16 Feb 2016

Updated Meltdown and EnigmaVB Unpacker

About Error Messages

Users can't read.

Or maybe they don't want to read. I don't know.

But one thing I know for sure - you must make your tools foolproof. If your tool is showing an error message, make sure even your grandma could understand it. Otherwise you'll be getting lots and lots of invalid bug reports.

For example, this is the error message my EnigmaVB unpacker used to show (as reported by ho3ein at Tuts4You):

It seemed to be very clear to me. First, tool tells user all the versions of Enigma Virtual Box it supports. Then tool explains that it expects to see a PE section with a name ".enigma2" but it found section with a name ".rsrc" instead. To me it's absolutely clear what happened: this file is not protected with Enigma Virtual Box (or it's hacked).

But you won't believe how many times this gets reported as a bug.

There was a similar problem with Meltdown. It clearly stated which versions of DeepFreeze it supports. Then it printed the detected DeepFreeze version. However, the error message didn't explicitly say "This version of DeepFreeze is not supported", it said "DeviceIoControl failed." It makes perfect sense from developer's point of view, but apparently is very confusing for users.

So, here are improved versions of my tools, fixing the error messages and some other stuff..

Improved EnigmaVB Unpacker

First of all, I fixed the error message. I also added detection and tested compatibility with the latest EnigmaVB v7.40. Hopefully, this will make users happier and less confused. smile

Improved Meltdown

Meltdown 1.7 fixes confusing error message with DeepFreeze Standard v8.x. Thanks to Alexander for reporting it.

I also took a closer look at DeepFreeze Enterprise versions and found a way to make Meltdown more user friendly. If DeepFreeze Enterprise v7.20+ is detected, Meltdown will get OTP Token automatically and immediately generate correct password.


Download links

Enigma Virtual Box Unpacker: Please get latest version from this post
Meltdown v1.7: https://www.mediafire.com/?b0bamd3t2d6bbkq

33 thoughts on “Updated Meltdown and EnigmaVB Unpacker

  1. Noob users the most of the time don't understand error messages or pretend to don't understand to try get help anyway. This is the flip side in doing public tools these days.

    By the way thanks for updates :) Really great job.

  2. Your unpacker v0.34 is unable to unpack this file {removed_link} Is it because the size is too large? I'm getting 'Out of memory while expanding expanding memory stream ' error.

    • Thank you for the bug report, I will check it later today.

      EDIT: Now that I see your file, it's really too big (3GB+). According to different forums:

      TMemoryStream has never supported memory blocks > 2GB. It was not updated when Int64 support was added to TStream in Delphi 6. It was not updated when support for Win64 was added in Delphi XE2.

      I will check if I can somehow work around that. But it requires quite a lot of work. :(

  3. Can you please explain this error to me? I would love some support on this error! Thanks!

    {hidden link}

    • It looks like the file was not properly downloaded - it's smaller than it should be. If it's working correctly, it's a problem in my unpacker and I would love to fix it. If it's not working, please try downloading the file again.

      Also, could you upload the file somewhere and send me the link? Download link will not be made public.

  4. I would die for a fix. Please don't rush but if you free time I would love to hear your side on my error.

    My exe: (Tested that it also boots properly.)
    {link removed}

    • Your file is protected with "Enigma Protector", not "Enigma Virtual Box" - it's a different product from same authors.

      I will fix the misleading error message in my unpacker - but that won't help you to unpack your file.. :)

  5. I thought they were exactly the same. Enigma protector also has the option to virtualize files so what exactly is the point of enigma virtual box? Thanks for your help as well! :)

  6. Thanks for the links and help kao. I completely understand now. I feel like a major noob, but when I try to register for the tuts4u account, they want me to decode a string, and I'm not honestly sure which encoding they're using. I'm familiar with a few but not this one. Thanks.

  7. whats up bro
    would you please help me it looks like i need your help, i scanned my app with snd cryptor scanner it says its protected with Enigma encryption (WiteG)
    and RC4 so when i use your utility it doesnt detect Enigma it say its hacked so is because of rc4 or something else please just give a clue this is worth a life
    you got my email please do respond i will give you a link to the my App and i will make it worth

    • Enigma encryption algorithm has nothing to do with Enigma Virtual Box. There's nothing I can help you with.

  8. Is it possible to release the source code of the meltdown tool or at least create a console version of it? Need to output password or error messages on console. Thanks in advance!

  9. Hi friend, you can resume fusion project for deep freeze 8.3X versions. It would be interesting if you do thank

  10. Hello, it looks like the password generate for Deep Freeze Enterprise 8.35 doesn't work. The password is shown but DF refuses to unlock with it. Probably they changed the algorithm.

  11. Operating system version 6.2.9200 (64-bits)
    Detected DeepFreeze version
    Probably Standard version.
    This DeepFreeze version is NOT supported!

    Can you update the meltdown? Pleasssee..

    I forgot my password..😭😭

  12. Sir kao, why wouldn't you update the meltdown 1.7 to 1.8+?
    Is the software getting complex and hard to crack open?

    I would like to know your thoughts about this as of this moment.

  13. Hi, could you please tell me how it detect Deep Freeze as Standard version or Enterprise version? There is a comuputer installed Deep Freeze Enterprise version but it was detected as Standard version.

    And I found that it can only get the build number but unable to distinguish whether it is a standard version by the Deep Freeze Driver .

    • My tool is making an educated guess based on several aspects.

      In either case, DeepFreeze versions 8.x are not supported.

Leave a Reply

  • Be nice to me and everyone else.
  • If you are reporting a problem in my tool, please upload the file which causes the problem.
    I can`t help you without seeing the file.
  • Links in comments are visible only to me. Other visitors cannot see them.

Your email address will not be published.

1  ×   =  seven