VirtualBox

Opened 16 years ago

Closed 9 years ago

#2008 closed defect (obsolete)

tElock unpacker reports ''processor misbehavior''

Reported by: xexe Owned by:
Component: VMM Version: VirtualBox 1.6.4
Keywords: Cc:
Guest type: Windows Host type: other

Description (last modified by Frank Mehnert)

I was analyzing some software on (GUEST)Windows XP SP3 run on (HOST)Gentoo. This software was protected with tElock. It is a PE-File Encryptor/Compressor tool that was designed to process most .exe, .ocx and .dll files. It compresses and encrypts those file types while leaving them executable and protects against patching and disassembling. In VirtualBox environment packed application is unable to unpack its self because of processor VBox processor missbehaviour. During the unpacking routine it checks the unpacked data and prints CRC error. (rightfully)

Packer:

  • tElock 0.98

Software using this packer:

  • many malwares
  • AutoPatcher < 5.6 (exclude this and newer version)
  • or better whatever you pack with telock

Virtualization doensn't affect the result. It's not caused by fault file copy.

I found this problem reported on more Windows and VBox versions.

Change History (5)

comment:1 by Frank Mehnert, 16 years ago

Summary: vbox "processor" missbehaviourtElock unpacker reports ''processor misbehavior''

comment:2 by Frank Mehnert, 16 years ago

Component: otherVMM
Guest type: otherWindows

comment:3 by Sander van Leeuwen, 16 years ago

Could be a duplicate of #477.

comment:4 by blazer, 15 years ago

Still a problem with VirtualBox 3.0.6

Apparently Systat (a windows statistical package) uses tElock for some of its routines (e.g. reading excel files, probably a commercial utility). A CRC error occurs when this is done in VirtualBox.

See thread in forums: http://forums.virtualbox.org/viewtopic.php?f=7&t=8832&start=0

comment:5 by Frank Mehnert, 9 years ago

Description: modified (diff)
Resolution: obsolete
Status: newclosed
Note: See TracTickets for help on using tickets.

© 2023 Oracle
ContactPrivacy policyTerms of Use