--------------------------------------------------------------------------- HS - HackStop - Release Notes/History - WHAT IS NEW? --------------------------------------------------------------------------- Version Date (DD.MM.YY) Remarks 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 3.00 2666 Living Code :) 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 2.50 2111 Win32 PE / Linux binaries handling 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 2.00 2011 Z-Code Engine XI 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.50 2005 relocations compression ? GTR 1.C0 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.20b226 09-Apr-2000 + fixed a bug with the interrupt handler � iCEUnp 0.3.5 + added iCEUNP and eDump protection � eDump ?.?? ! tested under Windows 2000 WKS/dt, NT4 SP5 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.19b221 28-Aug-1999 ! tested under Windows 2000 beta 3 � iceUNP 0.3.1, 0.3.2 � HSCRC 1.00 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.19b217 11-Jul-99 ! Build 217 + Better Windows file (NE/PE) detection � Blast Wave + The sharewareversion now adds the HS.EXE � unHS 1.00 creation date to protected files. So you can easy determine the different builds. ! changed some macros (Nebelbombs) to bypass unHS etc. + fixed all known bugs + HS.DOC completly rewritten ! added anti virus protection to HackStop 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.19b206 11-May-99 ! Build 206 - released via INET ! Lots of internal development. Expect � TEU 1.82 even more changes in the next versions � TR 2.03-2.51 + relocation handling � IceUnp 0.2.9 + EXE body and relocation encryption � DeGlucker 0.04rc + -nr/-nb switches to emulate HS 1.18 � LTR 1.01 - removed older macros against TEU/UPC - HS cannot handle wildcards anymore + Enhanced ChkHS 1.02 + New switches: -ii (replaces -^) and -te ! Biggest beta test since HS development has started. 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.18 14-Jan-98 ! Due to the different 1.17 HackStop versions floating around, I have decided to release � TEU 1.74a the 1.18 version instead of the 1.17 � Deglucker 0.03b - fixed a little bug in HS triggering Win95 � Decay 0.05 /a + CS segment fake for generic unpacker � AEU 1.0� + Added a new inline memory encryption to the � HSR 1.11, 1.12, 1.13, 1.14 COM & EXE envelope (this screws for example � Stone Com Decryptor 1.0b even the newest TEU) � ERP 0.97 (aka RichunHS) + Added DEBUG.EXE & SID.EXE from different � TR 1.93-1.96 DOS versions. � unpHS 1.32 (buggy) ! Tested under DOS, Win95, Win-NT & OS/2 - HackStop now requires a 80386 or better CPU to protect files. Protected files will still run on 8086++ based CPU's... + HS now prints the filesize of protected files + Added ChkHS.ASM & ChkHS.EXE + Enhanced the German and English FAQ + Self checking of the entry point of EXE files to disable unpackers like unpHS. + Changed the return to the host program 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.17 30-Sep-97 - EMM386 can't emulate some DRx instructions, fixed that in HS386 (Credits: Rene Rudolf) Tested (new versions) + HS now shows the -k switch if specified � KillHS 1.2 (Credits go to Rene Rudolf) � unpHS 1.2, 1.3 - Fixed a bug, which garbled INT 1/3 in � ComUnp 0.1f/Bush^MSH HS.EXE (Credits: Rene Rudolf & Ka0t) � Entpack 11/96 - Fixed a bug on EXE files, when filelength � Uncom/Ka0t was a multiple of 512 (Rene) � UPC 1.06.3 (1.10 hangs :) + Fixed KillHS 1.2 and unpHS � CUNP 0.13 + Added a nice routine to HS.EXE if executed � TEU 1.68, 1.69, 1.73 (d/e) under UPC, Intruder, Entpack or TEU :) � IceUnp 0.11, 0.14, 0.15 To see this "scrolly" you must unpack � DumpCom 3.0 HS.EXE first of course (Credits: Stonehead) � HSR 1.00, 1.10 + Added a new generic fake for TEU, UPC, � CUP 386 v3.3 /7 /3 Entpack 11/96 and Intruder � TEU 1.74�3, 1.74�9 + New intro text, some text parts are now � Intruder 1.30hs encrypted during runtime :) � Decay 0.04, 0.04a + FProt /ANALYSE triggers now no more "false � UPC 1.10 fix (thx Stonehead) positives" in EXE files � UPC 1.11 + Changes the entrypoint to disable dumb � GTR 1.81, 1.82, 1.83 unpackers like unpHS. (Sorry changed it � DumpCom, UnpCom etc... before I got unpHS 1.3 :) + Soft-Ice bugfixes (credits Stefan Esser) - Fixed a segment violation under Win-NT 4.0 + Added Anti Cup 3.3 /7 code and 2nd Anti TEU 1.73 trick (should work with UPC 1.10 too - UPC 1.10 is buggy) + Totally recoded string routines, works better under Win-NT 4.0 - Fixed a bug which causes HS.EXE to garble INT 1 & 3 + HS.DOC rewritten (parts) + New HS mailing list, see HS_DIST.TXT + New option /pb - see HS.DOC 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.16/386 04-April-97 Special release of HS made for the TPiNC party! This version uses 386 protected mode � S-Ice 2.80/Win-Ice anti-debugging tricks thus totally screwing � DeGlucker 0.03a Soft-Ice. � TD 386, CUP 386 Please note when ordering, that you will get the normal 8086 version if not explicit requested for the 80386 protected mode version of HS! NOTE: HS 1.16 was only made available to TPiNC and registered users! 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.15 22-March-97 Fixed some macros which hang protected HS files under Windows 95. � TEU 1.66 Added new macros against patched SoftIce � IUP 0.6.7 versions, Win-Ice and Windows-95 debuggers. � Win-Ice, Win-Debug Added an Anti-Gamebuster macro. Anti ? UPC 1.06�1,2 emulator macro added. � Entpack/Foto � Gamebusters My Email adress rar@fh-albsig.de seems no � unpHS 1.1 longer be valid. See ROSEBBS.TXT for the new one. 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.14 03.01.97 Added anti KillHS Code. Added anti HSUnp code. Checksum over the anti-intruder code Tested (new versions) in the EXE envelope. Added UPC 1.04 (1 byte). � upc 1.04, xcom 0.10 Added unpHS as well as generic unpHS � unp 4.12� detection (should work with Ghostbuster � unpHS 1.00 unpacker too ). Checksum over startup � iup 0.6.4, iup 0.6.4/ss code in the EXE envelope added. Added anti � KillHS 0.0x code for CUP/386 and Soft-Ice (thx 2 Kaot). � upc 1.05 Enhanced the existing anti Soft-Ice trap. � abkProt Enhanced the function in faking generic � Tron 1.30 COM unpackers which are setting hardware � Cup386 3.2 (/1,/3,/7) breakpoints on write/read/exec cs:100h. � KillHS 1.00/UCF,1.0x,1.1 Fixed the stack in the COM envelope (thx 2 � SnapShot 3.00 Kaot, Ghostbuster & Rand0m). Added 5 new � Imamegalamer 0.01� encryption keys. Added a few tunes to the � unHS 1.00/NOPS intro... changed one HLL macro to fool � unHSEXE 1.00/NOPS UPC 1.05. Added an instruction, which � Entpack 95 triggers Turbo-Debugger 4.0 to hang! Added a generic CUP 386/3.2 and TRON 1.30 (and Soft-Ice) trap. Fixed a bug in COM2EXE (min/max memory allocation) - credits: Ka0t Changed the jump in the COM envelope. Added a trap for generic unpackers like unHS. Changed some macros to be more compatible with OS/2, Win-95 and Win-NT. PRICE REDUCTION, SEE REGISTER.DOC!!! 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.13 27.06.96 Changed the return statement in the COM envelope. Fixed a bug in the Soft-Ice Tested (new versions) routine. Added "fuck up's" for unHS (KA0T) � Tron 1.21 and xHS (Riddler). Fixed a security hole � cup 386 3.0b/7 unHS uses in EXE files. Added a fourth � upc 1.03 encryption layer around the COM envelope! � snapshot 2.2 Added a fifth encryption layer around the � intruder 1.30 EXE envelope! COM & EXE: Moved the � x-tract 1.51a Anti-Intruder code out of the encryption � xHS 1.30 layer into a own encrypted subfunction. � unHS 1.10 Added two NEW Soft-Ice antidebugger traps! � CUnp 0.13 (by ROSE :) Stronger keyboard traps added. Added COM & EXE brandmarking at the end of protected files. Added HSFAQENG.DOC... Added check- summing over the text in COM & EXE files. Changed the entrypoint of COM files. New option: -i for intro/greetings list. Fixed a bug with read-only files. Credits: Andreas Marx. New option: -k (kill signature) Added anti SnapShot 2.2, CUP386/3.0b and UPC 1.03 tricks! 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.12 24.03.96 The EXE decryptor is now much more harder to crack, because it's not possible to set any breakpoints/ints! Enhanced checksums. Credits for checksums: Andreas Marx! Added a new antidebugger macro which kicks all generic unpackers. Added a macro which fouls generic unpackers like SnapShot etc. Changed some Macros and Text. Enhanced HSFAQGER.DOC. Enhanced Soft-Ice antidebugger trap. EXE envelope is a little bit smaller and decrypts a little bit faster. COM & EXE envelope now permits setting breakpoints or ints into the decryption loops. 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.11 01.12.95 Added a version marker to the COM & EXE envelope (see HS.DOC). Added a stronger encryption to the EXE and COM envelope. Fixed 't' flag found by TBSCAN 6.38++ on Hackstopped EXE files. Added HSFAQGER.DOC. 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.10 13.09.95 Minor changes, the most visible being: Copyright notice moved to the end of the envelope. Tested with more than 20 unpackers and hack tools... 1.10 Alpha-1 COM: Antidebugging code for real mode 16.06.95 debuggers as well as Soft-ICE added. Antihacking code for tools like "Intruder" or "AutoHack". Added one more encryption layer. Enhanced encryption. EXE: Antidebugging code for real mode debuggers as well as for Soft-ICE added. Antihacking code for tools like "Intruder" or "AutoHack". All code of the HS-Header is secured with checksums. Added up to four encryption layers to the HS-Header. New "memory encryption" technique. 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.0x Summer 95 Internal releases.... 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.00 25.04.95 Released on SimTel... worldwide! FAILED! 'COS THESE GUYS THINK THAT SOME DICKS WILL ENCRYPT THEIR VIRUSES WITH HACKSTOP! 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 1.00_B2 04.04.95 Added another protected mode debugger trap to the COM and EXE envelopes. Jump to COM envelope enhanced. 1.00_B1 08.03.95 First Beta release, added COM2EXE utility. Added protected mode debugger traps. 0.99 15.02.95 Fixed a bug in protected exe files which causes them to hang on Pentium processors. Tested with UNP 4.10 and UX 0.55. 0.98 08.02.95 First national release (Germany). 0.97.7 06.02.95 First international release, to get a feedback. 0.97 31.01.95 Added three debugger traps to HS. Removed "Brandmarking" because some linked programs need this two bytes to relocate properly! Enhanced encryption. Tested with over 2000 sample files. 0.96 25.01.95 Added command line parameters. Two types of backup files (see options -b and -bh). HackStopped EXE files now print a message if DOS 2.x was found and abort. The COM and EXE decryptors are now encrypted too! 0.95 19.01.95 HS now creates backup files. Enhanced anti debugging tricks against runtime actions added. 0.94 11.01.95 Added encryption to the COM decryptor to fool unpackers. 0.93 02.01.95 Detection of linear executable added. "Brandmarking" of the exe-header. Beta ver. 0.92 21.12.94 Detection of Windows & OS/2 files improved. Stack allocation fixed. Still beta version. 0.91 15.12.94 First public release of the beta version. 0.90.x July 94 - Dec. 94 Beta versions for friends and for internal use. Should not be found in the public! 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� /* end */