| Re: Hexalock 4.0 Hallo.
It seems that i have found a security hole in the Hexalock (file HCPSmng.exe Ver. 2.01.04538)
I have an original CD with one electronic book ( scrambled PDF files).
Nothing works (blindwrite alcohol etc, you always get a mesage "please insert original cd"). You also can not copy modify print save etc information what you see on your monitor. If you kill hexalock process, acrobat also will be killed.
The solution:
Launch original cd and open some encripted file ( PDF in my case). In this time HCPSmng.exe tryes to inject its code into 3 processes. you should kill the first one and allow two others. Then after PDF is launched and info is decoded, suspend the main hexalock process (HCPSmng.exe) with appropriate tool, eg "procexplorer". then go with windows explorer directly into original cd, select desired files and with right mouse button make " send to mail recipient". Outlook express will open with decrypted files attached. Cap an inet connection and make "send". After unsuccesfull send procces close Outlook express and then kill the rest of Hexalock processes.
Now you can open outlook and have your decrypted files as attachment in "outbox". Bingo!!!
This procedure is tested only on given cd with given HCPSmng.exe version.
Sincerely |