Packers/Crypters/Protectors

Packers

NeoLite 2.0 (shareware) by NeoWorx Inc. Updated: 04.IV.1999. Files: NeoLite. Nag remover (21K). Unpacker. News: - Improved GUI with the same familiar simplicity of operation and support for the new compression options. CLI-only interface (NeoLiteCli.exe) - NeoDataSim(tm) allows you to compress applications which were previously impossible to compress. You can now compress programs with absolute address references into the data or code segments. - Reversible Compression. - Many optimizations were made in the extractor code to reduce its size thus increasing the overall compression of the executable files. - Changes in the executable loader were made to handle executable files which call exported functions before the executable loader is initialized. - A -j (jam/force) option was added to both versions of NeoLite to allow the user to force the executable file to be compressed, even if the executable file size increases. - Added Shell extensions for .EXE and .DLL files. NeoLite compresses Windows 32-bit .EXE files and DLLs. It compresses them in such a manner that they are still executed normally. No additional software is required to run the compressed software, it is completely transparent. There is no speed penalty incurred.

Shrinker 3.4 (demo) by Blinkinc. Updated: 03.II.1999. Files: Shrinker. UCF's Nag remover (144K). Unpackers. Shrinker will take almost ANY 16 or 32 bit Windows .EXE, .DLL, .DPL, .DRV or .OCX file or ANY real mode DOS .EXE file and transparently compress it. Compression ratios will vary from file to file, but many files will compress by 70% or more.

PKLite32 1.1 (shareware) by PKWare. Updated: 9.VI.1999. Files: PKLite32. Unpacker. PKLITE32 may be used to reduce the size of any Windows 32 bit Portable Executable (i.e. PE) "Image" file. The PE file format is based on the Common Object File Format (i.e. COFF) and is the primary Windows 32-bit executable file format. In addition to executable files, PKLITE32 will compress Dynamic Link Library (i.e. .DLL) files, OLE Custom Control (i.e. .OCX) files, or any PE based file type.

AS-Pack 1.08.04 (shareware) by Solodovnikov Alexey. Updated: 06.XI.1999. Files: AS-Pack. ASPatch 1.2 (18K) - patcher for ASPacked files by Chafe. Unpackers. News: - Improved compression speed (up to 2 times !) - A problem with MSOffice 2000 executable fixed - Improved error messages in decompression code - Context help added - Resource align bug fixed - File name history added - New languages added: Portuguese, Slovak ASPack is an advanced Win32 executable file compressor, capable of reducing the file size of 32-bit Windows programs by as much as 70%. (ASPack's compression ratio improves upon the industry-standrad zip file format by as much as 10-20%.) ASPack makes Windows 95/98/NT programs and libraries smaller, and decrease load times across networks, and download times from the internet; it also protects programs against reverse engineering by non-professional hackers. Programs compressed with ASPack are self-contained and run exactly as before, with no runtime performance penalties.

Petite 2.1 (shareware) by Ian Luck. Updated: 15.V.1999. Files: Petite. Unpacker. News: - A few improvements/fixes. Petite is a Windows 9x/NT executable (EXE/DLL/etc...) compressor. It allows compression of the whole executable - code, data and resources. Petite automatically decides which parts of the executable can be compressed and which parts need to be left as they are. The compressed output executable can be run as if it was the original uncompressed file.

WWPack 32 1.2 beta 2 by Webmedia. Updated: 17.XI.1999. Files: WWPack 32. Unpacker. News: - relocation table stripper - resources compressor - command line parameters - new SETUP window design WWPack32 will save you disk space and it will also protect your programs from cracking. WWPack32 will reduce traffic over local computer networks (compressed files run faster on the net)!

PE Compact v1.104 by Jeremy Collake. Updated: 11.XII.1999. Files: PE Compact. Unpacker. News: - Improved compression ratio. - Added DLL and OCX shell extensions. - Added /R[-] command line switch to register/unregister shell extensions. - Fixed bug in 'Save Configuration' menu option. PECompact is a utility that compresses Windows 9x/NT4/w2k executables, while leaving them 100% functional. PECompact compresses the code, data, selected resources, import/export table of a win32 executable and optimizes its structure. It then installs a symbiont which decompresses the executable at run-time without any noticeable speed difference. Load time can actually be improved in some cases because less data has to be retrieved from the disk.

UPX 0.94 by Laszlo & Markus. Updated: 08.XII.1999. Files: Win32 version. Dos version. Linux version. UPXGUI 0.7b (85K) by Magic Mike. Unpacker. News: - win32/pe: the stub now calls ExitProcess in case of import errors - under DOS and Windows, the environment variable UPX now accepts a '#' as replacement for '=' because of a commmand.com limitation UPX is a versatile executable packer with the following features: - excellent compression ratio: compresses better than zip/gzip, use UPX to decrease the size of your distribution! - very fast decompression: about 10 MB/sec on a P133 - no memory overhead for your compressed executables - safe: you can list, test and unpack your executables. Also, a checksum of both the compressed and uncompressed file is maintained internally. - universal: UPX can pack a number of executable formats: dos/exe, dos/sys, dos/com, djgpp2/coff, watcom/le (supporting DOS4G, PMODE/W, DOS32a and CauseWay), win32/pe, rtm32/pe, tmt/adam. - portable: UPX is written in portable endian-neutral C++ (the official version is compiled with djgpp, but we are indeed partly developing it under Linux) - extensible: because of the class layout it's very easy to add new executable types or new compression algorithms - free: the final version will be distributed with full source code under the GNU General Public License (GPL)

PE-PaCK v1.0 by ANAKiN. Updated: 12.I.1999. Files: PE-PaCK (15K). Unpacker. I have compared PEPACK to all the other PE packers I know off: PETITE, PECRYPT, WWPACK32, SHRINKER, STNPEE... And I can proudly say, that PEPACK beats up all of them.

PE Diminisher v0.1 (11K) by tERAPHY. Updated: 11.IX.1999. PE Diminisher is a simple PE packer. Just run it, open the file you want to pack, and select Encrypt File! This software was written in learning purpose only. So, don't tell me it sucks, cause I already know ;) Anyway, the GUI is pretty nice :)

Crypters/Protectors

PC Guard for Win32 v3.0 (shareware) by Blagoje Ceklic. Updated: 28.XI.1999. PC Guard for Win32 is a professional software protection and licensing system. With PC Guard for Win32 you can easily protect Windows 95/98/NT 32bit EXE/DLL applications from illegal distribution and reverse engineering . Even more, you don't need any source code editing or programming experience for this. Everything is fully automatic! With PC Guard for Win32 you can protect unlimited number of your programs with no additional investments. You also don't need any additional hardware (hardware keys, dongles etc.) for proper execution of protected programs. PC Guard for Win32 is based only on complex software protection techniques and PC hardware details.

Armadillo 1.76 (shareware) by Silicon Realms Toolworks. Updated: 22.XI.1999. Files: Armadillo. Deprotector. Armadillo is a powerful software protection system. It wraps around your program like an armored shell, defending your work from pirates and program crackers with state-of-the-art encryption, data compression, and other security features. It allows you to design and add a complete software protection and registration-key system to your existing programs in five minutes or less, with no changes to your program's code! And it works with any language that produces a 32-bit Windows EXE file.

PECRYPT32 1.02 by random, killa and acpizer. Updated: 12.I.1999. Files: PECRYPT32 (98K). Decrypter. - Code, Data, Resource, Relocation, Import Encryption. - Code, Data, Resource, Relocation, Import Compression. - Enhanced Relocation Loader. - Anti-Debugging compatible with WINDOWS NT , WINDOWS 95 and WINDOWS 98. - Dynamic Link Library support (DLL files). - Routines against memory patches / loaders. - Anti-API-Breakpoint routines. - Detection of nude supermodels sitting in front of the monitor. - A (hopefully) working Import-Loader. - Anti-Unpacking procedures. - Lame Heuristic Virus File Check.

CodeCrypt 0.14 by defiler. Updated: 25.XI.1999. Files: CodeCrypt (7K). Decrypters. News: - some bug fixes - Code Encryption changed - improved antidebugging Features: - anti-debugging code. - anti-tracer code (procdump etc). - simple but effective anti-frogsice code. - encryption of the decrypter. - random number encryption system. - multiple checksum encryption. - bogus opcodes, making it harder to reverse the decrypter.

PCPEC "alpha - preview" by The+Q, Plushmm & MrNop. Updated: 12.I.1999. Files: PCPEC (100K). Decrypter. This release of PCPEC may be considered an alpha or "preview" of what is to come from the Phrozen Crew. This project was an output of our interest in the Win32 PE header structure. As such, we used this opportunity to do some research and perform some coding...and viola! PCPEC is born ;-)

PE-SHiELD v0.2b2 (39K) by ANAKiN [DaVinci]. Updated: 23.I.1999. News: v0.2b is like a totally new crypter: It is no longer coded in C++ but in assembly. It is no longer just a simple crypter. It now has grown up to a real protector. - renaming of sections - removed MtE - encryption of import section - runtime protection against BPX - heuristic virus check - PE Header Killer - better compression of fixup table (DELTA + RLE) - Anti PROCDUMP-TRACE code - protection against PROCDUMP-DUMP - tricks to hinder MANUAL dumping - protection against PROCDUMP-IMPORT rebuilder - Winice and NT-Ice detection - maybe I forgot something PE-SHiELD is a program, which encrypts 32-bit Windows EXE files, leaving them still executable. In this version it can only be called PE-CrYPTeR, because the decrypter does only contain a few antidebugging tricks.

PELOCKnt v2.04 by :MARQUIS:DE:SOIRÐE: Updated: 12.I.1999. Files: PELOCKnt (105K). Unlocker. - Protect any Windows 32-bit Portable EXE & DLL file, leaving it executable. - Full support for Windows NT4, NT5, W95, W98 and SoftIce. - Crypting EXE & DLL files up to 64 MB in seconds. - 32-bit Virus protection. - Protecting all PE.objects against reverse engineering or patching. - Integrated ImportTableLoader support imports by name and ordinal. - Integrated RelocationTableLoader supports any imagebase. - Up to 50% faster 32-bit crypting compared to the former version. - BPX protection. - Generic API.Hook protection. - Generic File.Tracer protection. - Support for EXE files with Export Directory Table. - TLS (Thread Local Storage) auto handling. - Hiding .object names. - DAR DLL.Auto.Recognition - APC Anti.Procdump.Code - User.options to protect any crypted file against SICE and NTICE. - Generic 32-bit CRC selfprotection against viruses, file manipulations, or decrypting errors. If the CRC32 check fails PELOCKnt will display a window and than close the protected program to prevent a datalost. A General Protection Fault INSIDE PELOCKnt is almost impossible.

PE-PROTECT 0.9 Beta by Christoph Gabler. Updated: 12.I.1999. Files: PE-PROTECT (28K). Unprotector. - Protected files run fast - Many internal random encryptions - Object encryption layers are inbuild-antidebugged - Entrypoint faking - Multiple CRC checking - Simple Code Caving - Damn unreliable in protecting ;)

PE-Encrypter 2.0 (61K) by Stone. Updated: 12.I.1999. - Compression - Dll support - Import support - Relocation support - Full ASM sourcecode - Build on aPlib (c) Jibz

VGCrypt 0.75 beta (16K) by Virogen. Updated: 26.I.1999. Features: - three types of PE parasticality<g>:   1) install in cave - no physical size increase   2) append to last object   3) create new object - full win95/98/NT compliant - does not add new object unless you want to - stores correct new checksum of PE executable - preserves original file data/time and attributes - prompts u to encrypt again if file already encrypted, you can encrypt a file as many times as you want. Of course, eventually you will run out of available caves and the filesize will start increasing.

Ding Boy's PE-Lock by Ding Boy. Updated: 15.IX.1999. Files: Ding Boy's PE-Lock v.1.2 (431K). Un-locker. A PE crypter with definable - start message. - restrictive runtimes. - restrictive date.