December 2012 CShell

Acea · 2012-12-27T00:38:42.000Z

http://unfairgaming.com/logo.png https://www.virustotal.com/file/27dcfca85c1ed19cb08396dd8efa48c72f7b63be58c7a93b9e67f977bee5e365/analysis/1356564581/ http://virusscan.jotti.org/en/scanresult/9daa696ac777ae1deae965b1903b1f5e9c963e79 136686

https://www.virustotal.com/file/27dc...is/1356564581/
http://virusscan.jotti.org/en/scanre...3b1f5e9c963e79

Dec. 2012 Cshell Dump_mpgh.net.rar

Thanks for contributing. I needed this myself.

Approved.

Jotti Scan

Aww you removed my Turkey D:

Originally Posted by Acea

Aww you removed my Turkey D:

I didn't think I did

Well you put it back now anyway.

@Flengo
congrats on Minion. I'm about to be wiki editor and donater lol. And thanks for this do you have a 32 bit or 64 bit pc?

@JohnFame
It's obviously 32-Bit for Kernal Detector , or he's using master131's Module Dumper which can allow you to dump cshell.dll on 64-Bit than using LordPE to rebuild it and therefore removing the .dmp extension and opening it in either IDA or Olly and looking for bytes & addresses.

Originally Posted by JohnFame

@Flengo
congrats on Minion. I'm about to be wiki editor and donater lol. And thanks for this do you have a 32 bit or 64 bit pc?

Okay, but I dont think Module Dumper works, because I tried it many times and it failed to give me the fully dumped cshell and just gave me the original file from the ca folder for some reason.

I love you for this... Thanks soo much i needed it!

Originally Posted by ZinisterCoder

Actually those are both incorrect, I unlocked my windows 7 64-bit, I use kernel detective.

Originally Posted by Acea

Actually those are both incorrect, I unlocked my windows 7 64-bit, I use kernel detective.

Someone could easily create a way to load the library on your own and go along from there. With minimal effort. For those who complain about being on 64-Bit OS's.
@Ch40zz-C0d3r is the one that keeps telling everyone to do so

Pmed you ACEA

December 2012 CShell

Post a Reply

Similar Threads

Tags for this Thread