Re: [exelist] "EKB" file used by StopCopy

[mame user <mame2099my@...>]

--- fan2002_sz <charlesfan@...> wrote:
> Who can tell me the structure or information of the
> "ekb" file used 
> by StopCopy
> Thank you
> 
> 
> 
Some study that I've done with StopCopy:
most of the programs protected with it is NE
executables. So far i'd never found a PE nor LX. IMHO
(according to their documentation) if an executable is
a PE then it will use sort of DLL injection, which is
a bundled 16-bit DLL.
I've successfully make some copies of StopCopy keydisk
using FDA 6.x (FDA 5.x don't work on my machine,
anyone have info abt. working copies?) and also i've
successfully make copies of Everlock keydisk too but
not Cop's Copylock II (joker/radium cops remover
doesn't work on my tests).
For Everlock, i've never thought that some simple
patches (most of the case 2-3 bytes) will do the work,
and you don't even have to unpack the executables. So
you can install the programs on a NTFS partition eg
Win2k or XP without needing for authorization since
the winmove program only work on FAT partitions. If it
works then you can later dump the process using
ProcDump etc.
If somebody interesting in StopCopy and/or Everlock
then I have a working copy... but it's not english btw...

__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/