"Turning shared software back in time"
Currently, many stream-based Shared Software have a validity period,
After this period, the software will no longer be used,
This makes it difficult for users to work conveniently,
This time I want to tell you a way to avoid disassembly software,
It does not even track the operation of the target software at all. As long as it leaves a "footprint" behind it, you can break through the limit on the number of times shared software is used.
Generally, when the software is first installed or run,
It uses the current date and time as the benchmark,
Recorded as the start of the trial period
How can we know where the sharing software usage records are?
You can use Regshot.
After running the Regshot program, its simple interface will appear.
Select "plain TXT" to save the Registry comparison result as a TXT file,
Click "lstshot" and select "shot" from the pop-up menu"
Wait until Regshot completes the snapshot before running the shared software.
When the software is fully loaded, return to regshot immediately and press the "2st shot" button,
Then select "shop". After the Registry snapshot is complete, press the "compare" button,
You can see the changes made in the Registry during software running.
The modified key value is the maximum number of times the software is used. The result is as follows:
[HKEY_LOCAL_MACHINRsoftwareabc (software name) infomation]
"LicemseNumber" = "X" [HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversion]
"ProgrameID" = "X"
Here, "X" is the number of times you have used the software,
How about it? We found it.
Change "X" to 0, and then the maximum number of times can be used,
Sometimes some software stores time in the Registry in encrypted form, so the monitored data contains a strange string of characters,
Although I don't know its specific encryption algorithm, the simplest method is to delete it to solve the problem!
OK. The lecture is finished.
------------------------------------------------------
China Network Security Association main site: http://chinansa.com
Forum: http://bbs.chinansa.com
David QQ: 93917663