - 8 / 16 bit string finder - enter 8 bit string = searching 16 bit strings & 8 bit ( F7 key ) - REGistry call finder - find registry call & regedit.exe strings File Menu :
+ Rename file
+ Copy file As.. *.bak
+ Execute - create executable process ( exe )
+ Execute - windows ext. associate ( dll ,zip ... )
+ Delete file
+ view log file ( c:\Raport-exeinfo-log.txt )

Rippers Menu :
- www address searcher inside exe - work on any file
- ExE inside ExE ( Win32 Pe windows executable) - work on any file
- Zip archives inside ExE www.winzip.com - work on any file
- Rar archives inside ExE www.rarlab.com - work on any file
- CAB MS archives inside ExE (for MSI installers ) - work on any file

keys :
F1 key - keyboard help
F3 key - external view ( hiewdemo.exe or hiew32.exe ) path directory
F4 key - external test ( peid.exe ) path directory
F5 key - external test RDG Packer Detector ( I read location from Win registry )
F6 key - external test DiE.exe Detect it Easy ( I read location from Win registry - shell integration req.)
F7 key - 8 / 16 bit String finder
Alt+Delete - delete file
"+" ,"-" - Numeric KEY = adjust transparent Form

Non executable file detection :
zip , 7zip , rar , msi , jpg


Overlay detector ( added on ver. 0.0.1.3 A - 0.0.1.4 H ) :
01. zip archives
02. cab archives
03. SWF Flash object ( packed & unpacked format )
04. Executable PE file
05. 7 zip archives
06. RAR archives

- Plugins like a Peid.exe ( 70 % compatible :-( )

ACM* - anti cheat mechanism

www site: www.exeinfo.go.pl host: www.geocities.com/exeinfo_pe ( download limits ! )
Mirror: www.exeinfo.cjb.net

ExeInfo detect list :
001. RealArcade Wrapper ( Microsoft Visual C++ ) 50%
002. Borland Delphi ( 2.0 - 7.0 )
003. Microsoft Visual C++ ver. 5.0 ~ 6.0 ( exe )
004. Microsoft Visual C++ ver. 7.x ( exe ,dll)
005. PEtite 2.x -> Ian Luck
006. UPX exe 0.89.6 - 1.02 / 1.05 - 1.93B -> Markus & Laszlo
007. UPX dll file - 1.93Beta -> Markus & Laszlo
008. Aspack v2.12 -> Alexey Solodovnikov
009. EXECryptor v.2.3.1-6 ( www.strongbit.com )
010. Morphine ver.2.7b ( plugin Peid.exe )

011. AC protect 2.0 by RIScO Software Inc. ( www.ultraprotect.com )
012. ASprotect 2.1 reg ( www.aspack.com/asprotect.htm ) only exe files DLL files detect as ASpack :)
013. AHTeam EP Protector ver.0.3 priv
014. WinUpack 0.39 final by Dwing ( http://dwing.51.net ) :-((
015. Software Compress ver. 1.2 Lite - www.bgsopt.com
016. PEcompact ver.2.78a - www.bitsum.com
017. nsPack ver.2.3 unreg - by North Star - www.nsdsn.com
018. nsPack ver.3.0 reg - by North Star - www.nsdsn.com
019. Mole Box 2.5.7 by Teggo. - www.molebox.com

020. Microsoft Visual C++ ver. 8 ( ??? )
021. EXE Guarder 1.8 (2006 unreg) www.exeicon.com/exeguarder
022. EXE Wrapper ver. 2.3-2.5 ( www.533soft.com/exewrapper ) - how to remove password
023. Exe password protector 1.0.5.100 (protect/unprotect)
024. TASM / MASM
025. MS Visual Basic 5.0-6.0 dll
026. MS Visual Basic 5.0-6.0 exe

027. Armadillo 4.4x - 4.62 32bit - www.siliconrealms.com ( effectiveness = 60% )
028. Enigma protector v1.1x - www.enigma.izmuroma.ru © Sukhov Vladimir 2004-2006
029. SVK-Protector v1.32 demo - Pavol Cerven - www.anticracking.sk

030. Generic check : ASprotect 1.? old version ( www.aspack.com/asprotect.htm ) exe only
031. Generic check - AC protect 1.? by RIScO Software Inc. ( www.ultraprotect.com )
032. Packman v1.0 Brandon LaCombe ( http://packman.cjb.net )
033. modified exe , EP code = Borland Delphi ( 2.0 - 7.0 )
034. ExeStealth V2.76 www.webtoolmaster.com
035. FSG v2.0 F[ast] S[mall] G[ood] - www.xtreeme.prv.pl

036. Generic check - Aspack v2.1x -> Alexey Solodovnikov
037. Aspack v2.12b? -> Alexey Solodovnikov
038. Program protector v2.1unreg ( exe password - DECODE PASS ! ) - www.blumentals.net
039. Obsidium v1.3 software protection system (demo) - www.obsidium.de
040. ARMprotector v0.1 by SMOKE 2004
041. ARMprotector v0.3 by SMOKE 2004
042. SDProtector Profesional Edition v1.12 ( 2003 ) - www.sdprotector.com

043. Themida 1.0 -1.3? - Adv.Win.Software Protection System (c) 2004-2005 Oreans Technologies - www.oreans.com
044. yodas Protector v1.03.3 - http://yodap.has.it 2004-2006
045. yoda's Crypter v1.3 - Ashkbiz Danehkar 2004-2005
046. PE-Pack v0.99 (c) 1998 by ANAKiN
047. WATCOM C/C++ 1988-1995
048. Microsoft CAB SFX module
049. Generic check : Microsoft Visual C++ vx.x
050. UPX -> Markus & Laszlo ver. [ 2.00 ] <- version info from file 051. PeSpin v1.304 public by CyberBob - http://pespin.w.interia.pl 052. UPX -> Markus & Laszlo ver. [ ] - EXE modified!!!
053. UPX -> with extra sections - Real EP resolver ( [ ] - required Fast scan unchecked )
054. PolyEnE v0.01+ Polymorphic Encryptor (c) 2001 Lennart Hedlund ( [ ] - required Fast scan unchecked )
055. Nullsoft PiMP Stub - ( read from Ovl : NullsoftInst3" )
056. eXpressor PE Packer v1.4.5.1 - www.cgsoftlabs.ro ( exe , dll )
057. Thinstall 2.4x - 2.5x -> Jitit Software - www.thinstall.com
058. Thinstall 2.7x -> Jitit Software - www.thinstall.com
059. Nullsoft scriptable install system 2.xx - ( read from Ovl : NullsoftInst )
060. Inno Setup Module [SFX] - Borland Delphi Inno Setup Module [unknown]

061. Private EXE Protector 1.7 ( 2003-2006 ) www.setisoft.com
062. Excalibur v1.03r (c) by forgot -> read from file [ Excalibur (c) DFCG ] , http://www.breezer.ful.cn
063. MSLRH v.032a - SISTEMA DE PROTECCION ANTICRACKEO
064. ShareGuard Loader V3.6 Zapper Software - www.zapperSoftware.com
065. Borland C++ 1999
066. Zip Sfx Archive
067. Rar Sfx Archive
068. 7-Zip Sfx Archive
069. WinZip Sfx ver. 8.x www.winzip.com
070. Zylom Game Installer zip Sfx ( MS Visual C++ 7.0 )
071. Borland C++ - Copyright 2002 Borland Corporation
072. WinZip Sfx ( generic check ) www.winzip.com
073. Lock Express 2.0 Build 9.2 - 1997-2006 Sciensoft Research Inc
074. FreeBASIC Compiler v0.14-0.17 (c) 2004-2006 Andre Victor T.Vicentini - console App.
075. generic check : InstallShield 2003 ( MS Visual C++ 5/6.0 )

076. InstallAware Setup Squeezer InstallShield - www.installaware.com ( 7zip archive )
077. Installer Nullsoft PiMP Stub ( UPX pack )
078. Generic check : Nullsoft PiMP Stub installer
079. ASprotect 1.1c old version ( www.aspack.com/asprotect.htm )
080. Microsoft Visual C# / Basic.NET
081. Setup Dev INSTALLER – Version 1.3 © Shere Khan – November 2005 ( MS Visual C++ 5/6.0 )
082. Dev-C++ Compiler v4.9.9.2 - Bloodshed Software ( www.bloodshed.net )
083. Generic check : EXE STICKER like DotFix FakeSigner
084. DotFix FakeSigner v3.4 ( ASPR Stub ) http://fakesigner.dotfix.net
085. PeLock v.1.x Bartosz Wójcik www.pelock.prv.pl
086. MS IExpress 2.0 - Win32 Cabinet Self-Extractor
087. generic check : MS IExpress x.x - CAB installer ( in section II )
088. InstallShield (R) Setup Launcher v.7.x CAB file ( MS Visual C++ 5/6.0 )
089. PEcompact ver.1.68 - v1.84 - www.bitsum.com
090. ORiEN ver.2.11~2.12 - ( 1994-2003 http://zalexf.narod.ru )
091. VMProtect v.1.2x (demo) 2003-2006 PolyTech - www.polytech.ural.ru ( only EP protection )
092. FASM ver. 1.67 50% detection
093. Private exe Protector v1.9x - www.setisoft.com ( morph )
094. Krypton The Krypter ver.0.3 by Yado - www.lockless.com
095. MEW 11 SE 1.2 by Northfox (2004) - Northfox.uw.hu
096. PEncrypt 4.0 Public Release / 4.0 Phi -> junkcode - www.junkcode.cjb.net
097. SDProtector Pro Edition v.1.16 ( 1.1 SDP! ) <- info from file. www.sdprotector.com 098. PE Diminisher v.0.1 ( 1999 ) - www.phrozencrew.com/~teraphy 099. !EP (EXE Pack) v1.0 g-l-u-k [TeaM - X] 2005 - www.softprot.cjb.net 100. [G!X]'s Protector v1.2 - http://breezer.ys168.com 101. Active PE Scrambler / APES / v. 1.0 (2005) [TeaM - X] - www.team-x.ru 102. (UPX) PowerArchiver 2006 [ ZIP/ CAB/ unknown ] SFX v.9.63.x - www.powerarchiver.com 103. GameHouse.com installer ( MS Visual C++ ) inside Wise Installer 104. Dev-C++ Compiler v4.9.9.2 ( MINGW 32 v5.x.x ) - Bloodshed Software ( www.bloodshed.net ) 105. Hide&Protect v1.0x ( 2005 ) - www.SoftWar-protect.com 106. WWPack32 ver 1.xx ( 1997,98 ) by P. Warezak and R.Wierzbicki 107. CHAOS Self Extractor 3.9 (1998-2006) ( WWPack-ed ) http://safeSofthome.com !108. Xtreme-Protector v.1.08 (c) 2003 www.oreans.com/xprotector/xprot.htm 109. LCC Win32 v1.x ( Jacob Navia ) http://www.cs.virginia.edu/~lcc-win32/ 110. LCC Win32 v1.x DLL ( Jacob Navia ) www.cs.virginia.edu/~lcc-win32 111. Hmimys-Packer v1.0 112. ExeFog v.1.1x - 2005 - www.bagie.xost.ru 113. PolyCrypt PE v.2.1.x ( 2004-2005 ) - www.jlabsoftware.com (exe/dll) 114. SimplePack v1.0 - 1.2 ( LZMA / APLIB - Packman compression library 1999-2005 Igor Pavlov ) 115. SimplePack v1.11 - 1.2x ( Method 2 NT ) 116. Unopix Version 1.10 Final 2006 Scrambler for PE files ( exe/dll ) !117. PPC PROTECT ver 1.1 ( 2006 ) Alexey Gorchakov www.ppc-protect.com 118. Inno Setup Uninstaller - Borland Delphi 119. Armadillo v2.5x - v2.6x - www.siliconrealms.com 120. DotFix NiceProtect v1.2 by GPcH Soft ( 2006 ) - www.niceprotect.com 121. CreateInstall v4.x Gentee ( 2004 - 2006 ) - www.createinstall.com 122. Gentee Programming Language © 2004-2006 www.gentee.com 123. RLPack v.1.11 BasicEdition ( uses aPLib 0.42 ) http://ap0x.jezgra.net 124. ReversingLabsProtector 0.7.4beta http://ap0x.headcoders.net 125. Install Creator Pro ver.2.0 ( 2003 ) - www.clickteam.com 126. PowerBasic /CC 3.0x/CC 4.0/Win 7.0x/Win 8.0x - www.powerbasic.com 127. WinUHA ver.2.0 Sfx Archive - www.winuha.com ( UPX ) 128. ZipGenius 6.0.x Sfx Archive - www.zipgenius.it ( Borland Delphi ) 129. PEbundle ver.3.20 ( 2003 ) Jeremy Collake - www.bitsum.com / / Alloy Executable Compressor v.4.x- Copyright © 2000-2006 PGWARE - www.pgware.com 130. Lazy Assembler Version 0.53 (26 Sep 2006) Freeware (c) 2000-2006 Stepan Polovnikov 131. nPack v1.1.300 (aPlib ) by NEOx ( 2006 ) www.uinc.ru 132. Installer - Setup Factory 6.0 - 7.0 Indigo Rose Corporation ( 2006 ) MS V C++ 6.0 133. dePack by deNULL - www.ooooQ.cn 134. Goat's PE Mutilator v.1.6 ( 2005 ) - www.geocities.com/killereaglesoftware 135. RLPack v.1.14-1.18 BasicEdition ( uses aPLib 0.43 / LZMA 4.30 ) http://ap0x.jezgra.net 136. VBOWatch protector v2.0 Copyright [c] 2006 MoonLight - www.ooooQ.cn 137. Generic check : build like - Private exe Protector v2.0 - www.setisoft.com 138. Easy Code v.1.0x ( GUI for assembler ) Ramon Sala - www.easycoder.org 139. Mole Box 2.6.1 by Teggo. - www.molebox.com 140. SLVcOdeProtector v.1.12 by SLV - www.ooooQ.cn 141. Exewrap MFC Application v.1.0 ( 2003 ) 142. Microsoft Visual C++ 8 compiler ( 2006 ) 143. RosAsm -V2.039c - http://betov.free.fr ( effectiveness 80 % ) 144. Software Compress ver. 1.4 Lite - www.bgsopt.com 145. Intel (R) C++ Compiler 146. FreePascal ver : FPC 1 - 2 Win32 -> (Berczi Gabor, Pierre Muller & Peter Vreman)
147. Open WATCOM C/C++32 Portions Copyright (c) Sybase 1988-2002
148. File2Pack SFX v.2.0 2006 (F2P Self Extractor ) SHOW PASSWORD! - www.mental9production.com ( MS VB5/6 )
149. PV Logiciels dotNet Protector 4.0 2003-2005 http://dotnetprotector.pvlog.com
150. ReflexiveArcade Game wrapped file ( *.RWG )
151. DAStub Dragon Armor (BamBam0.0.4.1) from Orient 2006 www.ooooQ.cn
152. Akala EXE Lock ver.3.20 www.zero2000.com (Aspack v2.12 -> Alexey Solodovnikov) - PASSWORD DECODER(N) OR HOW TO REMOVE PASSWORD
153. BeRoEXEPacker - Version 1.00 - Copyright (C) 2006, Benjamin BeRo Rosseaux ( Exe/DLL )
154. EXE Password Protector v.1.1 (MSV C++ v7) - www.eltima.com/products/exe-password - INFO HOW TO REMOVE PASSWORD
155. AGInstaller 1.9.12 ( UPX pack ) Copyright (c) 2001-2006 Agentix Software - www.aginstaller.com
156. CreateInstall v2003.3.5 www.createinstall.com/www.gentee.com ( EP check & OVL )
157. Protection PLUS - Instant plus (software key) 2.0.98.0 (2005) - www.softwarekey.com Concept Software
158. Wise Installation System! std/pro 9.02 (c) Wise Solutions Inc. - www.wise.com
159. Wise Installation System! ver. ?.? (c) Wise Solutions Inc. - www.wise.com
160. Wise Uninstaller Wizard (sec3) - www.wise.com - MS Visual C++ ver.6
161. m9P Editor Plus v.1.0.300 Distributable Executable Rich Text - DERT™ X ©mental9Production, 2005 - www.mental9Production.com - INFO HOW TO REMOVE PASSWORD
162. Nullsoft uninstaller - www.nullsoft.com - ( UPX packed )
163. Nullsoft uninstaller - www.nullsoft.com
164. Softwrap (XTREAMLOK) ver. 1.x~3.x - www.softwrap.com ( exe/dll )
165. RLPack v.1.14-16 Full Edition - False signatures unichecker
166. RLPack v.1.14-16 Full Edition ( uses aPLib 0.43 / LZMA 4.3x ) http://ap0x.jezgra.net
167. Salfeld Computer EXE Password 2004 v 7.114.0.0 trial - www.salfeld.com ( Borland Delphi )
168. Wise for Windows Installer pro 4.21 ( CAB ) - www.wise.com
169. Tarma Installer ver. 2.99.2156 (2005) Tarma Software Research Pty Ltd. - www.tarma.com ( MS Visual C++ )
170. NTkrnl Secure Suite v.01 packer or protector - www.ntkrnl.com ( exe )
171. NTkrnl Secure Suite v.01 packer or protector - www.ntkrnl.com ( dll )
172. [dUP2 -> diablo2oo2] v.2.1x patchengine ( patch ) - Mircosoft MacroAssembler - http://diablo2oo2.cjb.net
173. [dUP2 -> diablo2oo2] v.2.1x patchengine ( loader installer ) - Mircosoft MacroAssembler - http://diablo2oo2.cjb.net
174. PE password encryptor 31-01-2000 by SMT ( asm ) - [ OEP finder included ]
175. WinUDA 0.271 sfx ( 2004 ) by Dwing http://dwing.51.net
176. kkrunchy 0.1x >> radical exe packer - www.farbrausch.de/~fg/kkrunchy
177. kkrunchy 0.23 alpha 2 >> radical exe packer (c) f. giesen 2003-2005 - www.farbrausch.de/~fg/kkrunchy
178. CyberInstaller Suite 2006 1.1 - SilverCyberTech 2003-2007
179. Eurora3D - free installator - www.extramedia.co.yu/eurora3d ( ASM )
180. Microsoft Visual C++ ver. 7.1 [DEBUG] exe
181. Fucking Fake File 1.0 by wspomagacz 2005.11( EXE Binder exe,jpg hidden inside] )
182. Anskya Polymorphic Packer V 1.3 Code By Anskya
183. Self-Extracting Archive Utility (SEAU) ver. 15.0 2006 ( Aspack v2.12 -> Alexey Solodovnikov ) - http://gammadyne.com
184. PE-Pack v 1.0 (c) 1998 by ANAKiN
185. PKLITE32(tm) - Version 1.1 02-15-1999 ( exe )
186. PKLITE32(tm) - Version 1.1 02-15-1999 ( DLL )
187. EncryptPE V2.2006.10.25 China Cracking Group - www.encryptpe.com
188. CC386 Version 3.28.1.6 Copyright (C) (GPL) LADSoft 1994-2006
189. PC Guard for Win32 V5.01 - www.sofpro.com
190. JDPack ver 1.01 ( 2005 ) - www.tlzj18.com ???
191. Netopsystems AG INSTALLER FEAD(R) SFX (MS C++) - www.netopsystems.com ( packed UPX & not packed )
192. Borland C++ 1995~1998 - www.borland.com
193. eXpressor PE Packer v1.5.0.1 - www.cgsoftlabs.ro
194. Excelsior Installer v1.0 2003-2007 ( MS Visual C++ 6.0 ) - www.excelsior-usa.com
195. tElock v0.98 Freeware PE-Compressor/Encryptor (c) 2000-2001 by tE!
196. UPX Lock v1.02 (2007.02) - www.team-x.ru
197. softSENTRY 3.00 1999 - 20/20 Software Inc. www.twenty.com ( site closed )
198. DxPack ver 0.86 ( 2001.06 )
199. Neolite 2.0 -> Neoworx Inc. ( 1999.03.20 ) - www.neoworx.com ( site closed )
200. ZipWorx SecureEXE v3.0 (2004-2007) www.zipworx.com (Neolite packed)
201. [ PE-DIY Tools V1.10 2004 ] by A.Young (PoJieYong) - www.w-yong.com ( how to unprotect,oep info )
!202. aUS v0.5 beta ( upx scrambler 2005.08 ) - http://ap0x.headcoders.net ( bad link? )
203. EXE protector 2.01a Eyhab Hillail ( 1998-2003 )- http://oxygen72.tripod.com ( how unprotect pass )
204. 32Lite 0.03a -> Oleg Prokhorov www.????
205. aPackage SFX v.1.14 2001-2002 Joergen Ibsen [32Lite v0.03a packed]
206. NTPacker V2.1 by ErazerZ (2005.12) ErazerZ@gmail.com ( zPlib / XOR / aPlib+xor )
207. WinHKI v1.77 SFX 2000-2007 by Hanspeter Imp ( hki archive only ) www.winhki.com (packed PEcompact ver.2.7x)
208. nBinder 5.1.0 ( 24.03.2007 MSV C++ 8.0 ) NKProds Software - www.nkprods.com
.209. (Basic check) : Securom 7.1 -> Sony DADC - www.securom.com
210. Cexe Executable Compressor v1.0b Copyright 1999, Tinyware, Inc. - www.tinyware.com by Scott Ludwig
211. ASprotect 2.3 SKE ( www.aspack.com/asprotect.htm ) 25%
212. Easypano Virtual Tour player ( MSV C++ ) - www.easypano.com
213. PeX v0.99 bart/CrackPl (2000) (APLib 0.26 by J.Ibsen) - longdiy.myrice.com
214. YZPack v.2.0b.aplib (c) UsAr ( 2007.03 )
215. YZPack v.1.1 LZMA (c) UsAr ( 2006.08 )
216. YZPack v.1.2 aplib/LZMA (c) UsAr ( 2007.03 )
217. ExeStealth V2.72 (Share.ver) - www.webtoolmaster.com
218. Generic check : ExeStealth V?.? (share.ver) - www.webtoolmaster.com
219. ExeStealth V2.x (Regg.ver) - www.webtoolmaster.com
220. nsPack ver.1.x - x.x by North Star - www.nsdsn.com
221. Microsoft Visual C++ 6 DLL
222. exe32pack 1.42 Copyright 1999-2004 www.SteelBytes.com
223. Protect Exe 0.4 Beta ( PROEX ) 2002 - www.dpaehl.de.cx ( UPX packed )
224. SexyPacker v.1.0.1.0 ( c ) 2001 - www.smalleranimals.com ( SFX ) MSV C++ 5.0
225. ID Executable Password 1.2 (c) 2005 Fastlink2 Build: 08/08/2005 - www.idsecuritysuite.com - !SHOW PASSWORD!
226. ID Application Protector v.1.2 Unreg (c) 2005 Fastlink2 - www.idsecuritysuite.com ( OEP info ,how to clear TRIAL)
227. Pelles C for Windows v2.xx - 4.50 ExE ( 1999-2006 ) - www.smorgasbordet.com/pellesc
228. Wise for Windows Installer pro ?.?? ( CAB in section 4 ) MS C++ - www.wise.com
229. WinUtilities 5.2 EXE Protector 1.0 ( 2002-2007 ) YL Computing Inc. - www.ylcomputing.com - ( Info how Pass remove/unprotect )
230. [section protection] VMProtect v.1.25 - 1.x (demo) 2003-2006 PolyTech - www.polytech.ural.ru
231. REALbasic 2007 R2 Standard Edition ( 1997-2007 REAL Software ) - www.realbasic.com ( exe only )
232. UPX 3.0 -> Markus & Laszlo ver. [ 3.00 ] <- info from file. ( sign for DEV C++ compiler ) 233. Microsoft Visual C++ ver. 7.1 EXE/DLL (3 bytes sign - easy to false) 234. Beria v0.07 public WIP ( 2005 ) - symbiont ( aPlib ) 235. NoodleCrypt version 2 by NoodleSpa ( 2000.08 ) 236. VPacker v0.02.10 by tt.t (exe only 2006.04 aPlib) 237. Private exe Protector v.2.00-2.15 ( 18.04.2007 ) www.setisoft.com 238. Free Pascal Compiler v.2.1.4 i386 GUI APP ( 11.05.2007 ) Berczi Gabor - www.freepascal.org 239. Free Pascal Compiler v.2.1.4 i386 CON APP ( 11.05.2007 ) Berczi Gabor - www.freepascal.org 240. Free Pascal Compiler v.2.1.4 i386 DLL APP ( 11.05.2007 ) Berczi Gabor - www.freepascal.org 241. Installshield v.12 (MSV C++ ) www.installshield.com / www.macrovision.com 242. generic check2 : InstallShield v.12-14 2008 ( MS Visual C++) www.installshield.com / www.macrovision.com 243. FASM ( 1.3x -1.67 ) 2004-2007 http://flatassembler.net - Tomasz Grysztar 244. Thinstall VS 3.0.x -> Jitit Software - www.thinstall.com
245. Astrum InstallWizard v2.24.20 ( 1999-2006 ) - www.thraexsoftware.com ( MS Visual C++ )
246. WinZip SelfExtractor 3.0 ( MSV C++ v7 ) 1996-2006 WinZip Int. LCC - www.winzip.com
247. Wise Instalation Express v7.0 2006 (SFX CAB) MSV C++ - wise.com / ALTIRIS
248. VisageSoft Installer ? WISE for Win/.msi ( MSCF CAB ) Borland C++ - www.visagesoft.com

249. ST Protector v1.5 SE ( 2006 ) - Silent Software - www. ???
250. (exe) Visual Protect v2.5.7 ( 2000.12 www.visagesoft.com
251. (dll) Visual Protect v2.5.7 ( 2000.12 www.visagesoft.com
252. eXpressor PE Packer v1.5.0.1 (MODE: Protection) - www.cgsoftlabs.ro
253. The Enigma Protector 1.31 unreg (2007.06.15) - Vladimir Sukhov - www.enigmaprotector.com ( exe/dll )
254. generic check: (exe) Visual Protect ( 2000? ) www.visagesoft.com
255. RCryptor 1.6d by Vaska ( 2007.01 ) only exe file protector - ( OEP info )
256. Polymorph Crypter,Beta Morphnah (c) puccxak.com ( 2007.05 ) - ( OEP info )
257. Pohernah v1.0.3 puccxak.com ( 2007.03 )
258. QIP[Crypt] ( 2007.06 ) Borland Delphi Crypter
259. SimbiOZ (RUS) ! Rootkit exe hider ! ( OEP info - for C++/Delphi )
260. AsdPack2 ( EP overflow exe - Delphi or C++ detector ) [ detection 75% ]
261. QSetup Instalation Suite 8.5.0.4 - 26.05.2007 - www.pantaray.com
262. Perplex PE-protector v1.01devel 2002-2003 by [tc] GiveMe5/BliZZaRD
263. Mole Box 2.6.4 by Teggo. - www.molebox.com
264. !EP (exe pack) v1.4 (lite) final - Team-X ( 2007.04 ) www.team-x.ru , http://exetools.blog.com.cn
265. DalKrypt 1.0 by DalKiT - www.dalkit.fr.st (26.10.2003) Anti-SI, Anti-Debug, Anti-Dump
266. NackedPacker v1.0 by BigBoote ( 2004.01-2007.06? )- www.PEArmor.com
267. WATCOM C/C++32 Run-Time system (c) Sybase Inc, 1988-2000
268. MS Visual C++ v.5 DLL Method 1 ( MS VBasic kit library ) ACM*
269. Open Source Code Crypter 1.0 by p0ke (9.06.2007) - www.swerat.com - http://unnamed.bot.nu ( Borland Delphi )
270. Private Personal Packer (PPP) Version 1.0.2 (13.03.2007) - www.ConquestOfTroy.com ACM*
271. Wise for Windows Installer v.?.?? ( CAB in section 4 ) MS C++ 7.0
272. Inteli check : unknown Installer - MSCF Cab file
273. Armadillo x.x ~ 5.0 32bit [exe -low protection only]
274. Armadillo x.x ~ 5.0 32bit [Dll-std protection]
275. Inteli check : MASM assembler ( no signature )
276. Inteli check : unknown ver. WATCOM C/C++32 (c) Sybase 1988-200?
277. inteli check : Dev - ( MINGW 32 v ?.?.? ) - Bloodshed Software ( www.bloodshed.net )
278. Borland Delphi 2006 ? - www.borland.com
279. Borland C++ - ( DLL ) Copyright 1994/96 , 1999 Borland Intl.
280. CRYPToCRACk's PE Protector 0.9.3 (2007.01) Lukas Fleischer - cryptocrack.de
281. Break-Into-Pattern, a.k.a BIP, v0.1 (2006.01) - http://n0name.exmuros.net http://undergroundkonnekt.net
282. DotFix NiceProtect 2.5 (with internal packer) GPcH Soft - www.niceprotect.com
283. DotFix NiceProtect 2.5 (Krypton sign) GPcH Soft - www.niceprotect.com
284. DotFix NiceProtect 2.5 (SVKP 1.3x sign) GPcH Soft - www.niceprotect.com
285. DotFix NiceProtect 2.5 (Visual C++ sign) GPcH Soft - www.niceprotect.com
286. Borland Delphi ( Component ) xxxx - www.borland.com
287. Microsoft Visual C++ ver. x.x DLL (5-8)
288. Microsoft Visual C++ ver. 8.0 DLL ( 83 ) ACM*
289. Microsoft Visual C++ ver. 7.xx DLL ( 83 )

290. Private exe Protector v.2.25 ( 28.06.2007 ) www.setisoft.com
291. Microsoft Visual C++ ver. 9.0 exe ( E8 )
292. Microsoft Visual C++ ver. 9.0 DLL ( 8B )
293. PEiD Plugin -> Exe Converter v.1.00 ( BobSoft )
294. MarjinZ EXE-Scrambler SE ( MS Visual C++ 8.0 )
295. Microsoft Visual C++ v7.10/8.0/9.0 DLL ( 8B )
296. Borland VCL Component for .NET ( Borland Developer Studio 4 (c) 2006 v.10.0.2 )
297. PDF2EXE v1.0 CoolPDF Software - www.pdf2exe.com ( 2006.10 ) - PASSWORD DECODER :-)
298. RealBasic v.?.? ExE - www.realbasic.com
299. RealBasic v.?.? DLL - www.realbasic.com
300. Generic check - Aspack vx.x -> Alexey Solodovnikov
301. generic ckeck : FreePascal ver : FPC 1.x.x
302. UPX -> (exe) Markus & Laszlo ver. 0.72 OBSOLETE VER. ( 12.05.1999 ) ACM*
303. UPX -> (dll) Markus & Laszlo ver. 0.72 OBSOLETE VER. ( 12.05.1999 ) ACM*
304. ScanTime UnDetectable by MarjinZ ( STUD RC4 1.0 ) Marjinz-Crypter.exe
305. Free Pascal Compiler version 2.0.4 [2006/08/21] for i386 ACM*
306. Active Basic v4.24.00 © 2006.04.08 (exe) Discoversoft - www.activebasic.com ( Japan ) *ACM
307. Aspack v2.0 -> Alexey Solodovnikov - www.aspack.com
308. Play Basic v.1.0x - 1.63 ( 2D game creator ) www.playbasic.com

309. (exe) UPX obsolete ver. 0.50 - 0.72 -> Markus & Laszlo
310. ANDpakk2 v0.06 (Jul 18 2006) Dmitry "AND" Andreev - http://and.intercon.ru
311. ANDpakk2 v0.18 (Jul 16 2007) 2006,2007 Dmitry "AND" Andreev - http://and.intercon.ru
312. PEiD-Bundle v1.03 by BoB (2007.03.30) - www.secretashell.com/BobSoft
313. Exe Stealth Packer or Protector v.3.16 - www.webtoolmaster.com (NTkrnl)
314. 20to4 v2004.04.18 Copyright 2001-2004 20to4.net
315. Borland C++ 1995 DLL *ACM
316. nBinder LIMITED v4.0 2006 - www.nkprod.ro ( MSV C++ 8.0 )
317. mkfpack llydd (aPlib) 28.05.2007
318. KByS 0.28 beta EXE ( shoooo ) china 2006.05.23 *ACM
319. KByS 0.28 beta DLL ( shoooo ) china 2006.05.23 *ACM
320. Microsoft Visual C++ ver. 8.0 DEBUG / Visual Studio 2005 (FF) *ACM
321. mPack - mario PACKer version 0.0.2 (c) DeltaAziz
322. WinUDA 0.291 clasic sfx 2005 by Dwing http://dwing.51.net
323. Cryptic v2.1 - EXE Crypter Copyright [c] 2007.09.26 Tughack ( MS Visual Basic exe stub )
324. aSm Protector v1.0 Copyright [c] 2007.09.29 AT4RE
325. AverCryptor v.1.02beta by Sec|Null os1r1s ( 2007.08.23 ) - www.secnull.org
326. Muckis Protector 2 coded 2007 by Mucki *ACM
327. Rewolf DLL packager v1.0 V.2007 http://rewolf.prv.pl ( OEP info )
328. x86 Virtualizer ReWolf ( VIII.2007 ) - http://rewolf.pl

Download Sites: http://www.exeinfo.cjb.net/ - www.exeinfo.go.pl

Updates

I was on vacation in Malaysia.

A short collection of the news:


- WinXP SP3 BTA is wide range available with more or less complete documented info based on the first public Torrent from Read.com (thanks to China).
- nLite v1.4 RC2 - Release Candidate 2 contains 2 bugfixes. Txt sif setup is still not fixed by during changes in the first text mode setup more than twice.
- BitComet 0.94 Final released: http://www.bitcomet.com
- Pure P2P UDP Version released: http://2ch.ru/beta/v/kareha.pl/1191659130/
- Hacked Shu Mod 3.0.2.2.210 Beta Public hacked Shu Mod released. Can be a "third" editors edition (not DDJ's original mod).
- eMule 0.48a SharkX v0.4b on them Homepage
- eMule 0.48a MorphXT v10.4 on Sourceforge Projectpage
... more MorphXT 10.4 based mods:

eMule 0.48a Spike2+ v0.4

eMule 0.48a Spike2+ v0.4 Changelog:

- Merged with Spike2 1.2

- Add Random Modstring

- Add in Download Queue:
Reask NNS
Reask FullQ
Ask Server for New Src
Ask KAD for New src
Reask Client
Kick Client
Ban Client

Homepage: http://leecher-and-co.blog.com/

Download 3.96 MB: Spike2+ v0.4.rar - Mirrors

older Version

RapGet 1.40

{***********************************************************************}
{                                Rapget                                 }
{ Description:                                                          }
{   * Rapget is a downloader with code recognition for such share       }
{     servers as rapidshare.de, megaupload.com, slil.ru and others      }
{                                                                       }
{ Version : 1.40 (07.10.2007)                                           }
{ Author  : Alexander Shiryaev                                          }
{ WWW     : http://www.rapget.com                                       }
{ E-mail  : rap@rapget.com                                              }
{***********************************************************************}


History:
v1.40 from 07.10.2007
[*] Fixed rapidshare.com
[+] Added bigshare.net

Download: rapget140.rar - Mirror

Requirements: You need install SSL libraries for correct working: Win32OpenSSL_Light-0_9_8e.exe, (1189 KB) - Mirrors

nLite v1.4 RC

Whats new in nLite 1.4 RC:
* new: Password expiration Unattended option
* upd: Addons (added [Strings],[UpdateCabs] and automatic i386 files detection for 64bit)
* upd: KB937143,kb925398 direct integration
* fix: Argentina added to the Location setting
* fix: My Computer - Context Menu tweaks
* fix: 1689 error during Intel textmode driver integration
* fix: x64 sp2 unattended IIS install (was breaking installation)
* fix: FIPS compliant
* fix: Win2k Iswow64 error on Slipstream Select
* fix: Shell HW Detection service can't start
* fix: Network Monitor removal (breaking Computer Browser in 2k3)
* rem: Removed a few Visual Effects in Tweaks (bsod at logon on German Windows)
* rem: Removed Network DDE for Win2k (hanging at saving settings)


Download v1.4RC Self extracting archive:
nLite-1.4.rc.exe 2,28 MB (2.392.884 bytes)
MD5: c1863c876d6d53f0ef1077f73d40f219 nLite-1.4.rc.exe

Installer v1.4 RC:
2.45 MB MD5: 4BEF2D2DFA99C8F53DDF8E418B5CF64E nLite-1.4.rc.installer.exe
download Mirrors: 01 | 02 | 03 | 04 | 05

ATTENTION YOU NEED RefControl FF Extention and config to send by file download request referrer http://www.nliteos.com to the download file: http://home.midmaine.com/~nlite/nlite/nLite-1.4.rc.exe and all other links!
File have hotlink protection you need to spoof the referrer by request url!!!

For those who can not operate them webbrowser with settings spoof ua/ref, by request, post...
Fileshare link: nLite-1.4.rc.exe
Fileshare link: nLite-1.4.rc.installer.exe

Windows XP SP3 Beta Build 3205 October 2007 available on connect for invited Beta Tester

This morning I received an email from the Connect team advising that the Windows XP SP3 Beta program has been expanded to include those already in the Vista SP1 and Windows Server 2008 Beta trials.

The actual file name for the beta hasn't changed since the pre beta.

It seems like Windows XP SP3 is moving through the final stages of testing before release. That's good news.

Windows XP Service Pack 3 Beta - Build: 2600.xpsp.070831-1912 (Service Pack 3, v.3205)
Exact Build Number:----------------------------------------------^
Year, month, day, hour, minute of build:---------------^

windowsxp-kb936929-sp3-x86-enu.exe (file format: SFXCAB.EXE)
MD5:
C8C24EC004332198C47B9AC2B3D400F7
File info:
6.2.0029.0 (SRV03_QFE.031113-0918)

It's been released in 3 Languages (enu, jpn, deu) English, Japanese, German.

http://connect.microsoft.com/windows/Downloads/DownloadDetails.aspx?DownloadID=8704
Windows XP Service Pack 3 Beta @connect (Invitation ID Required)

KB 936929 available:
　windowsxp-kb936929-sp3-x86-enu.exe 334.92 MB
　windowsxp-kb936929-sp3-x86-jpn.exe 366.76 MB
　windowsxp-kb936929-sp3-x86-deu.exe 335.52 MB

Whats new in SP3 (01. September 2007) Beta release:

・Descriptive Security Options UI Security
The Security Options control panel in Windows XP Service Pack 3 now has more descriptive text to explain the settings and prevent incorrect configuration of settings.

・Enhanced security for Administrator and Service policy entries Security
In System Center Essentials for Windows XP Service Pack 3, Administrators and Service entries will be present by default on any new instance of policy. Additionally, the UI for the "Impersonate Client After Authentication" user right will not be able to remove these settings.

・"Black Hole Router" Detection Networking
Windows XP Service Pack 3 includes improvements to black hole router detection (i.e., detecting routers that are silently discarding packets), and turns it on by default.

・Microsoft Kernel Mode Cryptographic Module Security
Microsoft Kernel Mode Cryptographic Module (FIPS.SYS) is a FIPS 140-1 Level 1 compliant, general-purpose, software-based, cryptographic module residing at the Kernel Mode level of the Windows Operating System. It runs as a kernel mode export driver (a kernel-mode DLL) and encapsulates several different cryptographic algorithms in an easy-to-use cryptographic module accessible by other kernel mode drivers. It can be linked into other kernel mode services to permit the use of FIPS 140-1 Level 1 compliant cryptography.

・Network Access Protection Networking
NAP is a policy enforcement platform built into Microsoft Windows Vista, Windows Server 2008 (now in beta testing), and Windows XP Service Pack 3 (which includes the NAP Client for Windows XP, now in beta testing) that allows you to better protect network assets by enforcing compliance with system health requirements. With NAP, you can create customized health policies to validate computer health before allowing access or communication, automatically update compliant computers to ensure ongoing compliance, and optionally confine noncompliant computers to a restricted network until they become compliant.

・Windows Product Activation Setup
As in Windows Server 2003 Service Pack 2, and Windows Vista, the user may now complete setup without having to provide their product key. They will be prompted for the product key as part of Genuine Advantage during subsequent use.


Of the 1,073 (detail list see ini, inf n' cab's) included updates, 114 are for security-related issues. The remainder are updates to performance & reliability, bugfixes, improvements to kernel-mode driver modules, and many BSOD fixes.

Windows XP Service Pack 3

Beta Release Notes, October 2007

Microsoft® Windows XP®

Information in this document, including URLs and other Internet Web site references, is subject to change without notice and is provided for informational purposes only. The entire risk of the use or results of the use of this document remain with the user, and Microsoft Corporation makes no warranties, either express or implied. Unless otherwise noted, the example companies, organizations, products, people, and events depicted herein are fictitious. No association with any real company, organization, product, person, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user...

© 2007 Microsoft Corporation. All rights reserved.

Info Release Document: Windows XP Service Pack 3 Beta Preview Release Notes.docx

News source: Connect
Yesterday Windows XP SP3 Beta Version (KB936929) has been released on Connect.
(Build Info Version: 5.1.2600.3205 070901 filedate updated KB936929)

Local BT download, in need of it quickly, slow speed but also relatively stable or -WinBeta: alt.binaries.cd.image

Download: Windows XP Service Pack 3 Beta (Build Version: 5.1.2600.3205, 2007.09.01, KB936929) BT seeds
Note, and delivered them to the species itself, the beginning may not speed fast.

The old August v3180 Version is available at: http://dl.thehotfixshare.net/windowsxp-kb936929-sp3-x86-enu.exe
required to send referrer: http://thehotfixshare.net/
in ff using refcontrol to bypass server hotlink protection (http://www.stardrifter.org/refcontrol/)

Remarks:
IE7 version is reported as Version 6

On a machine with the Windows XP Service Pack 3 Beta installed, when viewing the About dialog via the IE7 Help menu, the IE version is reported as Version 6, even though it is IE7. This is a known compatibility issue with IE7 and Windows XP Service Pack 3. There is no workaround in the Beta.

Fix: Internet Explorer 7.0.5730.13 for Windows XP SP2
can be installed later or slipstreamed in a unattended CD.
Download IE 7.0.5730.13: | English | Finnish | French | German | Japanese | Spanish


UXTHEME.DLL enable all Themes without valid signatures use uxtheme.dll or nLite (slipstream and patch tcpip.sy_; uxtheme.dl_; syssetup.dl_; syssbck.dl_; sfc_os.dl_
for after install e.g. P2P unlimited connection patch TCP.sys use XP-Antispy
Driver Updates
Microsoft.Windows.XP.SP3.Build.3205.Beta.1.READ.NFO-WinBeta
Screenshots

In hope slipstreamer/unattended cd creators get it once and do not trash out the old bundled 1000x plus bugfixes with sp2 nLite finalized unattended CD's if there is now the 2nd sp3 out. usb 3 work with it as well usb speed sense bandwidth info.
If you slipstream sp3 you need to replace pidgen.dll with one from sp2 before burning your disk so you can use your sp2 cd key on a clean (not nlite or others recompiled, repacks) unmodded retail XP Pro. This have been tested and works as update or standalone. Later the last Version from IE7 and Mediaplayer can be integrated.
The sp3 files unpacked have some special CPU and other support files. Folder IC,... IKP,... istart belongs under i386. Content in folder name "root" into the CD root dir.

Do not apply Anti wpa or Windows Genuine Advantage (WGA) patches (with or without backdoors and other virii inside), they are not required!

P.S.: Service Pack 3 Beta 6.2.0029.0 (SRV03_QFE.031113-0918) have the same MD5 checksum and is the same. Its mean the packed windowsxp-kb936929-sp3-x86-enu.exe file nfo (SFXCAB Executable) = self extracting cabinet file.

- July Build v.3180 (found in public in the 2nd August week)

- August Build v.3205 (have been released for public official testers on 4th October)
Last File changes and finalized: 5.1.2600.3205 (xpsp.070831-1912):
Branch:

[Version]
Signature="$Windows NT$"
FileVersion=5.1.1.8

[FileBranchInfo]
RTMQFE="%RTMQFE_NAME%",SP1RTM
SP1RTM="%SP1RTM_NAME%",SP1QFE
SP1QFE="%SP1QFE_NAME%",SP2BTA
SP2BTA="%SP2BTA_NAME%",SP2RC1
SP2RC1="%SP2RC1_NAME%",SP2RC2
SP2RC2="%SP2RC2_NAME%",SP2IDX
SP2IDX="%SP2IDX_NAME%",SP2RTM
SP2RTM="%SP2RTM_NAME%",SP2GDR
SP2GDR="%SP2GDR_NAME%",SP2QFE
SP2QFE="%SP2QFE_NAME%",SP3BTA
SP3BTA="%SP3BTA_NAME%",SP3BTA

[Strings]
BUILDTIMESTAMP = "20070901.012633"
RTMQFE_NAME = "RTMQFE"
SP1RTM_NAME = "SP1RTM"
SP1QFE_NAME = "SP1QFE"
SP2BTA_NAME = "SP2BETA"
SP2RC1_NAME = "SP2RC1"
SP2RC2_NAME = "SP2RC2"
SP2IDX_NAME = "SP2IDX"
SP2RTM_NAME = "SP2RTM"
SP2GDR_NAME = "SP2GDR"
SP2QFE_NAME = "SP2QFE"
SP3BTA_NAME = "SP3BETA"

P.S.
Better to inspect some numbers in pid.inf in dirs: \ic\; \ikc\; \iknc\; \iknp\; \ikp\; \ip\; \istart\; ...

Google Search
DDL Search
windowsxp-kb936929-sp3-x86-enu.exe
windowsxp-kb936929-sp3-x86-deu.exe
Fileshare parts

ED2K: ed2k://|file|Windowsxp-Kb936929-Sp3-x86-Enu.exe|348955008|393EAF2B2D478FB2931773DC6EB90178|/