컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� HackStop Remover V1.0 Document 26 Juni 1997 Copyright (c) 1997 by Stefan Esser All Rights Reserved Copy registered to: PUBLIC! 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� This is version 1.0 of the HackStop Remover. It was written to show ROSE the problems of HackStop. The program is rather self explaining so that I do not think an explanation is needed. NOTE: HackStop Remover will not work if the loaded file overwrites the 8000h segment, because the HackStop Code is moved to this point. In the beginning of HSR the code was moved to a allocated segment before the loaded file. This routine sometimes failed... After that HSR moved the code a allocated segment at the end of the 640kb area. This routine failed on some versions to... Now I know why! HS has a bug (not only one): Just before HS jumps to the entrypoint it trys to clean up the code! But because of this bug it overwrites parts of the memory after the HS code. If ROSE will kick off this bug, HSR will not work on the following versions. And I know he will remove this bug my letter arives him. BTW.: The HSR.EXE file is protected by LamerStop v1.0� which is only a joke, because all good generic unpackers can remove it. If you search a really good security tool, then wait for CrackStop v1.0 which I will finish in about a week (?). It really kicks off all tools like SoftIce (patch level 0-2), CUP386 v3.2/v3.3, UPC, TEU, UNP, UUP, TRON, INTRUDER v1.2/v1.3/v1.3hs, ENTPACK... --------------------------- HackStop Remover works with --------------------------- v1.10� only a few files tested \ HS Remover was written to remove v1.11a only a few files tested / v1.12cs+ the older version were v1.12cs yes | implemented in about 5 minutes, v1.12ds yes | so do not blame me if HSR does v1.13as yes | not work on your old version v1.14s yes v1.15s yes !!! for all versions: !!! v1.16as yes !!! HSR will not work if the files are very big !!! v1.17�s yes !!! ( READ THE NOTE ) !!! ------- Greetz: ------- SAGE � CUP 386 v3.3 is great - but wait for CrackStop v1.0 I will finish it in a week (?) IT KICKS OFF CUP v3.3 ThE RiDDleR � This proggi is mainly intended to show all LamerZ and the so called ELITE LAMERZ (especially YOU) that it is not hard to remove the HackStop envelope. I really laughed when I saw the XHS v1.3 message: Cannot remove HS v1.12cs! code not executed in CPL0 ROSE � Und trotzdem ist HS bisher das beste Antihacking Tool auf dem Markt! In Zukunft, wird es ja hoffentlich nicht mehr so leicht sein, HS zu entfernen, da Du von mir die genaue Funktionsbeschreibung von HSR gesendet bekommst. 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴�