View Full Version : SerialShield
SiGiNT
June 11th, 2006, 11:05
Anyone else run into this one? - although it didn't really get in the way of what I was doing, I did a little bit of research on it and it appears that we may be seeing more of it since it's essentially free, the verbage used to describe it, "protect your code from lamers cracking it", indicates that it was devised by someone from the RE community, it uses SFX based compression, and seems to be relatively easy to unpack but I'm not really sure if I was successful, since it was a .dll and not implemented in the .exe and was not really a factor for me.
SiGiNT
SKiLLa
June 17th, 2006, 17:16
Don't you mean Ionworx SerialShield ? Ionworx is the same company which created ICE License

... see hxxp://www.ionworx.com/serialshield.html for an overview of the product... quote from website:
Quote:
SerialShield uses special code to defeat most debuggers and monitors to prevent spying on your code. Defeated debuggers and monitors include W32Dasm, SoftIce, TRW 2000, InCTRL5, Turbo Debugger, Sourcer, Filemon, ExeSpy, ResSpy, RegMon and Memory Monitor and others. |
Hehehe, so no problem using OllyDBG I guess

SiGiNT
June 17th, 2006, 22:20
Yep, it's definitely IonWorx, It didn't bother me on my particular project, it was included in a Demo - I used a no-brainer technique, I downloaded the full version, (a password protected .msi), decompressed the install package and replaced the demo .exe with the real deal. But being curious I unpacked the .dll and wanted to compare notes, but couldn't find any RE info on this one.
Nope olly doesn't have a problem with it and it really didn't look hard to RE either fish or patch.
SiGiNT
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.