aNTI-TEU 1.2 ~~~~~~~~~~~~~~ This program sticks a fake Turbo Pascal startup code to your program. This way it fools TEU (and other unpacking programs) to think that the Pascal loader is the original file and unpack only this "loader". aTEU also encrypts your program somehow and adds some anti-debugging routines to it. aTEU was mainly designed for protecting Pascal programs but it can in fact AFAIK, as a side-effect, protect even assembler programs (against dumping, ie. TEU -!). C programs can't be protected (yet). (in fact they can be but then they could be simply unpacked using TEU -X:BP) Usage ~~~~~~~ First compress your (Pascal) program with some packer (wwpack or apack recommended) and then just type aTEU filename.exe .. .. there'll be a backup, don't worry :) There is one switch now - /x - extra security.. what is this ??! :) When using this switch, aTEU will use some unfair & unclean methods against some unpackers. This might result in the situation that aTEU loader will detect an unpacker even though there is none and hang :) There is no prevention against this.. So, if you want to be MORE sure that your program will not be unpacked and can accept the fact that your program MAY hang sometime (it may not happen at all!) then use this switch. If you want more compatibility - don't use it! :) simple... However, now it makes no difference but it might be useful against new TEU versions. You shouldn't use aTEU on TSR (resident) programs. Files protected with aTEU can be protected with some other protector afterwards.. some work, some not.. test it out.. (my recommendation is... it's up to you..:) Abilities ~~~~~~~~~~~ As far as I know, my little program will stop these generic unpackers: - TEU 1.81b3, Cup386 3.4, UPC 1.11, ENTPACK 24.4.1998, TR 2.00, GTR 1.A1, IceUnp 0.1.15, ERP 0.97b, Intruder 1.31, UNP 4.12 :) ... .. when I mean stop, it can mean: 1) the unpacker unpacks only the loader (example: TEU, UPC, ...) 2) the unpacker hangs (example: Cup386, GTR, TEU -!, TR, ...) 3) the unpacker produces useless code (example: IceUnp, ...) - If you know some unpacker which can unpack aTEU or if there's some switch in the programs listed above I haven't found out -> tell me! Of course it can be unpacked manually (very easily in fact) but it stops most lamers out there who can only run some unpacker.. * WARNING: F-Prot gives a false alarm on aTEUed files: "Possibly a new variant of PS-MPC." Trust me, aTEU is NOT a virus infector :) I hope I will get rid of this 'bug' in the next release.. Background ~~~~~~~~~~~~ My program adds 4391 bytes to the original file (when using normal security) and 4567 bytes with extra security on. It uses Ady's Glue for sticking the files together now.. It's not the optimal solution but I don't know any other way. There are only few anti-debugging tricks there, tell me if you want them but you can always protect your program with some protector before aTEU. The purpose is to fool the unpackers .. The source is released. Read the documentation in !SOURCE!.DOC. Greetings ~~~~~~~~~~~ I would like to send my greetz to the following people: * Stonehead - Combine MESS and aTEU together ..? :) * C.Gabler - Sick of the "stupid and endless protector/unpacker game" ? So why have you participated? DOS protectors are mostly made for fun now.. KICKATEU sucks. Don't take this as an insult but you say: "KICKATEU 1.1 was coded for fun and to show that the GLUE method just doesn't work." Bullshit. I see no fun in NOPing all instrucions after CLI.. and I think that the "GLUE" method may work if handled correctly. Btw: I'm looking forward very much for you generic aTEU patcher. I think you'll be never able to code it. I'm also looking forward to new TRAP version. I wonder if it takes more than 10 minutes unpacking it in TR. You're so good that you can unpack aTEU through automatic Cup386 /3 & X-TRACT ! ;) Try it in TR.. .. anyway, thanx for idea for this program.. * Trill - PirateStop behaves behaves very strange on my comp.. * JVP - I hope this version will run on your computer * Jibz - Keep on improving aPACK! * Ady - Sorry for borrowing your program :( * Lost Soul - Thanx for AD tricks * STONE - Thank you for releasing your EXE-crypt source * V.Kannegieser - Thanks for EIC * Ugly Duckling - Anything new with your TeuFaker ?? :) * ROSE - Will the new HS include encryption ? :) * S. Esser - You're oh so quiet ! Closing ~~~~~~~~~ Don't blame me for this little piece of crap, it sucks heavily but (should) work.. If not - look at the sources and fix it.. MaX / MovSD in Prague, 1998 http://maxmp.home.ml.org max@kuna.naf.cz