Multiclient - do it yourself

Vivivivi · 12/13/2006, 16:10

1- eSafe 7.0.14.0 12.13.2006 suspicious Trojan/Worm is present also in original conquer.exe file from tq

2- dunno what others posted (some of posted conquer.exe are totally recompiled) so i made it by mayself

hexediti original conquer.exe
search for eng (text string)
u will find "Engis"
replace 1 letter (as u want- "Enhis")

3- stop u have multiclient

PS: sorry for missing time and date in client

im not so pro

dont ask me to upload conque.exe...dont be lazy..its so easy to make it

Vivivivi · 12/13/2006, 16:11

oooo please also add some karma...im new here

jonffs3 · 12/13/2006, 16:46

[B]

outstanding

works great , i would add the file but im not sure how to lol , but its so easy to do thats the first thing i have ever edited well done

Agarth · 12/13/2006, 17:31

nice work man, keep up the good work

Agarth · 12/13/2006, 17:54

maybe an extended version for the less programming types would be nice

-TRIX- · 12/13/2006, 18:41

Oh and if you want to hex edit i suggest

google>search Hex Workshop> Download.com
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
safe way to get a very easy to use hex editor

blinko · 12/13/2006, 18:43

hmm i edited mine where the Fd%...English is, however i used resource tuner and unpacked the exe to 1.20MB first.

Glad you mentioned this..hexing without unpacking the exe from it's UPX compressed state first..nice.

this is useful as i wouldn't have to swap Memory address's within my memory reading
awesome !

prkl · 12/13/2006, 18:48

can some1 uplaoad file?
or tell the number of the line it is on

blinko · 12/13/2006, 18:56

File Requested..Just used Vivi's guide too :P

couldn't upload here sorry but here's a link.

Vivivivi · 12/13/2006, 19:30

erm....no line number...u can find at 00054FA4...im working to find a way to fix date and time...(ty for +3 karma

)

meoso · 12/13/2006, 20:43

Quote:

Originally posted by Vivivivi@Dec 13 2006, 19:30
erm....no line number...u can find at 00054FA4...im working to find a way to fix date and time...(ty for +3 karma )

there used to be a dos program touch.exe that set the original date and time of a file, maybe it still works or has an update... google it.

XxDarkKillaxX · 12/13/2006, 22:33

lol i cant find the engis words

Dreamy26 · 12/13/2006, 23:30

Really big thx Vivivivi !
Nice work without another f**** d/l !!
Easy to do it urself n it works fine !

But Viv, da Line isnt da right one. I found da Engis in Line 0x054FB0

Thx n have Fun !!

blinko · 12/13/2006, 23:37

i dont get what you mean by the time and date?

XxDarkKillaxX · 12/14/2006, 01:21

what hex editors are u guys using