Posted February 15, 200916 yr This's un unpackme from the unpackmes collection uploaded on tuts4you serverIt has a very strange behavior, it replaces the svchost.exe sercive + tries to scan all opened processes + tries to change the page protection of some places in these processesAfter each run, It crashes all opened apps (even kaspersky AV + Outpost firewall + explorer olso ...) all processes are closedIt's very strangeI first lunched it under vista no sp -> crashes alland then I tried to figure out what happened (but leak of time) and can't go further nowPlease if someone has some extra time and can analyse this unpackme, it will be a great helpthank you.BE CAREFULL, DON'T RUN IT OUT OF A VM TILL WE FIND OUT WHAT IT REALLY DOESunpackme is herehttp://www.tuts4you.com/download.php?view.1946
February 15, 200916 yr Author That sounds like SimbOZ... Ted. Does it mean it's a normal behavior of this 'protector' ted?
February 16, 200916 yr Yes, those are some of the features which can be set when protecting an executable...Ted.
February 16, 200916 yr Author Yes, those are some of the features which can be set when protecting an executable...Ted.thank you
February 26, 200916 yr Is anywhere available for download this packer/protector?Here you go:SimbiOZ.7zTed.
Create an account or sign in to comment