Web : http://mxb.cjb.net
Contact Me : [email protected] or [email protected]

Main | Index

Norton Anti Virus 2001 - VBOX 4.3

Type : Anti Virus
Protection : VBOX 4.3
Tech : Regedit & File delete

Crack :

Have you ever wondered how VBOX keeps track of your 30 day trial.
VBOX is realy a good protector.But it has its own weak points.

"VSetupT.EXE" is used to make valid LIC files while installing any VBOX 4.3 protected
software.If we are able to delete secret registry key and files ,we can use "VSetupT.EXE"
to extend our trial period to what ever we whish :)

In NAV 2001 - I was unable to find "VSetupT.EXE".It seems that install sheild has packed this
baby ...
So let us do a simple trick.While setup is running ... go and look in to this folder :

"C:\WINDOWS\TEMP\_ISTMP5.DIR\_ISTMP0.DIR\"
Yes ... it is our TEMP folder ... you will get "VSetupT.EXE"
Now quickly copy this file to another place as Setup will delete this file.

Secret Behind VSetupT.EXE :

VSetupT.EXE make four important files in your computer :

C:\os581474.bin
C:\WINDOWS\SYSTEM\ws907958.ocx

C:\WINDOWS\Vbox\Licenses\Norton AntiVirus_7.00.00_7A57.lic
C:\WINDOWS\Vbox\Licenses\Norton AntiVirus_7.00.00_7A57.prf

These files control "30 DAY Trial" :)
I used RegMon to find secret registry keys.
VBOX also creates two secret key in registry :

HKEY_CLASSES_ROOT\CLSID\{4AB0321F-3399-BFA4-9120-16F482736F9E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\{187EA16F-6CDA-4D37-1D07-F156D53AB7EE}

These keys are made on first run .

So my point is that if your trial period is over delete following files :

C:\os581474.bin
C:\WINDOWS\SYSTEM\ws907958.ocx
C:\WINDOWS\Vbox\Licenses\Norton AntiVirus_7.00.00_7A57.lic
C:\WINDOWS\Vbox\Licenses\Norton AntiVirus_7.00.00_7A57.prf

And also use "Regedit.exe" which comes with your windows9x to delete following RegKey:

HKEY_CLASSES_ROOT\CLSID\{4AB0321F-3399-BFA4-9120-16F482736F9E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\{187EA16F-6CDA-4D37-1D07-F156D53AB7EE}

Now last step :

Run the file "VSetupT.exe" to produce a fresh 30 DAY TRIAL copy.Which is found inside :
the Crack File.

NB : I don't know if same registry keys are made by VBOX on all computers.

//======================================================================
//MxB Net
//***********************************
//email : [email protected]
//web : http://mxb.cjb.net
//***********************************
//NAV 2001
//===================================================================
#include <windows.h>
//===================================================================
int WINAPI WinMain(HINSTANCE hInstance,HINSTANCE hPrevInstance,
LPSTR lpCmdLine,int nShowCmd)
{
//===============================================================
char InfoText[] = "MxB - NAV 2001";
long lResult = 0;
HKEY hKey =0;
int i =0;

char windir[MAX_PATH];
char sysdir[MAX_PATH];
bool error = false;
PROCESS_INFORMATION pi;
STARTUPINFO si;
char* cl;
//===============================================================
char firstkey[] = "{4AB0321F-3399-BFA4-9120-16F482736F9E}";
char seckey[] = "{187EA16F-6CDA-4D37-1D07-F156D53AB7EE}";
//===============================================================
//Delete Registry Keys
//===============================================================
//First Key
lResult = RegOpenKey(HKEY_CLASSES_ROOT,"CLSID",&hKey);

if(lResult != ERROR_SUCCESS)
{
MessageBox(NULL,"Unable to open Registry..exiting",InfoText,MB_OK);
return 0;
}
lResult = RegDeleteKey(hKey,firstkey);
if(lResult != ERROR_SUCCESS)
{
MessageBox(NULL,"Unable to deleted First Key ...",InfoText,MB_OK);
error = true;
}

RegCloseKey(hKey);
//================================================================
//Second Key
lResult = RegOpenKey(HKEY_LOCAL_MACHINE,"SOFTWARE\\Classes\\.wav",&hKey);

if(lResult != ERROR_SUCCESS)
{
MessageBox(NULL,"Unable to open Registry..exiting",InfoText,MB_OK);
return 0;
}

lResult = RegDeleteKey(hKey,seckey);
if(lResult != ERROR_SUCCESS)
{
MessageBox(NULL,"Unable to deleted Second Key ...",InfoText,MB_OK);
error = true;
}

RegCloseKey(hKey);

//===============================================================
//Delete Files ...
GetWindowsDirectory(windir,sizeof(windir));
GetSystemDirectory(sysdir,sizeof(sysdir));
strcat(windir,"\\Vbox\\Licenses\\Norton AntiVirus_7.00.00_7A57.lic");
strcat(sysdir,"\\ws907958.ocx");
//===============================================================
if(!DeleteFile(windir))
{
MessageBox(NULL,"Unable to deleted Lic File ...",InfoText,MB_OK);
error = true;
}
//===============================================================
GetWindowsDirectory(windir,sizeof(windir));
strcat(windir,"\\Vbox\\Licenses\\Norton AntiVirus_7.00.00_7A57.prf");

if(!DeleteFile(windir))
{
MessageBox(NULL,"Unable to deleted Prf File ...",InfoText,MB_OK);
error = true;
}
//================================================================
if(!DeleteFile(sysdir))
{
MessageBox(NULL,"Unable to deleted OCX File ...",InfoText,MB_OK);
error = true;
}
//===============================================================
//Delete os528730.bin
GetWindowsDirectory(windir,sizeof(windir));

for(i=0;i < MAX_PATH;i++)
{
if(windir[i] == '\\')
{
windir[i] = '\0';
}
}
strcat(windir,"\\os581474.bin");

if(!DeleteFile(windir))
{
MessageBox(NULL,"Unable to deleted BIN File ...",InfoText,MB_OK);
error = true;
}
//===============================================================
if(error ==false)
{
MessageBox(NULL,"Removed VBOX Files and Registry Keys ...",InfoText,MB_OK);
}

//===============================================================
//Execute VSetupT.exe
ZeroMemory(&si,sizeof(si));
si.cb = sizeof(si);
cl = GetCommandLine();

if (!CreateProcess("VSetupT.exe",cl, NULL, NULL,FALSE,
NORMAL_PRIORITY_CLASS,NULL, NULL,&si, &pi))
{
MessageBox(NULL,"Unable to load \"VSetupT.exe\" ...",InfoText,MB_OK);
error = true;
}else
{
MessageBox(NULL,"Loaded \"VSetupT.exe\" ...",InfoText,MB_OK);
}
//===============================================================

return 0;

}
//====================================================================================