any Idea?

Hi moZfet,

i don't use SmartCheck so much so i also don't know any protection against it, but i think i've read somewhere that it searches for it's WindowClassName (with API = FindWindowA)
Hope this helps...

Cya...

CoDe_InSiDe

let me elaborate a little. indeed, the only smartcheck detection i know of, finds if it is loaded by the WindowClassName of smartcheck.exe and then sends two WM_CLOSE messages to it (two, to surpass the closing confirmation). Your task is then either to patch the windowclassname in smartcheck, OR, alternatively, find the string in the offending program and patch there.

HTH.

This got me thinking about an old crackme....released maybe a year or so ago.

I never did crack that bast$*@, but if I remember right... Filemon logged the crackme as checking the SChck registry entries which store the last opened files.

Oh.... I always wondered why any vb shareware programmers didn't check for app.path & "\" & app.name & ".sup"

I think that's how that'd be done in vb anyways, but it'd be too easy to check for the presence of that SChck file in the app's directory.

there is also a known detection for SC by searching for the 'smrtchck.tsf' file in c:\%windir%, rename this file and it will destroy that detection...

NchantA