Jump to content

UE 2=> is this for real ?


smallhagrid

Recommended Posts

  • Replies 19
  • Views 1.7k
  • Created
  • Last Reply

Top Posters In This Topic

  • smallhagrid

    8

  • pintas

    6

  • unknownasphyxiated

    4

  • josef00

    1

Very weird.

The homepage clearly shows latest version as 1.6.1

http://www.legroom.net/software/uniextract

I've seen 1.7 version around, but they're unoficial versions. Maybe this is one too.

I'm trying the 2.0 version and seems 'real'. It sent me to this page:

http://noby.ucoz.ru/

I guess these guys are responsible for the change.

The original Universal Extractor is made in AutoIt, so its pretty easy to decompile. Its actually a very simple program that uses lots of tools to get the job done. I would say someone decompiled it and added new tools. You can probably still find the source code in AutoIt forums. I for one, also thought about decompiling it to make some changes, but i guess i'm just too lazy :D

Link to comment
Share on other sites


R3C0N made a wonderful update of UE some while back and that is what I have been using - it opens almost anything very well !!!

His also was repacked in such a way that it does not irritate my AV the way others (like Gora's...) do.

This one immediately brings up the typical AV warning.

It extracted to a single file called 'UniExtract.DreamLair.exe'.

I extracted that - twice - to get the file structure correct.

The main executable gets an AV warning each time it is approached on my PC.

Has anyone else tried using this version - and is it harmless on your PC ???

Thanks.

Link to comment
Share on other sites


R3C0N made a wonderful update of UE some while back and that is what I have been using - it opens almost anything very well !!!

His also was repacked in such a way that it does not irritate my AV the way others (like Gora's...) do.

This one immediately brings up the typical AV warning.

It extracted to a single file called 'UniExtract.DreamLair.exe'.

I extracted that - twice - to get the file structure correct.

The main executable gets an AV warning each time it is approached on my PC.

Has anyone else tried using this version - and is it harmless on your PC ???

Thanks.

Mind uploading R3C0N's version please?

Link to comment
Share on other sites


Info below...:

R3C0N made a wonderful update of UE some while back and that is what I have been using - it opens almost anything very well !!!

His also was repacked in such a way that it does not irritate my AV the way others (like Gora's...) do.

This one immediately brings up the typical AV warning.

It extracted to a single file called 'UniExtract.DreamLair.exe'.

I extracted that - twice - to get the file structure correct.

The main executable gets an AV warning each time it is approached on my PC.

Has anyone else tried using this version - and is it harmless on your PC ???

Thanks.

Mind uploading R3C0N's version please?

I use this one=>

https://my.cloudme.com/recon/Public/UniExtract/Universal%20Extractor%20no%20Install.rar

Which he posted here:

http://www.nsaneforums.com/topic/158973-universal-extractor-161-updated-mar-2013-x86-x64-builds/

Are you able to get it from there - or do you need a re-up ??

Link to comment
Share on other sites


Info below...:

R3C0N made a wonderful update of UE some while back and that is what I have been using - it opens almost anything very well !!!

His also was repacked in such a way that it does not irritate my AV the way others (like Gora's...) do.

This one immediately brings up the typical AV warning.

It extracted to a single file called 'UniExtract.DreamLair.exe'.

I extracted that - twice - to get the file structure correct.

The main executable gets an AV warning each time it is approached on my PC.

Has anyone else tried using this version - and is it harmless on your PC ???

Thanks.

Mind uploading R3C0N's version please?

I use this one=>

https://my.cloudme.com/recon/Public/UniExtract/Universal%20Extractor%20no%20Install.rar

Which he posted here:

http://www.nsaneforums.com/topic/158973-universal-extractor-161-updated-mar-2013-x86-x64-builds/

Are you able to get it from there - or do you need a re-up ??

Link to comment
Share on other sites


Pintas - have you compared the two different versions ??

Will you tell us here what the differences seem to be ??

Thanks.

Link to comment
Share on other sites


I haven't. But the main differences are basically in the GUI and the adding of new tools or tool versions.

I've been so busy i don't have the time to check out the differences, but for common usage, they're all basically the same.

Maybe i can test them later today.

Link to comment
Share on other sites


Thanks !!

It is clear that the 'bin' folder has more files in it which implies more functionality - but because it has been altered by different folks I'm not quite sure what to make of it except that one does not piss off my AV...?

Link to comment
Share on other sites


Understood:

Its simply because the exe file was compiled using UPX compression, which is used alot by virus, so AVs detect them as such.

See this:

http://www.autoitscript.com/forum/topic/34658-are-my-autoit-exes-really-infected/

At the same time I am reluctant to set an exception for something from such a mysterious source as this v2 came from.

So rather than all of that I have been using R3C0N's version - which does not piss off the AV at all.

This is also why I am curious as to the differences.

The v2 has 83 files @ 15.4MB in it's bin folder - whereas R3C0N's version has 57 files @ 10.8MB .

This is a huge difference.

Since it the main EXE that pisses off my AV, I renamed it to 'UniExtract.exe.vir' and copied over the UniExtract.exe and English.ini from R3C0N's version - and it opens just fine - but I cannot tell if it uses all the tools present in the bin folder at all...?

Link to comment
Share on other sites


unknownasphyxiated

i don't think that would be possible because the uniextract.exe need to be updated in order to use new extractor

correct me if im wrong

it does open fine because it doesn't need the "bin" folder to run but to extract,it does need the "bin" folder

Link to comment
Share on other sites


Here's what I was thinking...

If the EXE is set to use files of the same names which have newer versions using those same names stored in the BIN folder, then it might help...and I've tried it this way vs. R3C0N's version and have yet to see any differences.

It was worth a try - at least this way it doesn't bother my AV at all.

How ever it is that R3C0N makes up the EXE for his, I wish all the others would do it that way too !!!

Link to comment
Share on other sites


unknownasphyxiated

of course you can manually update the file..that what Gora had done for his version

i prefer to use Gora's version because i'm too lazy to search for new build

Link to comment
Share on other sites


  • 1 month later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...