[Request] Cara buka PointBlsnk.13exec gmna?

[ariganteng]

Mau tanya niiih buat Admin / Bang Ridho / Cheater Lainnya. . . .

saya sudah berulang2 men-Dumped PB.13exec dengan 13execOnTheFly . . .

tetapi sama saja . . . .

saat saya buka Selalu terjadi Error . . . .

kalo di video nya Bang Ridho Kurang jelas . . .

minta tolong Gambar saja . . . .

[ridhotherock]

Mau tanya niiih buat Admin / Bang Ridho / Cheater Lainnya. . . .

saya sudah berulang2 men-Dumped PB.13exec dengan 13execOnTheFly . . .

tetapi sama saja . . . .

saat saya buka Selalu terjadi Error . . . .




kalo di video nya Bang Ridho Kurang jelas . . .

minta tolong Gambar saja . . . .

Product Name : I3ExecOnTheFly

Creator : RCD a.k.a richardiy

Compiler : LCC Win32





Quote
DUMPING TUTORIAL
1.
[You must be registered and logged in to see this image.] [You must be registered and logged in to see this link.]
C&P I3ExecOnTheFly ke directory dimana PB berada,,,,dan jalankan
2.
[You must be registered and logged in to see this image.] [You must be registered and logged in to see this link.]
Jalanin aja petunjuknya sampe sukses, .i3Exec ter-load
3.
[You must be registered and logged in to see this image.] [You must be registered and logged in to see this link.]
Tinggal diDump, Enjoy







Kalau udah diDump, kamu bisa mencari offset dengan OllyDBG, scan AOB dari CE [Open Process : LOADLL.EXE], dan lain lain,,,,




Quote
SCAN AOB TUTORIAL
Load File hasil Dump pake OllyDBG, trus buka CE, Open Process [LOADDLL.EXE],,,,
Centang "Also Scan Read Only Memory",,,,,,trus pilih value type jadi "Array Of Bytes"

Contoh :


Quote
SYGNATURE : 55 74 00 00 E9 EB C4 00 00 C3
MASK : x x ? ? x x ? ? ? x




Maka di Ch*at Engine, Sygnature menjadi


Quote
55 74 ?? ?? E9 EB ?? ?? ?? C3











DOWNLOAD : [You must be registered and logged in to see this link.] (31.5K)

Number of downloads: 1389



[You must be registered and logged in to see this link.]

Spoiler VirusTotal

Antivirus results
AhnLab-V3 - 2011.03.19.00 - 2011.03.18 - -
AntiVir - 7.11.5.1 - 2011.03.18 - -
Antiy-AVL - 2.0.3.7 - 2011.03.19 - -
Avast - 4.8.1351.0 - 2011.03.18 - -
Avast5 - 5.0.677.0 - 2011.03.18 - -
BitDefender - 7.2 - 2011.03.19 - -
CAT-QuickHeal - 11.00 - 2011.03.18 - -
ClamAV - 0.96.4.0 - 2011.03.19 - -
Commtouch - 5.2.11.5 - 2011.03.18 - -
Comodo - 8033 - 2011.03.19 - -
DrWeb - 5.0.2.03300 - 2011.03.19 - -
Emsisoft - 5.1.0.2 - 2011.03.18 - -
eSafe - 7.0.17.0 - 2011.03.17 - -
eTrust-Vet - 36.1.8223 - 2011.03.18 - -
F-Prot - 4.6.2.117 - 2011.03.18 - -
F-Secure - 9.0.16440.0 - 2011.03.18 - -
Fortinet - 4.2.254.0 - 2011.03.19 - -
GData - 21 - 2011.03.19 - -
Ikarus - T3.1.1.97.0 - 2011.03.18 - -
Jiangmin - 13.0.900 - 2011.03.18 - -
K7AntiVirus - 9.94.4145 - 2011.03.18 - -
Kaspersky - 7.0.0.125 - 2011.03.19 - -
McAfee - 5.400.0.1158 - 2011.03.19 - -
McAfee-GW-Edition - 2010.1C - 2011.03.18 - -
Microsoft - 1.6603 - 2011.03.18 - -
NOD32 - 5967 - 2011.03.18 - -
Norman - 6.07.03 - 2011.03.18 - -
nProtect - 2011-02-10.01 - 2011.02.15 - -
Panda - 10.0.3.5 - 2011.03.18 - -
PCTools - 7.0.3.5 - 2011.03.19 - -
Prevx - 3.0 - 2011.03.19 - -
Rising - 23.49.04.05 - 2011.03.18 - -
Sophos - 4.63.0 - 2011.03.19 - -
SUPERAntiSpyware - 4.40.0.1006 - 2011.03.19 - -
Symantec - 20101.3.0.103 - 2011.03.19 - -
TheHacker - 6.7.0.1.151 - 2011.03.18 - -
TrendMicro - 9.200.0.1012 - 2011.03.19 - -
TrendMicro-HouseCall - 9.200.0.1012 - 2011.03.19 - -
VBA32 - 3.12.14.3 - 2011.03.18 - -
VIPRE - 8750 - 2011.03.19 - -
ViRobot - 2011.3.19.4365 - 2011.03.19 - -
VirusBuster - 13.6.256.1 - 2011.03.18 - -
File info:
MD5: 8763dcf9d7c85e3823ca4190b46c9718
SHA1: 09af632a5ec18f7e9feb984dfb3e0960fe3418c7
SHA256: 9e46675e9cae4a2b38d186087e95cbe5edec776a52bed6321ca1b2cd30d009f7
File size: 32256 bytes
Scan date: 2011-03-19 05:25:31 (UTC)









Please dont post this anywhere else.


Attached thumbnail(s)

• 
  [You must be registered and logged in to see this link.]
  
• 
  [You must be registered and logged in to see this link.]
  
• 
  [You must be registered and logged in to see this link.]
  

[ariganteng]

Jaah copas di nyit2 =.=a

[Sponsored content]