系统要求:PC
软件格式:WiN64 – VST
厂家:https://www.tone2.com/index.html
大小:504.77 nb
时间:2020年1月12日
Tone2.RayBlaster.v2.5.0-R2R
Tone2.Icarus.v1.6.0-R2R
Tone2.Gladiator.v3.0.0-R2R
Tone2.Electra.v2.7.5.READ.NFO-R2R
Tone2.Nemesis.v1.6.0-R2R
Tone2.Saurus.v2.5.0-R2R
What Tone2 does :
IsDebuggerPresent(), CheckRemoteDebuggerPresent(),
NtQueryInformationProcess(), VirtualProtect() + Access Violation Exception,
FindProcess() for famous debuggers and TerminateProcess().
It will crash the app or call ExitWindowsEx() to shutdown Windowss.
NOTE : Shutdown function still exists in their Icarus2.
Any known blacklisted Tone2 keyfile will be removed. The installer also has
deletion function of known blacklisted keys.
Tone2 checks MPRESS2 signature to check unpacking. There are 3 ways used for
checking. Some apps use few and some others use all ways. For 32bit version,
PECompact is used.
[Home Calling]
Tone2 sends info to byte4.com and gets latest blacklist information.
[Hosts File Check]
Tone2 checks system hosts file to find “Tone2” “Byte4” entry. App will crash
when it is found. Raw IP address is also scanned from hosts file but it is
not possible define raw IP address in hosts file, so why? 😛
[Keyfile Attribute Change]
Anti-ReadOnly. Tone2 tries to reset file attribute by SetFileAttribute(). If
it fails, app will crash.
Add the path of installation directory from the app.
“HKEY_CURRENT_USER\Software\Tone2(AppName)” “Path”
The path is scanned by every Tone2 apps and remove blacklisted keys.
Saved preset file contains the information of blacklisted keyfile. When app
loads presets, they will be checked.
[Themida Code Virtualizer]
Only used in Icarus2 and Electra2. Software Virtual Machine function. Since
patching Virtual Machine results unpredected error, partial or full de-
virtualization is required.