Ticket #2008 (closed defect: obsolete)

Opened 10 years ago

Last modified 3 years ago

tElock unpacker reports ''processor misbehavior''

Reported by: xexe Owned by:
Priority: major Component: VMM
Version: VirtualBox 1.6.4 Keywords:
Cc: Guest type: Windows
Host type: other

Description (last modified by frank) (diff)

I was analyzing some software on (GUEST)Windows XP SP3 run on (HOST)Gentoo. This software was protected with tElock. It is a PE-File Encryptor/Compressor tool that was designed to process most .exe, .ocx and .dll files. It compresses and encrypts those file types while leaving them executable and protects against patching and disassembling. In VirtualBox environment packed application is unable to unpack its self because of processor VBox processor missbehaviour. During the unpacking routine it checks the unpacked data and prints CRC error. (rightfully)


  • tElock 0.98

Software using this packer:

  • many malwares
  • AutoPatcher < 5.6 (exclude this and newer version)
  • or better whatever you pack with telock

Virtualization doensn't affect the result. It's not caused by fault file copy.

I found this problem reported on more Windows and VBox versions.

Change History

comment:1 Changed 10 years ago by frank

  • Summary changed from vbox "processor" missbehaviour to tElock unpacker reports ''processor misbehavior''

comment:2 Changed 10 years ago by frank

  • Component changed from other to VMM
  • Guest type changed from other to Windows

comment:3 Changed 10 years ago by sandervl73

Could be a duplicate of #477.

comment:4 Changed 9 years ago by blazer

Still a problem with VirtualBox 3.0.6

Apparently Systat (a windows statistical package) uses tElock for some of its routines (e.g. reading excel files, probably a commercial utility). A CRC error occurs when this is done in VirtualBox.

See thread in forums:

comment:5 Changed 3 years ago by frank

  • Status changed from new to closed
  • Resolution set to obsolete
  • Description modified (diff)
Note: See TracTickets for help on using tickets.
ContactPrivacy policyTerms of Use