I'm extreamly new to this 'art' and reading a ton, but i've got a question that I can't seem to find by either searching this database, sorting through tuts, or by any other means.

I've got an application here that deffinatly uses Armadillo and I'm pretty sure it's using a version over 1.90, since all the tuts talk about a tmp file generated when executed. This app does not, however. This application was packaged around 4/2001 so it's nothing extremely new. My question is, how does one know what version of Armadillo was used? Is it just be examing the shell code itself?

Also, This armkiller app that appears to *almost* do everything for you... What should you expect when using it? I run it, select the application thats protected and then the application starts up. Shouldn't the program output a unpacked exe?

Thanks for any information that can get me on my way!
vxd

Hi there,

Armadillo has custom builds for different apps so it is hard to tell version of Armadillo, they have so many beta and alpha release, there isnt a point in keeping track of version anyway... unpacking armadillo has been discussed here and the general method is the same...

Visit RealmSilicons.com to get a feel of what it is like, then search for keywords like copy-mem :>... u will find a ton...

regards
crUsAdEr

Ok, makes sense...thanks!