Contribute  :  Web Resources  :  Past Polls  :  Site Statistics  :  Downloads  :  Forum  
    BiW ReversingThe challenge is yours    
 Welcome to BiW Reversing
 Monday, December 18 2017 @ 02:28 AM CET

Anti Smartcheck

   

TutorialsLevel : newbie

Well I am an EXTREME NOOB!!!

I ran across an issue while exploring a crackme.
I opened the Crackme in Numega's SmartCheck;
Ran it and Smartcheck closed.
I repeated the numerous times ;)

So, it must be some kind of Anti SmartCheck coding I figure, but how to get around it?



Well, I found the Tutorials here and searched other places without finding a solution.

Anyways, here it is, very simple.

1, After determining there is an Anti SmartCheck, Open App up in Olly
2, Do a text string search for "SmartCheck"
3, Locate the offender
4, Follow offender in the dump, (we see what the app is searching for)
5, NOW, in the Dump, select any letter of "Numega Smartcheck" press any letter key, a pop up comes, now change the search string.
ie, change "Numega SmartCheck" to something like
Mummma StormChest"
Chances are, when app is looking for this, it will not find it and continue.
Save to Executable, save file (use backup name) now, reopen in SmartCheck and Run!!!
Ahhhhhah!!!!!! App doesn't close.

(Not sure if this will work for all, but has worked for me on several ocassions now.)

Thanx for reading.




What's Related

Story Options

Anti Smartcheck | 1 comments | Create New Account
The following comments are owned by whomever posted them. This site is not responsible for what they say.
Anti Smartcheck
Authored by: Ksbunker on Saturday, August 09 2008 @ 05:43 AM CEST
What exactly was the protection?

FindWindow and SendMessage, WM_CLOSE?
 Copyright © 2017 BiW Reversing
 All trademarks and copyrights on this page are owned by their respective owners.
Powered By Geeklog 
Created this page in 0.08 seconds