@ Anastasia:

I've been trying to trace the code so I know where it does jump to ntdll.dll which I think the prog uses to connect to the server, however, I've been having problems there, any advice on what program should I use or how should I trace with CE?

the idea is to know when does it try to connect to sv server and jump till to an address where the validation has already been made, so sv will be able to run

once im able to to that Id be able to restrict network acces for scriptvessel/country, the trojan is harmless and the bot works voila... hope it works :S

I wanna give thx for ur work anastasia . :)

I did all that steps 1 to 16 (first textbox) with the new memori adress that u have posted. Then i tryed a user/pass and SV display me Login... in window after that i went to CO and use F11 ... great this works!

But when i tried to make Trainer didnt work SV display me the " Server no responsed or off-line or Version up " mensage.

I was wondering if it is posible to make an Hex modification of the SV like u did before in older version with XVI32 program.

Uncracked ScriptVessel Releases

ScriptVessel-4339(V0301).zip (3/01/07) <--- (All previous version will expire on 3/05/07) SV LIED TO ME! They all work still

ScriptVessel-4339.zip (2/23/07) <---- New Dont Pickup Item Function

ScriptVessel-4339.zip (2/18/07) <--- latest cracked version by anantasia

ScriptVessel-4337.zip (1/25/07) <---Date Check Fixed - 1/26/07

ScriptVessel-4336.zip (1/16/07)<---Date Check Fixed - 1/16/07

This post has been edited by Botter2daMax on Mar 14 2007, 20:05


-----------------------------------------------------------------


which link is the stand-alone one that is safe?

yes u can crack it using xvi32 if u have little skill ull have np to do it... i have it like 2 weeks cracked like that works well :rolleyes:

for me it says
Login Error:
Server no responsed or off-line or Version update!

how can i fix this?

LOL thnx anastasia.

I made my own sv(4339) work. Thnx for ur guide. But there are some weird things happen in my PC when im gonna use it. My explorer will not work and prompt some error to close it. This happen it u gonna use the run from the start menu and also by pressing the windows key.

Anyway my SV is working so good and smooth. Thnx. :D

Welcom to use this Platform!
Logining......
Sorry, Username or Password Error! 2007-3-19 6:31:45


after this message juz try press F11 to test if you have crack it.

hey, can anyone tell me why stripper v2.07 wouldn't unpack scriptvesselv4339.exe or scriptvessel4339v0301.exe?

cracked it as u said...says loading
loading....
loading....

can smone give Full Download.. To te ScriptVessel Cracked.. plz im cant do it :(

Welcom to use this Platform!
Logining......
Sorry, Username or Password Error! 2007-3-20 12:11:09


byt it works

are we gonna must change the date when we crack again the updeted sv?

worked perfectly thanks anantasia, it says client not accepted sorry , but when you press F11 it works fine

sry but can u please tell us again what codes we must replace? sry for inconvenience but i'm confused

I'm too nuub. Can't crack it. lol :ops:
If you guys want post a cracked version... Better for me... rofl ;)

nobody will post cracked version :rolleyes:
[img]text2schild.php?smilienummer=1&text=Would u like to get ban?' border='0' alt='Would u like to get ban?' />

anantasia, thks for helping, finally able to crack it using the 230207 version. for the 010307 version, everytime need to replace the code ret 0004 manually. btw wat's the differ betw 0103 ver and 2302 ver?

bah i can't crack mine version... i did all post's but when i press start the SV Crash! i'll crazy!

<hr>Append on Mar 20 2007, 14:11<hr> Anan you're the best =) i'm a realy noob! only need do this

Download Link for SV 4339 on 23 Feb, <-- See version of 23 of february
[Only registered and activated users can see links. Click Here To Register...]

40F6F8 < -- Replace with no code
40F8D2 < -- Replace with no code
40FABF < -- Replace with no code
40FAF4 < -- Replace with no code
40FB00 < -- Replace with no code
40FD34 < -- Replace with no code
40FD3B < -- Replace with no code
100037dc <- Replace with no code
100037dd <- Replace with no code
10003843 <- Replace with no code
10003844 <- Replace with no code

Do all this and do the Trainer!! bah my error = i did this more the all thing's off the post! THX VERY MUCH! i'll format my pc now huahuauhahu!

did the crack for the feb 23 correctly but it will popup a crash msg.
dont sent report or close the error msg.
just drag it to side and go to co screen to press f11.
haha.
it works.

back to botting. gluck hackers.

for the standalone sv do you need to unpack it first? if yes can someone post it?

in anantasias archive is unpacked SV also :rolleyes:
look wht u r downloading next time

@ Lake292
@ Anastasia

I have work on XVI32 stuff and i had a cuestion if u or anybody can answer me it'd be great.

I have replacing exe memori entries with 00 like this:

F6E8 < E8 C5 61 02 < 00 00 00 00
F8C2 < 0F 85 B2 11 < 00 00 00 00
FAA7 < 0F 84 C9 03 < 00 00 00 00
FAAF < 0F 85 C1 03 < 00 00 00 00
FAE4 < 0F 85 94 02 < 00 00 00 00
FAF0 < 0F 85 88 02 < 00 00 00 00

this is the same work that anastasia did with CheatEngine but i dunno how disable
the call of user32.dll - > UnhookWindowsHookEx cuz is dinamic linked.

I have looking for call [AdressOfUnhookWindowsHookEx] into the exe code but nothing .... my assamble knowledge is poor but i want improve it.

TY ;)

This morning i followed the post and i make vessel to work perfectly.

Byt now i get this message :

Welcom to use this Platform!
Logining......
Sorry, the Client is not accept. 2007-3-21 0:52:18

On F11 i get the meny to set up byt the character doesent move & attack at all.


any solution for this?

u cant crack directly unhook :rolleyes:
after u restart computer u have to change it with cheat engine...
thats why im using 3/02 version which can be cracked directly and is working also :D
and btw u ppl should try using this tool its similliar to XVI32 but u can put there adresses like anantasia posted so u dont have to search for code strings :) so that means u wont need to use trainer :) just run SV and play
if u have a little skill ull find out how to use but ill give u some tips :)
open HIEW and find sv.exe open it hit F4 choose decode so ull see same thing like u see with cheat engine but ull be able to edit files directly
press F5 which is go to adress write your adress enter... btw u should use '.' before number of adress but i think it works without also
then press F3 to edit the code of that adress into your desired code
and when u changed it u have to save it of course thats done with F9
and when all adress are replaced with 90s (no operation) and its saved u can go and run your patched SV
if anybody doesnt understand anything PM me or write here
here is the link of program
oops i just scanned it and it found this Trojan-Spy.Win32.GWGhost.A in it :eek:
i was using this for like 3 years didnt know about it :rolleyes: sorry guys dont download it rather
[Only registered and activated users can see links. Click Here To Register...]

here is website of this project [Only registered and activated users can see links. Click Here To Register...] but there is available only sharware version... that one is cracked u can try original version maybe it will help u more even if its shareware ;)
hope u guys enjoy :cool:

Thanks for the crack.
Works perfectly :D

um... i did the easy DIY + trainer
but after i made the "trainer" file
and when i run it, the "launch" button is grey and i cant press anything...
could anyone help me plz?

nobody will post cracked version :rolleyes:
[img]text2schild.php?smilienummer=1&text=Would u like to get ban?' border='0' alt='Would u like to get ban?' /> [/b][/quote]
Why? :cry: lol.

Why? :cry: lol. [/b][/quote]
Read DM2000 signature... he has there written instant ban for any distribution of cracked SV :rolleyes:

@ Lake292

Hi, thx for the help but i dont finish it yet. I have some questions(correct me if im wrong):

1.- Is this version that i have to use "ScriptVessel-4339.zip (2/23/07) <---- New Dont Pickup Item Function"? I dont know what 3/02 version is.

2.- Im using Hiew (great tool! ty) but i cant find some adress that anastasia posted:

100037dc <- Replace with no code
100037dd <- Replace with no code
10003843 <- Replace with no code
10003844 <- Replace with no code

Btw the tips that u did of Hiew are clear! TY :D

Why? :cry: lol. [/b][/quote]
if your too nub to follow simple instructions then your too noob to have the hacks anyone that is to lazy to follow blonde proof instructions doesn't deserve squate!

So quit askin for the easy way out and get someone to post it for you either do it yourself or go outside andplay in the sandbox.

can anyone help me?
trainer program "launch" button is grey

<hr>Append on Mar 20 2007, 21:39<hr> yay now i could launch...
but the problem is that everytime i patch the program, the computer hangs - the background doesnt refresh and like everything stops

this is because these adresses show in memory due to the call to dll there not in the exe

those remaining adresses are edits if your doing it by hex editing or manual edit i assume u must do in the countrymakeinus.dll and you should be golden :D

hiew is great tool just scan that file i posted after i cracked it... it says there is some trojan :rolleyes: so carefull i dunno im using it long and didnt have problem but its suspicious

Did the same thing...cracked sv and when i press F11 abd then Start it doesnt move or attack..:|
Can someone clear this up for me? :cry:

@Night666
i was talking about this version i tried and i think only this one is working atm
[Only registered and activated users can see links. Click Here To Register...]
download it... and using HIEW
open scriptvessel.exe
and change this adresses
40F6E8 < Replace with no code
40F8C2 < Replace with no code
40FAA7 < Replace with no code
40FAAF < Replace with no code
40FAE4 < Replace with no code
40FAF0 < Replace with no code
and after u made this u have edited SV file
now u just need to change that unhook
so run scriptvessel.exe and with cheatengine go into your memory view
and do like anantasia says
Press Ctrl + Alt + S in Cheat Engine and find UnhookWindowsHookEx write down address on the left XXXXXXXX

Go to address XXXXXXXX from above and Replace with command "Ret 0004"

exactly its adress 77D05DF3 and just change its code to ret 0004 and put no operation on 3 left bytes
then fill in pass and id press start on SV
it will say just loginning... and wont say anything more not even gray icons or what but it will work in game so open your co window and press F11
it should work :)
if any problems tell me where ;)

<hr>Append on Mar 20 2007, 23:53<hr>Did the same thing...cracked sv and when i press F11 abd then Start it doesnt move or attack..:|
Can someone clear this up for me? :cry: [/b][/quote]
only sv 4339 03/01 is working atm
older stopped moving like if there was data check again

@Lake292

Thx for the help, now i understand all.

I thought that we could make patch without cheat engine with HIEW Tool But the f*** UnhookWindowsHookEx function can be patched except in memory.

Anyway we have to do only 1 change with CE, It's ok but not cool.

@Tw3ak

I have edited the dll but I dont know exactly what look for cuz the adress seems to be normal code 100037dc ---> mov sp, cx and it suposed to be jmp ,call or any type of jump for patch.

Well i have learn some more about asm. TY :D

yea... i was searching for that to make it standalone but no success
but that one step wont kill if im doing it like once a week :) better then making 6 steps ;)

AhnLab-V3 2007.3.21.0 03.20.2007 no virus found
AntiVir 7.3.1.44 03.20.2007 no virus found
Authentium 4.93.8 03.20.2007 no virus found
Avast 4.7.936.0 03.20.2007 no virus found
AVG 7.5.0.447 03.20.2007 no virus found
BitDefender 7.2 03.21.2007 no virus found
CAT-QuickHeal 9.00 03.20.2007 no virus found
ClamAV devel-20070312 03.21.2007 no virus found
DrWeb 4.33 03.20.2007 no virus found
eSafe 7.0.14.0 03.20.2007 no virus found
eTrust-Vet 30.6.3496 03.20.2007 no virus found
Ewido 4.0 03.20.2007 no virus found
FileAdvisor 1 03.21.2007 No threat detected
Fortinet 2.85.0.0 03.20.2007 suspicious
F-Prot 4.3.1.45 03.20.2007 no virus found
F-Secure 6.70.13030.0 03.21.2007 no virus found
Ikarus T3.1.1.3 03.20.2007 Trojan-PWS.Lenmir.30 <---- :S
Kaspersky 4.0.2.24 03.21.2007 no virus found
McAfee 4988 03.20.2007 no virus found
Microsoft 1.2306 03.21.2007 no virus found
NOD32v2 2129 03.20.2007 no virus found
Norman 5.80.02 03.20.2007 no virus found
Panda 9.0.0.4 03.20.2007 no virus found
Prevx1 V2 03.21.2007 no virus found
Sophos 4.15.0 03.13.2007 no virus found
Sunbelt 2.2.907.0 03.16.2007 no virus found
Symantec 10 03.21.2007 no virus found
TheHacker 6.1.6.078 03.20.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.19.2007 no virus found
VirusBuster 4.3.7:9 03.20.2007 no virus found
Webwasher-Gateway 6.0.1 03.20.2007 Worm.Win32.Malware.gen (suspicious) <--- :S :dead: :dead:

the sv 4339 03/01 have virus we need clean (sv) plz .. :rolleyes:

there is no clean SV 4339 it was made with virus by creators :rolleyes:

only sv 4339 03/01 is working atm
older stopped moving like if there was data check again [/b][/quote]
77D05DF3 << -- is what it is on YOUR machine it is different on other peoples pc which is why anastasia said to find the adress on your own and do ret 0004 it won't be the same addy for all

like for me it is 77D4F22E ret 0004

that offset is only present in memory from user32 when SV is loaded.

also anything in the 7xxxxxx range in memory is kernel adress space and is protected you can't just patch user32 because other progies calling functions to it would cease to function. ( I believe why alot of peeps getting the drwatson crash bug )

The way i'm gonna go about it is patch it by form of injection.what i'm going to do is patch the caller to call something else instead then pad the PE with my own code then apon successful start of SV the injector will close.
:D

I dunno how anastasia patched his stand alone it may be similair or maybe he did it a easier/different way lol i dunno but i know this way works too i have done it before on prior co-part versions.


also note my 2/31 version still works fine like all my others before that.I dunno what you guys are patching wrong that they all die everyother day lol