Jump to content
Tuts 4 You

uPPP v0.7 RTM


Ufo-Pu55y

Recommended Posts

  • 2 months later...

Thanks for the multiple file drops with same resource! It's very much appreciated. biggrin.png

EDIT: Something funky is happening with the file drop feature in v0.7 which didn't happen in v0.6.

I made a test patch which dropped an executable with no arguments. Then I added another file drop which was a small command line app called "FileTouch" which is used modify the creation/modified/etc dates of files using a specified file mask. For FileTouch, I set Execute+Wait+Delete and added the following as the arguments

/?

....which basically makes it print the help page. I did this just to test it out. I created this test patch, and then ran it and clicked "patch". It dropped the first executable I set, then crashed before FileTouch.exe was ever dropped. This was on my Win7 x64 machine. I tested this same patch on my WinXP x86 machine, and it displayed the same behavior...except that it dropped FileTouch.exe, but didn't execute it before crashing.

I'm not sure if the issue in this case is FileTouch.exe, but you can download it here for debugging purposes:

http://www.softtreetech.com/24x7/archive/47.htm

Let me know if there is anything else I can provide to help with this issue. :)

Edited by PutterPlace
Link to comment

Add a 'filedrop' with any packer?

Simpy use the included one: Upack.exe with:

Arguments = YourTarget.exe

Mode = Execute+Wait+Delete

But watch out with Upack. It's top of the art and small, but (nooby) AVs hate that packer.

Link to comment

*all

**naw.. u make bunny curious again

Antivirus Version Last Update Result
AhnLab-V3 2011.08.23.01 2011.08.23 Packed/Upack
AntiVir 7.11.13.196 2011.08.23 -
Antiy-AVL 2.0.3.7 2011.08.23 -
Avast 4.8.1351.0 2011.08.23 -
Avast5 5.0.677.0 2011.08.23 -
AVG 10.0.0.1190 2011.08.23 Suspicion: unknown virus
BitDefender 7.2 2011.08.23 -
ByteHero 1.0.0.1 2011.08.22 -
CAT-QuickHeal 11.00 2011.08.23 (Suspicious) - DNAScan
ClamAV 0.97.0.0 2011.08.23 PUA.Packed.UPack-2
Commtouch 5.3.2.6 2011.08.23 W32/SuspPack.CY.gen!Eldorado
Comodo 9847 2011.08.23 Packed.Win32.MUPACK.~KW
DrWeb 5.0.2.03300 2011.08.23 -
Emsisoft 5.1.0.10 2011.08.23 Trojan.Win32.Obfuscated!IK
eSafe 7.0.17.0 2011.08.22 Suspicious File
eTrust-Vet 36.1.8516 2011.08.23 -
F-Prot 4.6.2.117 2011.08.23 W32/SuspPack.CY.gen!Eldorado
F-Secure 9.0.16440.0 2011.08.23 -
Fortinet 4.2.257.0 2011.08.23 -
GData 22 2011.08.23 -
Ikarus T3.1.1.107.0 2011.08.23 Trojan.Win32.Obfuscated
Jiangmin 13.0.900 2011.08.23 TrojanProxy.Agent.dbm
K7AntiVirus 9.111.5047 2011.08.23 -
Kaspersky 9.0.0.837 2011.08.23 -
McAfee 5.400.0.1158 2011.08.23 Suspect-BL!BD4988F011AA
McAfee-GW-Edition 2010.1D 2011.08.23 Heuristic.LooksLike.Win32.Suspicious.C
Microsoft 1.7604 2011.08.23 -
NOD32 6404 2011.08.23 a variant of Win32/HackTool.Patcher.D
Norman 6.07.10 2011.08.23 W32/Packed_Upack.A
nProtect 2011-08-23.01 2011.08.23 -
Panda 10.0.3.5 2011.08.23 Trj/Pupack.A
PCTools 8.0.0.5 2011.08.23 -
Prevx 3.0 2011.08.23 -
Rising 23.72.01.03 2011.08.23 -
Sophos 4.68.0 2011.08.23 Sus/ComPack-C
SUPERAntiSpyware 4.40.0.1006 2011.08.23 -
Symantec 20111.2.0.82 2011.08.23 Suspicious.MH690.A
TheHacker 6.7.0.1.284 2011.08.23 W32/Behav-Heuristic-060
TrendMicro 9.500.0.1008 2011.08.23 Cryp_Xed-12
TrendMicro-HouseCall 9.500.0.1008 2011.08.23 Cryp_Xed-12
VIPRE 10249 2011.08.23 Trojan.Win32.Packer.Upack0.3.9 (ep)
ViRobot 2011.8.23.4635 2011.08.23 -
VirusBuster 14.0.182.0 2011.08.23 Packed/Upack
Link to comment

that works, thank you :)

fifty percent detected as virus is okay :)

anyway the uPPP SkinHelper.exe got detected as malware by avast and malware bytes tools

thanks again

Add a 'filedrop' with any packer?

Simpy use the included one: Upack.exe with:

Arguments = YourTarget.exe

Mode = Execute+Wait+Delete

But watch out with Upack. It's top of the art and small, but (nooby) AVs hate that packer.

Link to comment
  • 3 weeks later...

for me doesn't work.. only when i write whole pathname.. also when i write with capital letters it fails and testdrop fails, too.

testax.png

Edited by tim619
Link to comment

I can't reproduce it like that.. both from uPPP dialog and patch.exe working ok over here:

post-20979-0-90822800-1316111903_thumb.p

Do you miss any admin rights?

Ever tried running both as admin?

Link to comment
  • 2 months later...
  • 2 weeks later...

Support for program files doesnt work with file drop.

Is it possible to drop the .exe in to a specific folder in program files

eg: drop my exe in mysetup folder in program files

Link to comment

Support for program files doesnt work with file drop.

Is it possible to drop the .exe in to a specific folder in program files

eg: drop my exe in mysetup folder in program files

I'm sure you tried like this?

%PROGRAMFILES%\mysetup\
Edited by Ufo-Pu55y
Link to comment

I'm sure you tried like this?

%PROGRAMFILES%\mysetup\

At last it works,Thanks man.

I tried it like this woks

%SYSTEMDRIVE%\%PROGRAMFILES%\mysetup\ and didnt work but %PROGRAMFILES%\mysetup\ works

THANKS Ufo-Pu55y

Link to comment

It is a good work.There is one problem which is the compare i.e. whenever you compare two files and your changes are a lot upp takes long time to get the bytes of change

Link to comment
whenever you compare two files and your changes are a lot upp takes long time to get the bytes of change
Did you try the patched one above?

What's your definition of 'long time'?

Some more infos?

Link to comment
  • 2 weeks later...

Hello Ufo, like many people i love your patcher ... a really cool thing to add, should be the possibilities to have two parts in crack , one for the x86 version of the target and one for the x64 ...

We can imagine two patchs buttons ... one crack for the two versions .. what do you think about it ? i never see that in any patcher ..

Edited by mr sky
Link to comment

Hello Ufo, like many people i love your patcher ... a really cool thing to add, should be the possibilities to have two parts in crack , one for the x86 version of the target and one for the x64 ...

We can imagine two patchs buttons ... one crack for the two versions .. what do you think about it ? i never see that in any patcher ..

I already tried adding support for things like that.

Here's a part of the v0.6's changelog:

-new: 'Win64' option for all patch types (disables Wow64

redirections on 64 bit systems) to allow proper patching of

x64 targets

-new: grouping of patch entries via try-next-on-failure

functionality.. some examples:

a) multiple (future) versions of a target:

add multiple search and replace patterns. as soon as 1

pattern hits, the rest of the group gets skipped.

b ) multiple bit versions of a target:

one registry patch for the x64 version of a target, and one

for the x86 version. the correct one gets automatically

applied

It's doable.. just try it.

Link to comment
  • 4 weeks later...

i using uppp 0.7 to create patch WinCHM

but not work

i creat patch form WinCHM version 4.02 and test on versi 4.27 (SnR pattern)

but patch Filed, but if the some version its work

if using DUP2(diablo2oo2) work 100%

sorry my english is not good

Edited by andrextrap
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...