how to compress or hide or protect exe/dll resource using delphi

| Сообщение посчитали полезным:

Use compressor or protector or don't use resources

Даёш кириллицу в массы!!!

| Сообщение посчитали полезным:

There is some trick anti newbies
check out: Small CD-Writer and you lay undestand what i mean
http://www.avtlab.ru/scdwriter.htm http://www.avtlab.ru/scdwriter.htm

| Сообщение посчитали полезным:

there's a lot of sources on the net.
Use google.

| Сообщение посчитали полезным:

I already did but founf nothing.. i need function or sample application using delphi.

| Сообщение посчитали полезным:

Hm, there was a packer... AHTeam packer with public sources.
Also there is a clone of AHTeam Pack with the same sources but different name.

| Сообщение посчитали полезным:

I have (PolyBox1.3, GHF, PEEncrypt_v1.0) packers with source code but when i use them
The protected file detected by Norton antivirus and another anti viruses as (infected file).
And they delete it.

| Сообщение посчитали полезным:

I packed file with GHF then PolyBox1.3 then PEEncrypt_v1.0 and the RESULT:

A-Squared Found nothing
AntiVir Found TR/Crypt.Morphine.Gen
ArcaVir Found Heur.W32
Avast Found Win32:Delf-GAM
AVG Antivirus Found unknown virus .MPH (probable variant)
BitDefender Found nothing
ClamAV Found Trojan.Packed-86
CPsecure Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found W32/NewThreat!Morphine
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found W32/Suspicious_N.gen
Panda Antivirus Found nothing
Rising Antivirus Found nothing
Sophos Antivirus Found Mal/EncPk-AM
VirusBuster Found nothing
VBA32 Found Backdoor.XiaoBird.76 (paranoid heuristics) (probable variant)

| Сообщение посчитали полезным:

Are you expected something else?

-----
Security through obscurity is just an illusion

| Сообщение посчитали полезным:

So then what’s for these packers are?

| Сообщение посчитали полезным:

As you can see they are used for packing malware. So because files packed by them are flagged as malware such packers outdated and need some customization.

-----
Security through obscurity is just an illusion

| Сообщение посчитали полезным:

need some customization
How to do that? can you help Please?!!!

| Сообщение посчитали полезным:

abatu

Use ASPack, UPX or PECompact.

aspack.com
upx.sourceforge.net

or you have your sources of PolyBox - modify them to be not detected by AV's (but I really doubt that you can do that).

-----
Security through obscurity is just an illusion

| Сообщение посчитали полезным:

but I really doubt that you can do that
HHHH.....sure
If I could I would !!!!!!!

| Сообщение посчитали полезным:

abatu, use any packer example: AsPAck,
code small app to encrypt AsPAck loader
Voila!

| Сообщение посчитали полезным:

abatu
Upx comes with sources, you can create scrambler.

-----
Security through obscurity is just an illusion

| Сообщение посчитали полезным:

I know but source not written in Delphi !!!!

| Сообщение посчитали полезным:

Странно, у меня дельфи сам по дефолту пакует файл.. Да ещё и с солидным уровнем компрессии.. Тонкостей я про эту упаковку незнаю никаких..

Интересно, как автор поста здесь вообще зарегистрировался... o_O

| Сообщение посчитали полезным:

Troll
If you don’t know what is all about keep out….

| Сообщение посчитали полезным:

Abatu, why don't you use a normal packers?
I dunno... use Upack or tELock. They are pretty good.

| Сообщение посчитали полезным:

Grim Fandango
You are absolutely right but I write program to compress Executable and I did, now I want to protect
Compressed Executable source…..
In another words I want to compress and protect Executable by Delphi not the main program which I can protect by TElock or Themedia…etc

| Сообщение посчитали полезным:

abatu
Use some sources of simple protectors.. Read the tutors! I saw the sources of simple protector (Delphi) but i don't remember where.. =)

| Сообщение посчитали полезным:

kaiZer
Use some sources of simple protectors
I have (PolyBox1.3, GHF, PEEncrypt_v1.0) packers with source code but when i use them
The protected file detected by Norton antivirus and another anti viruses as (infected file).
And they delete it.
If you can remember where to find anther source please tell me

| Сообщение посчитали полезным:

Bbrrr... i still don't get it.
Why do you need the sources?

Use DotFix.

OR try to find these (WITH src):

exefog(delphi src)
def(asm src)
rlpack (asm src)
pex (asm src)
depack (delphi src)
fileprotection (delphi src)
PoPa (delphi src)

bbr, i think it's enought. =)

| Сообщение посчитали полезным:

Grim Fandango writes:
PoPa (delphi src)
what's that PoPa or Packman ?

| Сообщение посчитали полезным:

It's some kind of aplib packer.
I dunno the author. v0.01

| Сообщение посчитали полезным:

aha, you mean this:
PoPa - Packer on Pascal

| Сообщение посчитали полезным:

Could Be...

| Сообщение посчитали полезным: