ESET v4 Fixes

[jofre]

Hi

I please a fix box4ever 4.25A

sorry, my English is poor B)

---------------------------

Latest : Eset4Box4ever (V.4.30A)

Download

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Mediafire.com

Sharecode »»»»» /download.php?zlnnylmyym5

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Enjoy !

Jofre

[Hoca]

Thanks for the link jofre B)

[ziomal]

thanks, than I need a version 4.25A, please

Edit: crack updater.dll is working B) good job

[shought]

@shought

What does box's fix have to do before it hits the frontpage? :s I've tested the mara and box fixes and box's latest fixes are easily as sound as mara's!

Nothing, it's already been listed for addition. It might take some time, but it should be up within 15 minutes.

[chrisTM]

Hello.

What are the vulnerabilities with UAC on? I'm curious....

chrisTM out.

shought : Look at it like this: if the mara-fix is able to bypass Self-defense, then so will any custom written virus to take advantage of that be. As I have told many times before the Self-defense function in fact is useless. For if ESET would need Self-defense that would mean a virus already infected your computer, which is first of all highly unlikely and second if it did infect your computer, you're too late anyway, with, or without Self-defense.

(@Hoca, sorry about reply hiijacking :lol:)

To quote myself

...IF you have installed the mara fix AND turned UAC off THEN a new virus/malware (still unknown to NOD32) COULD install a service program without you knowing that tampers with ESET files or registry entries. Without the mara fix installed this would be 100% impossible.

I know i'm a bad worded noob in here :lmao: BUT the point is ;

There are two parts of the mara fix 1) An installer program 2) a trial reset program. The mara installer can only install the trial reset service program and bypass Self-Defense because it tells you to MANUALLY disable it. After you MANUALLY disable Self-Defense in order to install the mara fix, the mara installer then makes registry entries that delays the loading of the ESET main driver. This creates a small security hole in the protection at boot start where the drivers/service programs are loaded. A hole is a hole (not talking about sex :) ). It dosn't matter if you MANUALLY enable the Self-defense again or let the mara installer do it. To exploit this hole is not a matter of timing or seconds. Its about installing a service program that comes before the ESET driver ehdrv. Checkout HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services in the registry. The whole idea behind the mara fix is to open this hole. The Box fix uses a different approach ; it changes the permissions for a ESET registry entry, preventing NOD32 itself from changing important trial settings. Right :) ?

I think the Self-Defense in ESET is a good idea and usefull and it works. An unknown virus/malware can't change the ESET driver/program registry entries.

From the ESET webpage "Self Defense — ESET NOD32 Antivirus has built-in technology to prevent malicious software from corrupting or disabling it, so you can rest assured your system is always protected".

Ok, I'll stop now :) I'm not looking for a fight :)

[brianwarming]

@brianwarming

I've just tried to download your ESET4 Box4EVER Addon.exe file, but mediafire reports " 0 items found to display! "

Have you removed the file?

Sorry about the late reply (been away).

No files ?. Strange !, just tried downloading it myself from

Windows Vista SP1, Windows 7, Windows 2003, Windows XP SP3 with Firefox 3.0.8 and Internet Explorer 7/8

works fine.

Try again :

mediafire.com

sharecode : /?sharekey=7f6372adbf5eb864d1014a7a667fa2b4e04e75f6e8ebb871

or the more direct link :

mediafire.com

sharecode : /?tnhwyjqnbdm

BTW just a tip : in Windows Vista and Windows 7 you can select how your icons should be shown (Always, Never, Hide when inactive). This way the "ESET4 Box4EVER Addon" icon can always be visible. (Hmm I need a new cool name for my addon :lol: )

Update : Sorry didn't see the Jofre post.

[harpua]

How about "Update Info Icon" ?

[brianwarming]

@brianwarming,

Would you be kind to teach me how you create the add-on?

Sure, what do you want to know ?

[KotaXor]

@jofre:

The fix you mentioned uses a patched updater.dll

So the fix works... after all :lol:

I didn't bother trying since I'm waiting for the next stable release before updating to v4.

I just hope it gets updated... when the time comes :lmao:

So, the updater.dll method work...is it trial or full version of Nod32?

Going to try it out soon.

[harpua]

Btw, about Eset's version 4, imo, it makes the entire 3.0 line seem like betas. It just is much more refined, has added features and just plain works better. Personally, I wouldn't recommend waiting for another version to upgrade. The current v.4 is, imo, substantially better in every respect than any of the v 3 line.

[Bizarre™]

@harpua:

I still am going to wait for the next stable release :lol:

[harpua]

@Bizarre

Up to you of course. I'm just saying that the current release (not talking about fixes but the app itself) is more stable (at least on my system) than any of the v3 releases and I used them all. :lol: To me it seems like all the v 3's were betas and this is the first final. But that just my opinion.

[george88boom]

Hello i got a problem.. I got in my pc NOD32 V3.0.3.14 something like this and i saw in the internet NOD32 V4... i downloaded it and replace it on my NOD32 V3.0.3.25 and then i was trying to find a crack about this... i found mara- fixv1.1 ,. and i install it...works good i did all the change in self defence i was uncheck it.. anyway now when i start my pc i get an error and telling me how to fix mara fixv1.1 like to go to self defense and uncheck and bla bla.... its sure that is error... and i dont know how to make it stop see that when i starting my Pc...every time i get this error... i try in c:windows:temp:appdata to delete it because i found it there (mara......) i deleted it and again the same and the same.... do u know any solution about this problem...by the way i want to delete eset nod32 and all of this from my pc and put onother antivirus from Cd... so how can i stop this error...?!

p.s i tried and from msconfig in startup items.,.

btw i delete eset nod32 and all of its componets from my pc,.i uninstall it..

[Zeus_Hunt]

MiNODLogin 3.2.5

The new features are:

* Works with the self-version 4 ESET activated.

* Does not require Administrator privileges (or elevation in Vista).

* Also available for 64-bits.

The three improvements are because I have updated the method by which the license is inserted, now uses the same console window antivirus, simulating the user when they get a license manually. For this reason, you may see "flash" a window.

Changes in version 3.0.0.2:

* Correction of the bug: sometimes, the insertion fails and the window is open if licensing MiNODLogin runs during system startup.

Changes in version 3.0.1.0:

* Removing fallen 2 servers.

* Added 1 new server.

* Added language: English / English.

Changes in version 3.0.1.2:

* Correction of the bug: if you are using ESET SmartSecurity (ESS), it may happen that you install a license that is valid only for ESET Antivirus (EAV), leaving the ESS non-functional until you insert a new license.

Changes in version 3.0.2.1:

* Add 3 new servers, Waldemar thank you!

* Are ignored / discarded licenses TRIAL type.

Changes in version 3.0.2.3:

* Added quiet mode, for those who bother notification emails.

Changes in version 3.1.0.1:

* Restatement of the program structure, no changes are visible to the user.

Changes in version 3.1.4.2:

* Added module test servers. Minodlogin.exe-test.

Changes in version 3.2.0.1:

* It allows you to select the language for installation.

* Added the option Go to the official site to enable users to update the program.

Changes in version 3.2.4.9:

* Fixed some flaws in the translation of the installation.

Changes in version 3.2.5.0:

* Added the option "Start test server" to the menu of the program.

http://www.box.net

/shared/ce6zm7nlkc

I installed this and it installed the key pretty fine. Updated NOD after that.

[shought]

@Zeus

So, this is better than the original NodLogin or what?

Hello i got a problem.. I got in my pc NOD32 V3.0.3.14 something like this and i saw in the internet NOD32 V4... i downloaded it and replace it on my NOD32 V3.0.3.25 and then i was trying to find a crack about this... i found mara- fixv1.1 ,. and i install it...works good i did all the change in self defence i was uncheck it.. anyway now when i start my pc i get an error and telling me how to fix mara fixv1.1 like to go to self defense and uncheck and bla bla.... its sure that is error... and i dont know how to make it stop see that when i starting my Pc...every time i get this error... i try in c:windows:temp:appdata to delete it because i found it there (mara......) i deleted it and again the same and the same.... do u know any solution about this problem...by the way i want to delete eset nod32 and all of this from my pc and put onother antivirus from Cd... so how can i stop this error...?!

p.s i tried and from msconfig in startup items.,.

btw i delete eset nod32 and all of its componets from my pc,.i uninstall it..

Could you provide us with a screenshot of the error?

[regy13]

Has anyone tested miNODlogin? I am completely satisfied with nodlogin 9.9 so far and not willing to test another utility unless I know it's better.

[Zeus_Hunt]

@Zeus

So, this is better than the original NodLogin or what?

I am using NOD after a long long time. Just started using it since the last 3 days.

Never used NODLogin. ;)

But this one seems simple enough.

It requires JAVA on the unit to run.

When u run it.. (After installation, there's a shortcut on the desktop) it downloads the Username/Pass from its server.

Verifies it is valid and then installs it.

Installed it from an exclusion folder.. With full protection and Self Defence ON..

It installs itself in C:\Program Files\ESET\MiNODLogin folder with 4 files in it.

I have just installed it ... need to check during the next week.. how it works...

[Bizarre™]

I thought NodLogin and MiNODLogin are from the same author ;)

[brianwarming]

GOOD NEWS !! ;)

Mine is WinXP Pro SP3 (32bits)

New crack found, with instructions how to use and IT WORKS ! (ESS 4.0.314) -

Just had 1st update without clicking on Update = 3972 ( 2009.03.28). (Self-defense Enabled).

It you want to try, here it is :

Download

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Mediafire.com

Sharecode »»»»»»»»»»»» /download.php?r3vxjn2jj2a

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Cheers

Jofre

Strange, it didn't work on my computer ? I installed the included ESET Smart Security 4 and copied the crack (updater.dll) over in safe mode. It still wants a username + password. Uninstalled, and installed ESET Antivirus 4 Trial instead. Copied crack. Now it worked, updated just fine. BUT setting the date forward to 29.07.2009 resulted in the program being expired. ("Your license has expired. The lifetime of this trial has run out. bla bla bla")

Tested with Windows XP SP3.

[brianwarming]

...If brianwarming's addon could somehow be incorporated in to the box fix, that would be pretty groovy! ;)

The addon is 100% freeware :P

...especially if the sigs info could be relayed to the genuine ESET tray icon!

Good idea, but somehow memory patch or API hook a stellar antivirus program like NOD32 is VERY, VERY difficult to do. I will try.

[brianwarming]

Hello.

What are the vulnerabilities with UAC on? I'm curious....

chrisTM out.

shought : Look at it like this: if the mara-fix is able to bypass Self-defense, then so will any custom written virus to take advantage of that be. As I have told many times before the Self-defense function in fact is useless. For if ESET would need Self-defense that would mean a virus already infected your computer, which is first of all highly unlikely and second if it did infect your computer, you're too late anyway, with, or without Self-defense.

(@Hoca, sorry about reply hiijacking ;))

To quote myself

...IF you have installed the mara fix AND turned UAC off THEN a new virus/malware (still unknown to NOD32) COULD install a service program without you knowing that tampers with ESET files or registry entries. Without the mara fix installed this would be 100% impossible.

I know i'm a bad worded noob in here :P BUT the point is ;

There are two parts of the mara fix 1) An installer program 2) a trial reset program. The mara installer can only install the trial reset service program and bypass Self-Defense because it tells you to MANUALLY disable it. After you MANUALLY disable Self-Defense in order to install the mara fix, the mara installer then makes registry entries that delays the loading of the ESET main driver. This creates a small security hole in the protection at boot start where the drivers/service programs are loaded. A hole is a hole (not talking about sex :tooth: ). It dosn't matter if you MANUALLY enable the Self-defense again or let the mara installer do it. To exploit this hole is not a matter of timing or seconds. Its about installing a service program that comes before the ESET driver ehdrv. Checkout HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services in the registry. The whole idea behind the mara fix is to open this hole. The Box fix uses a different approach ; it changes the permissions for a ESET registry entry, preventing NOD32 itself from changing important trial settings. Right :hehe: ?

I think the Self-Defense in ESET is a good idea and usefull and it works. An unknown virus/malware can't change the ESET driver/program registry entries.

From the ESET webpage "Self Defense — ESET NOD32 Antivirus has built-in technology to prevent malicious software from corrupting or disabling it, so you can rest assured your system is always protected".

Ok, I'll stop now :) I'm not looking for a fight :)

With UAC on, makes it more difficult to install a service program without the user knowing, BUT ...

1) The normal user, like my mom, just clicks OK/Allow to everything.

2) Any install program that you allow to run, could also install alot of sh*t behind your back.

3) Google for "UAC hacking"

4) It gets worse in Windows 7 because the UAC now has different levels, and the default level is more relaxed than

Vista.

Yes it IS a small security hole, a virus would have to know about Nod32 AND the Mara fix, but you never know :)

[shought]

In my opinion Windows should have never created a feature like UAC. It makes the users lazy.

People should just notice what can happen if they don't protect themselves well enough and learn from that. Software can always be circumvented by some smart hacker, common sense can not.

[Jota.Ce]

One thing here...

I installed ESS4 Business on a computer with mara- fix (Self-defense enabled after installation).

mara- fix says that first update must be done manually, but ESS didn't want to update anytime (even several restarts later).

I said my cousin that probably it would update after one hour of running, but i don't know since i use NodLogin and it works for Business Edition (dunno if mara- works for this version, which i don't think it's suposed to admit trial period (?)).

[shought]

It's most likely that none of the trial fixes will work with the Business edition ;)

[Aeon7]

People who use Nod32 should read this new test...

http://mtc.sri.com/live_data/av_rankings/

EDIT : I don't want to create an endless and useless discussion about "which is the best AV", that's why I didn't create a new topic. But it will perhaps help some people to switch from V2 to V3/V4 ( like me! ;) )