Yeah i thought about that too, since i guess it would be much more harder then too.

But i can't find a way how to do that. Would be nice if Enigma (the admin) could find a way todo that since it looks like there are amny autoit users around.

No the overlay doe snot have anything todoö. Autoit loads the whole script into the ram and process it then line by line. Anyways i tried to use both programs. First the friends program which encrypts the ram, and then yours. However i need to disable the virtualazion of the entry point. Is this a h...

Yeah i know that it may not be a risk but i still don't like it^^

What settings this are exactly?

I dont have any trial or registration stuff enabled but it still creates those keys.

Thanks

Not sure what you mean. The AutoIT exe containts the whole sourcecode. If you do not use any proteciton you can just drag it into an decompiler and you get the full source code back thats the problem with the way autoit works (interpreter). Therefore normally autoit also copys the WHOLE script into ...

Yes it works. The file for the virtual box contains ONLY the overlay and it works fine :D This is stored as much secure as possible. The overall file is never stored in memory, once application requires a part of the file, the protection extracts it and returns. So this way is very similar as your f...

Thanks for this idea i will try it out :) If it does not work, how secure is it tpo place the copy inside? I guess it is very hard to access it inside the virtual box? And also. How is the data stored in the RAM? Is it in one piece? And a other question cause i do not want to open 10 threads^^: With...

Sorry but what file should i add to the virtual box?

The unprotected exe?

//EDIT: Okay seems to work. The overlay is gone and it still works fine.

I just wonder. Isn't is risky to place the unprotected file into the output? Or is it not really possible to access the virtual box?

Thanks

Hello, well if i remove the overlay than i get a AutoIt error. I talked to a experienced friend he coded a protection for AutoIt scripts. The way he protects the script form dumping it is that he just decrypts small parts of the code in the RAM when they are needed and then encrypt it again. So if y...

I got another question.

Autoit scripts have the signature AU3!EA06 inside, therefore you can easily dump the whole script from the ram by searching for EA06 and then decompile the dumped code.

Now i ask myself if enigma protects against this?

Thanks

I saw that enigma creates some entrys with the name enigma protector in the windows registration database. It may be not a security risk, but i do not unserstand why you don't just create a random name insted of the packers name? I guess that would let people feel much more comportable (me included)...