Protection ID v6.xx - updates and download link



just noticed the website now hosts a new version :slight_smile:
here´s the changelog:


The last public version (v5.0 Final c) was released 14.12.2004.
Right after releasing it, the devlopment of v6.0 has began and still continues.
Now we release v5.1 to keep you up to date.
New protections were added, important ones got updated and improved, bugs got fixed…

  • added: JoWood X-Prot detection
  • added: Laserlok Marathon detection
  • added: Ring-Protech detection
  • added: SecuROM v7.xx.xx detection
  • added: SmartE Copy Protection detection
  • added: Starforce v3.x version is now displayed with build number
  • added: Tages v5 detection
  • added: VOB Protect CD/DVD v5.9x with build number detection instead of showing “VOB Protect CD/DVD [modified version] detected”
  • added: ACProtect version detection for v1.09, v1.10, v1.20, v1.21, v1.22, v1.23, v1.3c, v1.32, v1.35 / v1.40, v1.41 and v2.0
  • added: Armadillo version detection for v1.00 - v1.84, v2.00 - v2.40, v2.60 - v3.00, v3.05 - v3.20
    v3.30 - v3.61, v3.70 - v3.75, v3.76 - v3.77, v3.78, v4.00 - v4.05, v4.10 - v4.20, v4.30 and v4.40
  • added: ASProtect version detection for v1.0, v1.1, v1.11, v1.2, 1.22 - v1.23 Beta, 1.23 RC4 -, 1.23 RC4 (Registered),
    v1.31, v1.32, v1.33, v2.0 Alpha and v2.1 - v2.11
  • added: EXE Cryptor v2.0 - v2.1.xx, v2.2.0 - v2.2.4 and v2.3.0 - v2.3.7 detection
  • added: FSG v1.0, v1.2, v1.3 - v1.31, v1.3.3, v1.33a and v2.0 detection
  • added: PE Compact v2.xx generic detection
  • added: PE Compact version detection for v1.00 - v1.3x, v1.40 - v1.50, v1.55, v1.56 - v1.65, v1.66 - v1.84,
    v2.0 Beta Build v52, v2.00 - v2.10 and v2.20 - v2.64
  • added: some more CD/DVD-Check detections
  • improved: Laserlok detection
  • improved: Safedisc [generic v1, v2, v3, v4] verification code making it possible to detect a faked Safedisc protection were the SD string
    ‘BoG_ *90.0&!! Yy>’ was simply added to the PE header, also added another piece of code checking for ‘real’ Safedisc
  • improved: Safedisc v3.20 - v4.xx [unknown version] is more accurate due new checks
    (i.e. NBA Live 2006, version is removed, PID detects 'Safedisc v4.00.001 - v4.00.003)
  • improved: Safecast detection in safecast´ed executables
  • improved: SecuROM detection, added one more check to speed up scanning in non SecuROM´ed files
  • improved: StarForce detection
  • improved: UPX detection
  • improved: VOB Protect CD/DVD detection completely rewritten

some notes about… SecuROM v7…

well you´ve probably seen SecuROM 7 “versions” displayed like 7.00.00.xxxx.
i don´t think it´s the “real” version, check out the following version and their release dates:

SecuROM (Crashday) - 25.01.2006
SecuROM (Conflict Global Storm) - 17.08.2005 (!)
SecuROM (CSI-3 Dimensions of Murder - 22.02.2006 (!)
SecuROM (Project Snowblind) - 09.04.2005 (one of the first securom 7 titles)
SecuROM (F.E.A.R.) - 05.09.2005
SecuROM (Star Wars Empire at War) - 20.01.2006

just my thoughts on securom… the string is decrypted, yes, but it doesn´t mean it´s part of the version.
if i´m wrong i´m going to correct it in the next release… but is there any proof ? :wink:


here´s the info from the pid website:

v5.1b released

this build is updated again to detect the latest protections and to sqeeze a few bugs.

  • added: Tages v5.3.0.0 - v5.5.0.1 (or newer) detection
  • added: Laserlok build date detection if possible
  • added: StarForce protection infos (depending on what options were used to protect the game)
  • added: Armadillo v4.42 detection
  • added: ASprotect v2.1, v2.2 and v2.3 detection
  • added: ASProtect v2.x [unknown version] detection
  • added: MoleBox v2.x.x [generic] detection
  • added: MoleBox v2.2.3, v2.2.4, v2.2.5, v2.2.6, v2.2.8 and v2.3.0, v2.3.3, v2.4.0, v2.5.0, v2.5.5, v2.5.12 detection
  • added: NSPack v1.0 - v2.8, v2.9, v3.0, v3.1, v3.4, v3.6 and generic detection
  • added: UPX v2.00 detection
  • improved: ASProtect v2.0 detection
  • fixed: Armadillo v4.40 was detected as v4.10 - v4.20 in some files
  • fixed: annoying Starforce bug not reporting protected dlls anymore after executable scanning
  • fixed: Protect Disc detection (added a generic string search too)
  • fixed: SmartE detection in Softlocx6.ocx
    (this protection uses the same wrapper, exept ony byte difference ;P)

expect a new build soon :slight_smile:


a new version of Protection ID just got released :slight_smile:

  • added: Protect Disc v7.0 - v7.1 (or newer) detection
  • added: Starforce Protect.exe v3.5.xx.xx and v3.6.10.06 - detection
  • added: ActiveMARK detection
  • added: detection if Tages SDK or Tages BASiC is used in protected files
  • added: Armadillo v4.44 detection
  • added: PC Guard v5 detection
  • improved: ASPack detection (detects v1.01b, v1.02b, v1.03b, v1.05b, v1.06b - v1.061b, v1.07b, v1.08x, v1.083, v1.084
    v2.000, v2.001, v2.1, v2.11, v2.11c - v2.11d, v2.12 and v2.12b)
  • improved: TeLock detection (detects v0.42, v0.51, v0.60, v0.70, v0.71, v0.880, v0.85f, v0.90
    v0.92a, v0.95, v0.96, v0.98b1, v0.98b2, v0.99, v1.00 and v0.98 Special Build)

the download can be found at


v5.1d changelog

  • added: SecuROM version detection for v7.01, v7.02, v7.10, v7.11, v7.12, v7.20, v7.21, v7.24 and newer
  • added: StarForce BASiC detection (no drivers included) (valid only for SF v3.x)
  • added: StarForce ProActive v3 detection (you need to scan the protect.exe)
  • added: Tages scanning if Device Driver is called (Disc Check)
  • fixed: StarForce bug sometimes not reporting if VFS is used

finally a working SecuROM 7 version detection.
scanners just detecting v7.00.00.xxxx are simply wrong.

short game list:

Constantine - SecuROM v7.01
GTA San Andreas - SecuROM v7.02
F.E.A.R. - SecuROM v7.11
Indigo Prophecy - SecuROM v7.12
Stubbs The Zombie - SecuROM v7.18
Serious Sam 2 - SecuROM v7.19
Rogue Trooper - SecuROM v7.20
Sensible Soccer 06 - SecuROM v7.21
Hitman Bloodmoney - SecuROM v7.24

download @


@cdki… uh, itsjustme: why don’t you reply to one of your older threads instead of making a new thread every time you release a new version ? This behaviour can be considered as spamming the forum.


ok if a new version is released i´ll update the current thread only.
sorry if you consider this spamming…


Threads merged, please post updates to this thread only.


v5.1e released

  • added: SecuROM 7.26 detection
  • added: SecuROM 7.xx.xxxx subversions (tested on 90+ executables)
  • added: Safedisc seperated detection for v4.50 & v4.60 in executables without version string
  • added: Laserlok build detection for v5
  • added: Starforce v4 detection inside protect.exe
  • added: NSPack v3.3 & v3.5 detection
  • improved: Laserlok Marathon detection
  • improved: CodeLok detection
  • fixed: Protect DiSC v6.2 build number bug



  • added: SecuROM 7.27.xxxx detection
  • added: Protect DiSC v7.5 (or newer) detection
  • added: Starforce 4 protection level (Basic / Pro) detection
  • added: Starforce ProActive v4 Protect.exe detection
  • added: Safedisc detection for v4.70 in executables without version string
  • added: PC Guard v5.01 detection
  • added: SD Protector v1.12, v1.16 and [unknown version] detection
  • added: TheMida v1.0.0.0 - v1.8.0.0 (or newer) detection
  • added: License - eLicense v3.x, v3.20 and v4.0 detection
  • added: License - Protection Plus v4.x detection
  • improved: ActiveMark detection splitted into v4 & v5
  • improved: Xtreme Protector detection code improved
  • improved: SecuROM 7.26.xxxx detection, added more detailed versions
  • improved: Protect DiSC version detection, added support for most common versions
  • fixed: crash during Tages scanning if entrypoint is between offset 2h to 4h


v5.2 changelog

  • added: Protect DiSC protection level scan (Pro/Basic)
  • added: SecuROM exact version detection for lots of v7.27.xxxx and the first of the new v7.28.xxxx
  • added: Safedisc API detection Method 1 (available at oep dump of protected exe)
  • added: Safedisc API detection Method 2 (scan protected executable)
  • added: CDCops detection (scan *.QZ_ file)
  • added: JoWood X-Prot v2.x detection
  • added: Armadillo v4.54 detection
  • added: ActiveMARK v6 detection
  • added: Obsidium version detection for most files
  • added: Petite v1.2, v1.3, v1.4, v2.2 & v2.3 exact version detection
  • improved: Safedisc v4.70 detection in files with removed version string
  • improved: SecuROM 7.26 / 7.27 detection, added more checks for detailed version
  • improved: JoWood X-Prot v1.x detection improved
  • improved: Protect DiSC 6/7 scan, added more detailed versions
  • improved: BJFNT detection rewritten (version detection for v1.1, v1.2 & v1.3)
  • improved: EXE32Pack detection rewritten (version detection for v1.37, v1.38 & v1.42)
  • improved: ExeCryptor2 detection (also fixes possible false detections)
  • improved: Krypton detection rewritten (version detection for v0.2, v0.3, v0.4 & v0.5)
  • improved: NeoLite detection rewritten (faster & more accurate)
  • improved: Obsidium generic detection, added one more check
  • improved: PEBundle detection
  • improved: PE Lock v1.0x detection rewritten
  • improved: PE Pack detection rewritten (version detection for v0.99 & v1.0)
  • improved: Perplex PE Protector v1.01 detection rewritten
  • improved: PE Shield detection (version detection for v0.1d, v0.2, v0.25 & unknown versions)
  • improved: Shrinker detection rewritten (version detection of v3.4, v3.5 & unknown versions)
  • improved: SVKP detection rewritten, detection of v1.051, v1.11, v1.3x - v1.4x (or newer)
  • improved: YodaCrypt detection rewritten (version detection for v1.1, v1.2 & v1.3)
  • improved: detection for lots of minor exe protectors/packers rewritten, including: cEXE, Air EXE Lock,
    DEF, EXEProt v1.x, E-Zip, Lamecrypt, NFO, Noodlecrypt, Passlock 2000, PeX,
    PE Diminisher, PE Mangle, PE Nguincrypt, PE Ninja, PKLite32, SEPP, Softdefender,
    UPX Scrambler, VBO Watch, VG Crypt, Winkrypt, WWPack32
  • fixed: possible crash in Xtreme Protector detection when scanning ExeCryptor v2.2.x wrapped files
  • removed: Protection Options in Armadillo scan (will be readded & improved later)
  • implemented check for Win32 DLLs with EntryPoint 00h (also fixes rare ASPack/ASProtect crash)
  • plus several protection version updates (i.e. Obsidium, MoloBox, PE Compact…)

due the amount of changes the version was raised to v5.2
most of the detection routines were recoded, resulting in faster scanning speed & being more accurate.

we´ve made improvements again in detection of the most common used pc game protections.
SecuROM 7.28 detection is here (older ones also updated and wrong detections fixed),
JoWoods new X-Prot will be detected, CDCops detection was added, ActiveMARK´s
latest version 6 will be recognized, Safedisc routine is able to detect the latest v4.70 games
with removed version and protection level (SDAPI or Safedisc Standard).
Protect DiSC detection is up to date (improved exact version scan) and now also detects
if the protection features are Basic / Pro.

thx to the people who helped with the more advanced features :slight_smile:


5.2 Works nice, had no problems with it on XP SP2 at all



  • added: SecuROM 7.29.xxxx detection
  • added: Starforce v4.50 (or newer) Protect.exe detection
  • added: Protect Disc v7.5 exact version info for more subversions
  • added: PE Spin exact version detection for v0.3, v0.41, v0.7, v1.0, v1.1 and v1.3 (+ unknown version)
  • added: UPack version detection for v0.10 - v0.12, v0.20, v0.21, v0.22 - v0.2, v0.24 - v0.28
    v0.29 - v0.33, v0.34 - v0.35, v0.36 and unknown versions
  • added: MEW 11 detection (exact version detection for v1.0 & v1.1 - v1.2)
  • added: NSPack v3.7 detection
  • improved: PE Lock v1.0x detection rewritten (faster & more accurate)
  • improved: UPX detection, added more generic checks
  • fixed: Safedisc API could be detected in a few non-safedisc files
  • fixed: Safedisc detection for v4.60/v4.70 in files without version
  • fixed: Starforce v4.50 version display bug

download @


Great, just downloaded it.


v5.2c is done. this one will be the last version based on the old source wich is written in TASM.
We are currently working on the new v5.3 of Protection ID.
It will feature a major code overhaul and is ported over to
MASM allowing much more interesting stuff to be done.
Expect some news regarding the future of Protection ID soon!

here´s the small but up2date changelog, the big one comes with v5.3 :wink:

  • added: SecuROM v7.29.0010, v7.29.0011, v7.29.0012, v7.30.0010, v7.30.0011, v7.30.0012, v7.30.0013, v7.30.0014 and v7.30.0015 detection
  • added: Protect DiSC v7.6.1 detection
  • added: Tages detection rewritten, added exact version detection of v5.2, v5.3, v5.4, v5.5.0 and v5.5.2
  • added: Tages v5.5.2 (or newer) + Additional SoftShield detection
  • added: Themida v1.8.2.0 (or newer) detections
  • improved: X-Treme Protector detection improved

download @


here´s a teaser for the upcomming v6 featuring the “Protection Report Window”.


Great!! There are protections, which I never heard before. When will it be released? This year? What will it be able to do. Nice work anyway. :iagree:


Great!! There are protections, which I never heard before.

yeah its more 'universal 'now by adding lots of more exe wrappers and not only PC-games.

When will it be released?

‘When It´s Done’ :wink:

What will it be able to do.

we don´t want to spoil it by telling about the new features.
there will be more news / screens soon…


‘When It´s Done’

This answer was soooo predictable. LOL :wink:


Protection ID v6 newsupdate (see official website):

As you can see Protection ID v6 is progressing very well, thx to our beta testers for
reporting bugs, crashes and giving us ideas on what we can add to the functionality.

The current version does detect more than
250 exe-packers, PC ISO Protections, Dongles, Licenses and Installers in
such an exact and fake proof way you haven´t seen before in any scanning tool due the detailed checks.
False reports and detection where other tools fail are history.

Log Window with Context Menu


PID´s Memory Optimiser on Windows Vista


Protection ID v6 newsupdate (see official website):

Can’t see anything there.