Eset Nod 32 Fix for 3.0? (CONTINUED)

[dartowinoto]

Wao.Thanks To Jofre and Marsu.Thanks for the fix.God Bless You.

[ShEsHy]

tnx marsupilami for making MarsuFix & jofre for keeping us posted about it's development and providing answers to our many questions

[Atreus]

I must say, I was very excited about the new version of Marsupilami's fix, but it seems like he's making things more and more .. separate from NOD32. First, it was just a .reg file that was executed. I liked this best .. it was simple. Then it was the fix.exe run through the scheduler. It was good, but it got blocked by UAC. Now, you've got to have a startup program running all the time, regx32 (or regx64), in order to keep the trial reset? It seems kind of unnecessary I guess. Am I the only one that feels this way. I guess I don't see a reason there can't just be a .reg file still -- is there any good reason for this? I don't personally mind that much, but nowhere in the installer does it tell you "Hey, we're going to run another process on your computer called regx32!"

Additionally, with a fishy name and no description in the task manager, it's hard to know that it's not malware. I mean, it's housed in c:\windows\system32\. It would be very easy to think it is malware even if you know you installed the FiX.

Basically, is there any reason besides UAC blocking it that I shouldn't continue using the old MarsuFix? are there any actual -improvements-? Thus far I've had nothing but praise for marsu, but this seems like a step backwards. I prefer it to Box's methods due to the simplicity of implementation, but I don't want my friends and family to think they've got malware and delete the FiX. Also, that wasn't a dig at box -- his method works perfectly, it's just a bit too in-depth for most of the people I give this to.

Sorry for the wall of text.

[dennis123123]

You seem to have made some excellent points, but I think the reason it has to be separate is because ESET started to realise its scheduler was being abused (to crack itself :)) and it got removed.

EDIT: and btw, its just an autoit3 file, decompile it, add a description, and recompile it if it makes you feel better :P

[ugatme]

Anyone know if there's any difference between 2.5b4 and the 2.5 final?

[kaspersky]

dennis123123 - how do you decompile it?

I send you PM.

I have a really good improvements to Box AND marsupilami fixes.

(remove trial watermarks and super eg++++)

[Anteus]

You seem to have made some excellent points, but I think the reason it has to be separate is because ESET started to realise its scheduler was being abused (to crack itself :)) and it got removed.

EDIT: and btw, its just an autoit3 file, decompile it, add a description, and recompile it if it makes you feel better :P

Tried to decompile it with EXE2AU3, didn't work so I'm adding it to my startup script to kill it after some time.

TASKKILL /F /IM regx32.exe

[Bushdoctor]

Just installed ESS 3.0.669.0 32-bit and Marsufix 2.5 on XP, is it possible to remove regx32.exe from running all the time and instead add it to nod32 schedule to run when I want it to run?

[dennis123123]

(Technical) Information about Marsufix v2.5

...and how to silently install it

Its a password protected compile. just get "myAutToExe v2.3", it can decompile the encrypted autoit files.

http://myauttoexe.angelfire.com/index2.html

The au3 file goes (something like) this:

OPT("OnExitFunc", "close")Opt("TrayAutoPause", 0)Opt("TrayIconHide", 1)$I = 0While $I <= 10	RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info", "packagetag", "REG_DWORD", "0")	$I = $I + 0	Sleep(900000)WEnd
Func CLOSE()	RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info", "packagetag", "REG_DWORD", "0")EndFunc

I finished my silent installer for ESS+marsufix v2.5, runs completely unattended now.

WinRAR SFX Comment:

Setup=msiexec.exe /i ESS30669.msi /qbSetup=cmd /c copy marsufix25.exe %systemroot%\*.*Setup=regedit /s marsufix25.regSetup=cmd /c start marsufix25.exeTempModeSilent=1Overwrite=1

marsufix25.exe is regx32.exe renamed for being more clear to understand what program it is.

Also in the RAR i put my cfg.xml exported so my settings stay the same.

marsufix25.reg:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Profiles\@My profile]"SelectedServer"="http://u35.eset.com/eset_eval""MirrorFolder"="""Username"="""Password"=hex:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"ESET-TrialReset"="C:\\WINDOWS\\marsufix25.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info]"EditionName"="Marsufix v2.5""PackageTag"=dword:00000000
[HKEY_CURRENT_USER\Software\ESET\ESET Security\CurrentVersion\Client]"ShowSplash"=dword:00000000"PageMode"=dword:00000001

Throw it all together, and double click and it all installs without the user doing anything :) Its still working on my pc, ive fiddled the clock a few years forward, and after a reboot its still fine!

Contents of file exe:

Hope someone can benefit from this info, Thanks Marsu again for v2.5 and all your eset fixes :P

NOTE: BEFORE ANYONE PMs ME, I WILL NOT SEND YOU THIS EXE, MAKE IT YOURSELF!

[maxima2k53]

has anybody had a problem with smart security 669 that if u have a laptop...ur laptop tends to lose connection with the router a lot?

[sharath]

is it just with me or nodlogin has stopped working, says cant connect to database

actually been saying that for the past few days.

[Anteus]

ESS 3.0669Business with MarsuFix2.5 Silent/Unattended x32 incl settings

Thanks to ESET for making this nice security suit, Marsupliami for the fix, jofre for updates about 'em and dennis123123 for the silent and extra fix! I just put it together :P

Wrong Wind Wish DONKEYmedia SPACEfireDAMN Comercial / ?y3ivmdeunyx

:) Purple Wing :

nsane_marsufix

EDIT: changed to WITH

-----

Wasn't there a server a server problem with Nodlogin. Why do you want that instead of MarsuFix?

-----

Just wondering but isn't this enough and simply put it on autostart or so?

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Profiles\@My profile]
"SelectedServer"="http://u35.eset.com/eset_eval"

[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info]
"PackageTag"=dword:00000000

[dennis123123]

...

Just wondering but isn't this enough and simply put it on autostart or so?

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000400\Profiles\@My profile]

"SelectedServer"="http://u35.eset.com/eset_eval"

[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info]

"PackageTag"=dword:00000000

[Anteus]

That will work, and the packagetag fix is the way all eset trial cracks work... but every update ESS changes the key back to what it should be, so if your pc is left on for a while, i guess it could expire? The box manual fix is similar, but involves changing the permissions of the key so ESS cant change it back :sneaky:

I see but how can one make that in a .reg file, change permisson of a key? Would be nice with a link to download the box fix or even the source code :).

I updated ESS and the value didn't change :P ?

[dennis123123]

I see but how can one make that in a .reg file, change permisson of a key? Would be nice with a link to download the box fix or even the source code :P.

I updated ESS and the value didn't change :unsure: ?

[jofre]

Hi,Everyone !

This Marsu.Fix 2.5 was done because some people using x64 OS had problems with v.2.3 and now it seems everything is working well.

If you disable file Regx32.exe at msconfig/Startup then Fix does not work.

Those using Marsu.Fix2.5 beta4, just have to uninstall this fix at Add-Remove Programs and install Fix 2.5 Final, or some other patch or fix you prefer.

If you prefer BoxFix then use it. I have both but in separately backups.

Keep all Fixes you can get . Which one will work on future versions we d`ont know. So better be prepared :P !

-------------------------------------

Cheers

Jofre

[Anteus]

Thanks I understands it a little more now, but why do you have to delete the Scanner Version value data in the box fix, MarsuFix doens't touch that one?

[jofre]

Thanks I understands it a little more now, but why do you have to delete the Scanner Version value data in the box fix, MarsuFix doens't touch that one?

--------------------------------------

I don`t delete a thing. I use them exactly the way they were done.I am just an user...with both working fine .

Only Marsupilami can answer to y / question,I think...

[Anteus]

Are you sure it works if you don't have the MarsuFix then?

[jofre]

Are you sure it works if you don't have the MarsuFix then?

---------------------------

Don`t understand your question.

It works ?

Both, Box and Marsu are OK but I have them on separate System Backups done each one using Ghost 11.

[maxima2k53]

hey guys marsufix is already counting down to 29 days...it doesnt reset when u restart...is that normal?

[jofre]

hey guys marsufix is already counting down to 29 days...it doesnt reset when u restart...is that normal?

--------------------------

It`s OK here! :sun: I have it installed sense 12 days ago .

That`s your problem, not MarsuFix 2.5 problem... :P

Showing 31 days right now and sometimes 30 days left. (WinXP Pro SP3-32bits)... :unsure:

[maxima2k53]

hey guys marsufix is already counting down to 29 days...it doesnt reset when u restart...is that normal?

--------------------------

It`s OK here! :unsure: I have it installed sense 12 days ago .

That`s your problem, not MarsuFix 2.5 problem... :sun:

Showing 31 days right now and sometimes 30 days left. (WinXP Pro SP3-32bits)... :P

but is it supposed to reset when u restart or only when it updates? thats all im asking

[dennis123123]

Dude, you have over 300 posts on this forum, and cant read a few posts up? I posted an in depth guide on how the fix works, including the source code!

It resets when you reboot, and every 900 seconds.

[jofre]

Time to :P .....

---------------------------------