Contribute  :  Web Resources  :  Past Polls  :  Site Statistics  :  Downloads  :  Forum  
    BiW ReversingThe challenge is yours    
 Welcome to BiW Reversing
 Tuesday, February 19 2019 @ 08:12 AM CET
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

External signature for PEiD (good one)

 
Post new topic   Reply to topic    www.reversing.be Forum Index -> Unpacking
View previous topic :: View next topic  
Author Message
haggar
Regular
Regular


Joined: 19 Mar 2005
Posts: 246

PostPosted: Thu Jan 12, 2006 10:03 pm    Post subject: External signature for PEiD (good one) Reply with quote

Here is one external signature for PEiD with lot of good sigs. I added lot of mine which are most correct, also I deleted lot of small , crappy and false ones to prevent false results. Now ExeCryptor, MSRLH, Yoda , SDProtector, ActiveMARK ,etc... can be recognized.

How to use it: just substitute your userdb.txt in PEiD folder with this one, use external scan (set hardcore in options). Greets Cool



userdb.rar
 Description:
Updated 08.02.2007

Download
 Filename:  userdb.rar
 Filesize:  35.49 KB
 Downloaded:  1884 Time(s)



Last edited by haggar on Thu Feb 08, 2007 8:36 pm; edited 3 times in total
Back to top
View user's profile Send private message
detten
Site Admin


Joined: 05 Feb 2005
Posts: 317

PostPosted: Thu Jan 12, 2006 10:07 pm    Post subject: Reply with quote

Nice work haggar Cool
I'm sure it will be of use for many people.

_________________
Ignorance is bliss, knowledge is power
Back to top
View user's profile Send private message Visit poster's website
moniker
Regular
Regular


Joined: 05 Sep 2005
Posts: 123
Location: lage lande

PostPosted: Fri Jan 13, 2006 5:22 pm    Post subject: Reply with quote

tnx!, downloaded it right away.

will test it soon
Back to top
View user's profile Send private message
bLaCk.bytE
New to the board
New to the board


Joined: 28 Jan 2006
Posts: 9
Location: Iran :X

PostPosted: Sat Jan 28, 2006 8:53 pm    Post subject: ;) Reply with quote

Laughing Viva La Hagger !
great job Man !

New :

[Gamehouse Media Protector Version Unknown]
signature = 68 ?? ?? ?? ?? 6A 00 FF 15 ?? ?? ?? ?? 50 FF 15 ?? ?? ?? 00 00 00 00 00 00 00 00
ep_only = true
Back to top
View user's profile Send private message
haggar
Regular
Regular


Joined: 19 Mar 2005
Posts: 246

PostPosted: Sun Jan 29, 2006 2:22 pm    Post subject: Re: ;) Reply with quote

bLaCk.bytE wrote:
Laughing Viva La Hagger !
great job Man !

New :

[Gamehouse Media Protector Version Unknown]
signature = 68 ?? ?? ?? ?? 6A 00 FF 15 ?? ?? ?? ?? 50 FF 15 ?? ?? ?? 00 00 00 00 00 00 00 00
ep_only = true



Black, if you like making signatures then you can post it on PEiD forum and if they are good ones, PEiD coders will include them in new PEiD versions.

But couple advices: it is good thing that signatures are large so false results are avoided. Check mine signatures and you'll see that they are realy big. Also, I pack 10-20 different files which are exe, dll's, compiled with different compilers to make sure that sigs are good.

See you Smile
Back to top
View user's profile Send private message
TDC
Regular
Regular


Joined: 02 Jul 2005
Posts: 202

PostPosted: Sun Jan 29, 2006 6:16 pm    Post subject: Reply with quote

Nice work there haggar, I've deleted my old userdb.txt immediately Laughing
_________________
:: BugHunter ::
*RE page: http://reversemasters.nl/*
Back to top
View user's profile Send private message Send e-mail Visit poster's website
bLaCk.bytE
New to the board
New to the board


Joined: 28 Jan 2006
Posts: 9
Location: Iran :X

PostPosted: Sun Jan 29, 2006 9:40 pm    Post subject: Re: ;) Reply with quote

haggar wrote:
bLaCk.bytE wrote:
Laughing Viva La Hagger !
great job Man !

New :

[Gamehouse Media Protector Version Unknown]
signature = 68 ?? ?? ?? ?? 6A 00 FF 15 ?? ?? ?? ?? 50 FF 15 ?? ?? ?? 00 00 00 00 00 00 00 00
ep_only = true



Black, if you like making signatures then you can post it on PEiD forum and if they are good ones, PEiD coders will include them in new PEiD versions.

But couple advices: it is good thing that signatures are large so false results are avoided. Check mine signatures and you'll see that they are realy big. Also, I pack 10-20 different files which are exe, dll's, compiled with different compilers to make sure that sigs are good.

See you Smile


Embarassed sorry Haggar . Mad i like ur job u r really cool !
ty 4 idea .. i'm newbie in this forum .. Wink
Back to top
View user's profile Send private message
haggar
Regular
Regular


Joined: 19 Mar 2005
Posts: 246

PostPosted: Mon Jan 30, 2006 10:42 am    Post subject: Reply with quote

Btw, where did you found this protector? Can you give me link to it or some program protected with it?
Back to top
View user's profile Send private message
bLaCk.bytE
New to the board
New to the board


Joined: 28 Jan 2006
Posts: 9
Location: Iran :X

PostPosted: Mon Jan 30, 2006 3:36 pm    Post subject: Reply with quote

haggar wrote:
Btw, where did you found this protector? Can you give me link to it or some program protected with it?


~haggar~
this protector is personal for gamehouse games
every gamehouse company pack their files with this !
i havent this protector !
but if u want some files protected with this !

check this site ~~>http://www.gamehouse.com/

and this Sig From GameHouse FeedingFrenzy !


Laughing sorry 4 my bad English
Back to top
View user's profile Send private message
haggar
Regular
Regular


Joined: 19 Mar 2005
Posts: 246

PostPosted: Mon Jan 30, 2006 8:48 pm    Post subject: Reply with quote

Don't wory for language, lot of users (including me) are not from areas where english is national language. Thanks for link I'll check it.
Back to top
View user's profile Send private message
haggar
Regular
Regular


Joined: 19 Mar 2005
Posts: 246

PostPosted: Fri Mar 17, 2006 10:09 pm    Post subject: Reply with quote

Userdb.txt updated, some new (and old) sigs added, bad ones deleted.
Back to top
View user's profile Send private message
l0calh0st
New to the board
New to the board


Joined: 29 Mar 2006
Posts: 4

PostPosted: Wed Mar 29, 2006 7:56 pm    Post subject: Reply with quote

Thanks...The peid signatures were too old..good to have a updated database
Back to top
View user's profile Send private message
linhanshi
New to the board
New to the board


Joined: 04 Jun 2005
Posts: 1

PostPosted: Mon Feb 12, 2007 6:38 pm    Post subject: Reply with quote

Thx fro share.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.reversing.be Forum Index -> Unpacking All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
 Copyright © 2019 BiW Reversing
 All trademarks and copyrights on this page are owned by their respective owners.
Powered By Geeklog 
Created this page in 0.07 seconds