[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[exelist] Re: Mails concerning ProcDump
Hi G-Rom,
Just a question.
ProcDump leaves (after unpacking) a Lot of garbage, parts of the original
decompression routine in the PE-exe.
Is there a program/utility wich can remove the "garbage" from the unpacked
.exe file?
Had one WWPack 32 file, at the end you'll find the decom. routine, the one i
like to be removed.
Greetz,
:DM:
digitalmatrix@...
-----Original Message-----
From: G-RoM <g-rom@...>
To: exelist@egroups.com <exelist@egroups.com>
Date: Friday, April 16, 1999 1:22 PM
Subject: [exelist] Re: Mails concerning ProcDump
>Hi,
>
>If you are wanting to start a cat & mouse contest, be ready to loose unless
>you do significants changes. Anyway, keep in mind that it takes me 1 minz
>max to remove 95% of PE layers (15 minz is the max I wasted on a layer).
>Unfortunatly I have no time to unpack all PE files of the world neither to
>code an AI based analyzer.
>Basically ur actuals changes in ur layer after each new script is not
really
>hard to manage. IT looks even like a joke => Boring to update even.
>
>Regarding unpacking ur file, AS u are the coder it shouldn't be a pb for
ya.
>If u can't ... well really sad for ya ;).
>
>G-RoM
>"If it runs, it can be defeated."
>
>
>------------------------------------------------------------------------
>eGroups eLerts!
>Exclusive discounts from the hottest online music stores
>Join Now! http://clickhere.egroups.com/click/21
>
>
>eGroup home: http://www.eGroups.com/list/exelist
>Free Web-based e-mail groups by eGroups.com
>
>
------------------------------------------------------------------------
eGroup home: http://www.eGroups.com/list/exelist
Free Web-based e-mail groups by eGroups.com