Software that recently shells one character processing. I found some problems in the use of EXECryptor.
On Some xp sp3 machines, anti-debug cannot run if checked, but it can run on my notebook.
Xp sp3 in my notebook can run, but it cannot run in win7.
Tested separately after shelling with multiple options. Found:
In my xp sp3:
Virtualization-level: 20-35% can be run, more than 40% cannot run, the phenomenon is that there are processes, cpu usage of about 50%, a few minutes cannot display the interface.
Anti-debug: supports running
Compression: select 1, 2, and 4 for compression. This is recommended.
Others such;
However, the above parameters cannot be run in win7 after shelling. You must remove anti-debug to run the program. None of the anti-debug hooks can be run. Including setting program compatibility.
In addition, the virtualization-level is still the best between 20 and 35%. The main interface cannot be run.
Of course, I guess it may also be related to the many APIs I use.
Version 2.2.6. You cannot select the anti-debug parameter for use by the customer.
Several shells have been tested in the past, all of which are directly killed by the virus or cannot be run at all. It seems that there is time to test some new shell software, which is the most suitable.
The figure below shows my final parameter selection. It can run in xp sp3 and win7 flagship versions.