esshole³
21st February 2007, 14:58
hmm nice the README-Helios-Framework-v2.0-CSS.txt.exe isnt a textdocument, it has a text document ico but its in reality a pe file. nice... even the virus scans came up all clean, to bad someone had to use pebundle. seems someone needs new cs keys. get a life hoe
HelioS-Framework-v2.0.exe has add on my test pc the following registry entries
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\oreans32]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):5c,00,3f,00,3f,00,5c,00,43,00,3a,00,5c,00, 57,00,49,00,4e,00,\
44,00,4f,00,57,00,53,00,5c,00,73,00,79,00,73,00,74 ,00,65,00,6d,00,33,00,32,\
00,5c,00,64,00,72,00,69,00,76,00,65,00,72,00,73,00 ,5c,00,6f,00,72,00,65,00,\
61,00,6e,00,73,00,33,00,32,00,2e,00,73,00,79,00,73 ,00,00,00
"DisplayName"="oreans32"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\oreans32\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00, 00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00 ,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00 ,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00 ,05,12,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\oreans32\Enum]
"0"="Root\\LEGACY_OREANS32\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
and has add a new driver file with name oreans32.sys in C:\WINDOWS\system32\drivers
look at the attachment, this cracked release dont work. its bound to a hardware id key.
just reboot, push f8 and boot in safe mode and delete the shiznez.
vBulletin® v3.7.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.