Results 1 to 2 of 2
  1. #1
    kamilah's Avatar
    Join Date
    Feb 2011
    Gender
    male
    Posts
    6
    Reputation
    10
    Thanks
    0

    please help me. This code has been detected hackshield

    Code:
    /*
      Name: RCDBase2
      Copyright: RCD
      Author: RCD
      Date: 18/12/10 14:27
      Description: Base dasar agar lebih mudah membuat Hack dengan RCDLogger3
      ChangLog : Perubahan pada beberapa string yang telah terdeteksi
    */
    #include "cbase2.h"
    #include "addys.h"
    
    LPTSTR i3engine = "PointBlank.i3Exec"; 
    DWORD adrWSOn, adrWSOff, OldProtection;
    BYTE RET[] = {0xC3}; 
    BYTE PUSH_EBP[]= {0x55}; 
    BYTE RET1[] = {0x00};
    BYTE PUSH_EBP1[]= {0x01};
    
    
    
    void UnProtectAndModify(DWORD Offset, DWORD Pointer, DWORD Length){
    VirtualProtect((void *)Offset, Length, PAGE_EXECUTE_READWRITE, &OldProtection); 
    RtlMoveMemory((void *)Offset, (const void*)Pointer, Length); /
    VirtualProtect((void *)Offset, Length, OldProtection, &OldProtection); 
    
    }
    
    void MEMpatch( BYTE *Offset, BYTE *ByteArray, DWORD Length){
         
    UnProtectAndModify((DWORD)Offset , (DWORD)ByteArray , 1);
    
    }
    
    DWORD WINAPI InitAllHacks(LPVOID param) 
    
    {
          while (1) { 
                    if (GetAsyncKeyState(VK_F1)&1) { 
                            DWORD dwI3CubeExec = (DWORD)GetModuleHandleA(i3engine); 
                            if (dwI3CubeExec > 0) { 
                                    adrWSOn = dwI3CubeExec + (DWORD)ADR_WALLSHOT;
                                MEMpatch((BYTE*)adrWSOn, RET, sizeof(RET)); 
                                adrWSOn = dwI3CubeExec + (DWORD)ADR_WALLSHOT_NOBT;
                                MEMpatch((BYTE*)adrWSOn, RET, sizeof(RET));
                    MessageBeep(1); 
                    
                                            }
                            }
                            
                    if (GetAsyncKeyState(VK_F2)&1) { 
                                DWORD dwI3CubeExec = (DWORD)GetModuleHandleA(i3engine); 
                                if (dwI3CubeExec > 0) {
                            adrWSOff = dwI3CubeExec + (DWORD)ADR_WALLSHOT;
                                MEMpatch((BYTE*)adrWSOff, PUSH_EBP, sizeof(PUSH_EBP)); 
                                adrWSOff = dwI3CubeExec + (DWORD)ADR_WALLSHOT_NOBT;
                                MEMpatch((BYTE*)adrWSOff, PUSH_EBP, sizeof(PUSH_EBP)); 
                                    MessageBeep(1);sukses di eksekusi
                                    
                                            }
                            }
     
                    Sleep(10); 
            }
            return (0); 
    }
    BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
    {
            DisableThreadLibraryCalls(hDll); 
            if (dwReason == DLL_PROCESS_ATTACH) { 
                    MessageBox (0,"[PointBlank] Simple Hack powered by RCD Logger 3 and RCD Base 2 !\nCredits to :\n-MEMpatch [Credit RCD]\n-RCD Logger [Credit RCD]\n-RCD Base 2 [Credit RCD]\n-Check Handle I3Exec [hrd]\n\nYang gak ngasih credit leecher permanen hohohohoho","Welcome", MB_OK | MB_ICONINFORMATION); 
    
                                    CreateThread(0, 0, (LPTHREAD_START_ROUTINE)InitAllHacks, 0, 0, 0); 
                                    MessageBox (0,"F1 => WallShoot ( On. )\n\nF2 => WallShoot ( Off )","C.I.V.D.L", MB_OK | MB_ICONINFORMATION); // berikan salam pembuka jika dll telah ter-attach ke PROCESS
                                    CreateThread(0, 0, (LPTHREAD_START_ROUTINE)InitAllHacks, 0, 0, 0); 
                                    MessageBox (0,"Credit By : ADrace Shino \n\nSpecial Thank To : RCD ( N3 )","C.I.V.D.L", MB_OK | MB_ICONINFORMATION);
                                    CreateThread(0, 0, (LPTHREAD_START_ROUTINE)InitAllHacks, 0, 0, 0);
                                    
            }
            TCHAR strDLLName [MAX_PATH];
    GetModuleFileName(hDll, strDLLName , MAX_PATH);
    if (strstr(strDLLName, "Drace Shino.dll") <= 0) {
    MessageBox(0, "Woy Apa Yang Kau Lakukan Dengan DLL ku.....?", "WARNING", MB_OK + MB_ICONSTOP );
    MessageBox(0, "Balikin Nama DLL nya Drace Shino", "WARNING", MB_OK + MB_ICONSTOP );
    ExitProcess(0);
    }
    }

    Please Help Me

  2. #2
    Hell_Demon's Avatar
    Join Date
    Mar 2008
    Gender
    male
    Location
    I love causing havoc
    Posts
    3,976
    Reputation
    343
    Thanks
    4,320
    My Mood
    Cheeky
    No, figure it out yourself leecher...
    Ah we-a blaze the fyah, make it bun dem!