Multiclient - do it yourself

1- eSafe 7.0.14.0 12.13.2006 suspicious Trojan/Worm is present also in original conquer.exe file from tq

2- dunno what others posted (some of posted conquer.exe are totally recompiled) so i made it by mayself

hexediti original conquer.exe
search for eng (text string)
u will find "Engis"
replace 1 letter (as u want- "Enhis")

3- stop u have multiclient

PS: sorry for missing time and date in client :D im not so pro

dont ask me to upload conque.exe...dont be lazy..its so easy to make it

oooo please also add some karma...im new here :D

[B] :D outstanding :D works great , i would add the file but im not sure how to lol , but its so easy to do thats the first thing i have ever edited well done

nice work man, keep up the good work

maybe an extended version for the less programming types would be nice

Oh and if you want to hex edit i suggest

google>search Hex Workshop> Download.com
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
safe way to get a very easy to use hex editor

hmm i edited mine where the Fd%...English is, however i used resource tuner and unpacked the exe to 1.20MB first.

Glad you mentioned this..hexing without unpacking the exe from it's UPX compressed state first..nice.

this is useful as i wouldn't have to swap Memory address's within my memory reading
awesome !

can some1 uplaoad file?
or tell the number of the line it is on

File Requested..Just used Vivi's guide too :P

couldn't upload here sorry but here's a link.

[Only registered and activated users can see links. Click Here To Register...]

erm....no line number...u can find at 00054FA4...im working to find a way to fix date and time...(ty for +3 karma :cool: )

Quote:

Originally posted by Vivivivi@Dec 13 2006, 19:30 erm....no line number...u can find at 00054FA4...im working to find a way to fix date and time...(ty for +3 karma :cool: )

there used to be a dos program touch.exe that set the original date and time of a file, maybe it still works or has an update... google it.

lol i cant find the engis words

Really big thx Vivivivi !
Nice work without another f**** d/l !!
Easy to do it urself n it works fine !

But Viv, da Line isnt da right one. I found da Engis in Line 0x054FB0

Thx n have Fun !! :bandit:

i dont get what you mean by the time and date?

what hex editors are u guys using