Web
: http://kickme.to/mxbnet
Contact Me : dheeraj_xp@yahoo.com
Norton
Anti Virus 2001 - VBOX 4.3
Type : Anti Virus
Protection : VBOX 4.3
Tech : Regedit & File delete
Crack :
Have you ever
wondered how VBOX keeps track of your 30 day trial.
VBOX is realy a good protector.But it has its own weak points.
"VSetupT.EXE" is used to make valid LIC files while installing any
VBOX 4.3 protected
software.If we are able to delete secret registry key and files ,we can use
"VSetupT.EXE"
to extend our trial period to what ever we whish :)
In NAV 2001 - I was unable to find "VSetupT.EXE".It seems that install
sheild has packed this
baby ...
So let us do a simple trick.While setup is running ... go and look in to this
folder :
"C:\WINDOWS\TEMP\_ISTMP5.DIR\_ISTMP0.DIR\"
Yes ... it is our TEMP folder ... you will get "VSetupT.EXE"
Now quickly copy this file to another place as Setup will delete this file.
Secret Behind VSetupT.EXE :
VSetupT.EXE make four important files in your computer :
C:\os581474.bin
C:\WINDOWS\SYSTEM\ws907958.ocx
C:\WINDOWS\Vbox\Licenses\Norton AntiVirus_7.00.00_7A57.lic
C:\WINDOWS\Vbox\Licenses\Norton AntiVirus_7.00.00_7A57.prf
These files control "30 DAY Trial" :)
I used RegMon to find secret registry keys.
VBOX also creates two secret key in registry :
HKEY_CLASSES_ROOT\CLSID\{4AB0321F-3399-BFA4-9120-16F482736F9E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\{187EA16F-6CDA-4D37-1D07-F156D53AB7EE}
These keys are made on first run .
So my point is that if your trial period is over delete following files :
C:\os581474.bin
C:\WINDOWS\SYSTEM\ws907958.ocx
C:\WINDOWS\Vbox\Licenses\Norton AntiVirus_7.00.00_7A57.lic
C:\WINDOWS\Vbox\Licenses\Norton AntiVirus_7.00.00_7A57.prf
And also use "Regedit.exe" which comes with your windows9x to delete
following RegKey:
HKEY_CLASSES_ROOT\CLSID\{4AB0321F-3399-BFA4-9120-16F482736F9E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\{187EA16F-6CDA-4D37-1D07-F156D53AB7EE}
Now last step :
Run the file "VSetupT.exe" to produce a fresh 30 DAY TRIAL copy.Which
is found inside :
the Crack File.
NB : I don't know if same registry keys
are made by VBOX on all computers.
//======================================================================
//MxB Net
//***********************************
//email : mxbnet@hotmail.com
//web : http://kickme.to/mxbnet
//***********************************
//NAV 2001
//===================================================================
#include
//===================================================================
int WINAPI WinMain(HINSTANCE hInstance,HINSTANCE hPrevInstance,
LPSTR lpCmdLine,int nShowCmd)
{
//===============================================================
char InfoText[] = "MxB - NAV 2001";
long lResult = 0;
HKEY hKey =0;
int i =0;
char windir[MAX_PATH];
char sysdir[MAX_PATH];
bool error = false;
PROCESS_INFORMATION pi;
STARTUPINFO si;
char* cl;
//===============================================================
char firstkey[] = "{4AB0321F-3399-BFA4-9120-16F482736F9E}";
char seckey[] = "{187EA16F-6CDA-4D37-1D07-F156D53AB7EE}";
//===============================================================
//Delete Registry Keys
//===============================================================
//First Key
lResult = RegOpenKey(HKEY_CLASSES_ROOT,"CLSID",&hKey);
if(lResult != ERROR_SUCCESS)
{
MessageBox(NULL,"Unable to open Registry..exiting",InfoText,MB_OK);
return 0;
}
lResult = RegDeleteKey(hKey,firstkey);
if(lResult != ERROR_SUCCESS)
{
MessageBox(NULL,"Unable to deleted First Key ...",InfoText,MB_OK);
error = true;
}
RegCloseKey(hKey);
//================================================================
//Second Key
lResult = RegOpenKey(HKEY_LOCAL_MACHINE,"SOFTWARE\\Classes\\.wav",&hKey);
if(lResult != ERROR_SUCCESS)
{
MessageBox(NULL,"Unable to open Registry..exiting",InfoText,MB_OK);
return 0;
}
lResult = RegDeleteKey(hKey,seckey);
if(lResult != ERROR_SUCCESS)
{
MessageBox(NULL,"Unable to deleted Second Key ...",InfoText,MB_OK);
error = true;
}
RegCloseKey(hKey);
//===============================================================
//Delete Files ...
GetWindowsDirectory(windir,sizeof(windir));
GetSystemDirectory(sysdir,sizeof(sysdir));
strcat(windir,"\\Vbox\\Licenses\\Norton AntiVirus_7.00.00_7A57.lic");
strcat(sysdir,"\\ws907958.ocx");
//===============================================================
if(!DeleteFile(windir))
{
MessageBox(NULL,"Unable to deleted Lic File ...",InfoText,MB_OK);
error = true;
}
//===============================================================
GetWindowsDirectory(windir,sizeof(windir));
strcat(windir,"\\Vbox\\Licenses\\Norton AntiVirus_7.00.00_7A57.prf");
if(!DeleteFile(windir))
{
MessageBox(NULL,"Unable to deleted Prf File ...",InfoText,MB_OK);
error = true;
}
//================================================================
if(!DeleteFile(sysdir))
{
MessageBox(NULL,"Unable to deleted OCX File ...",InfoText,MB_OK);
error = true;
}
//===============================================================
//Delete os528730.bin
GetWindowsDirectory(windir,sizeof(windir));
for(i=0;i < MAX_PATH;i++)
{
if(windir[i] == '\\')
{
windir[i] = '\0';
}
}
strcat(windir,"\\os581474.bin");
if(!DeleteFile(windir))
{
MessageBox(NULL,"Unable to deleted BIN File ...",InfoText,MB_OK);
error = true;
}
//===============================================================
if(error ==false)
{
MessageBox(NULL,"Removed VBOX Files and Registry Keys ...",InfoText,MB_OK);
}
//===============================================================
//Execute VSetupT.exe
ZeroMemory(&si,sizeof(si));
si.cb = sizeof(si);
cl = GetCommandLine();
if (!CreateProcess("VSetupT.exe",cl, NULL, NULL,FALSE,
NORMAL_PRIORITY_CLASS,NULL, NULL,&si, &pi))
{
MessageBox(NULL,"Unable to load \"VSetupT.exe\" ...",InfoText,MB_OK);
error = true;
}else
{
MessageBox(NULL,"Loaded \"VSetupT.exe\" ...",InfoText,MB_OK);
}
//===============================================================
return 0;
}
//====================================================================================