Norton Uninstall

Written by McCodEMaN

Introduction


Greetings and welcome to the noble art of reverse engineering!


This is a very good uninstall utility, but i still think Cleansweep is the best!
The protection...well,have you read the essays about nort.antivir or utilities 3.0 youknow what to do...Rsagent + some dump = Cracked!



Tools required

Numega SoftIce v3.22



Target's URL

http://www.symantec.com



Essay

 



Step1. Run 'Norton Uninstall.exe' and choose  'Buy Now'.
 

Step2. Exit Norton and go into: C:\WINDOWS...Rsagent.ini
          if you tracethrough the code you will find  'mailstat = 0' change it to '1',
          like this: mailstat= 1
          Note: If youhave more then one nortonprog. installad and cracked make sure that
                  all mailstat =1.
                  save and exit rsagent.ini.

 
 

Step3. Run Norton again and choose 'Buy Now' now you should be ableto see the unlocking
          window!
          How did thathappen?
          Well, when wechanged  mailstat from 0 to 1 we faked sending the reg.form!
          0= No onlineregistration has been made, [buy Now]= display registration form.
          1= Online registrationhas been made and is ok, display unlocking window!
 
          Ok, start softice(ctrl + d) and place a bp on: bpx getdlgitemtexta
 

Step4. Press 'F5' to return to the unlocking-window and type:

            McCodEMaN
           TRES2000
           1234567

            thenpress [OK].
 

Step5. Click on 'F11'.
 

Step6. Trace down with 'F10' until you see...........

                :1001293F                51                PUSH    ECX <=Saves valid serial!
 

Step7. Type d ecx and press on [enter]
 

Step8. Now should you be able to see the valid serial in the prot- window!
 
 

Step9. Type bc * and [Enter] to remove all bp`s.

Final Notes



When ever there is a door,
there is an entrance.
And behind an entrance can no secret hide,
when a cracker takes his knowledge for a ride



ObDuh 

The information in this essay is for educational purpose only!
You are only allow tocrack, reverse engineer, modify code and debugg programs that you legaly bought andthen for personal use only!!
To ignore this warning is a criminell act and can result in lawful actions!

So please note!
I take noresponebility for how you use the information in this essay, i take NO responebilityfor what might happen to you or your computer! You use this information on your own risk!!

What i mean is: Please buy the software!





BACK




Essay written by McCodEMaN ŠTRES2000. All Rights Reserved.

ump (d ecx) =>Valid unlocking code!

Step10. Type: bc* to delete all breakpoints.



OK! that`s it!

Final Notes



When ever there is a door,
there is an entrance.
And behind an entrance can no secret hide,
when a cracker takes his knowledge for a ride



ObDuh 

The information in this essay is for educational purpose only!
You are only allow tocrack, reverse engineer, modify code and debugg programs that you legaly bought andthen for personal use only!!
To ignore this warning is a criminell act and can result in lawful actions!

So please note!
I take noresponebility for how you use the information in this essay, i take NO responebilityfor what might happen to you or your computer! You use this information on your own risk!!

What i mean is: Please buy the software!





BACK




Essay written by McCodEMaN ŠTRES2000. All Rights Reserved.