µTorrent 1.7.2 without Multicast IP and call homes- Multicast disabled and IP removed
- BitTorrent Search Backlink anonymized
- update check server disabled and url removed
- related urls anonimized or removed
µTorrent 1.7.1 without Multicast IP and call homessame changes as above
Hexdump as text file with change log before/after is in the downloads include and instruction how to do.
This are no Leecher mod changes!!!Emulation Builds:
µTorrent 1.7.1 send id from µTorrent 1.6.1, you are shown you use Version 1.6.1
µTorrent 1.7.2 with emulation µTorrent 1.6.1, you are shown you use Version 1.6.1
it indicated version 1.6.1 is usedDownloads + Mirrors:
Step 1 (unpack uTorrent)
Original µtorrent 1.7.2 Build 3458 (213 KB) -> using
UPX -d filename.exe (Decompress see upx -?) =>
utorrent-1.7.2-build-3458-unpacked.exe (464 KB)
Step2 (make the changes with any Hexeditor)
Open the unpacked uTorrent.exe with a hexeditor and search for:
239.192.152.143:6771
Looks like:
04B100 32 2E 31 00 00 00 00 00 42 54 2D 53 45 41 52 43 2.1.....BT-SEARC
04B110 48 20 2A 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F H * HTTP/1.1..Ho
04B120 73 74 3A 20 32 33 39 2E 31 39 32 2E 31 35 32 2E st: 239.192.152.
04B130 31 34 33 3A 36 37 37 31 0D 0A 50 6F 72 74 3A 20 143:6771..Port:
04B140 25 64 0D 0A 49 6E 66 6F 68 61 73 68 3A 20 25 73 %d..Infohash: %s
04B150 0D 0A 0D 0A 0D 0A 00 00 30 2E 30 2E 30 2E 30 00 ........0.0.0.0.
04B160 32 33 39 2E 31 39 32 2E 31 35 32 2E 31 34 33 00 239.192.152.143.
04B170 69 6E 66 6F 68 61 73 68 3A 00 00 00 70 6F 72 74 infohash:...port
a little bit below:
04B940 53 00 65 00 6E 00 64 00 20 00 55 00 6E 00 63 00 S.e.n.d. .U.n.c.
04B950 68 00 6F 00 6B 00 65 00 00 00 00 00 53 00 65 00 h.o.k.e.....S.e.
04B960 6E 00 64 00 20 00 43 00 68 00 6F 00 6B 00 65 00 n.d. .C.h.o.k.e.
04B970 00 00 00 00 31 32 37 2E 30 2E 30 2E 30 00 00 00 ....127.0.0.0...
04B980 31 37 32 2E 31 36 2E 30 2E 30 00 00 31 36 39 2E 172.16.0.0..169.
04B990 32 35 34 2E 30 2E 30 00 31 39 32 2E 31 36 38 2E 254.0.0.192.168.
04B9A0 30 2E 30 00 31 30 2E 30 2E 30 2E 30 00 00 00 00 0.0.10.0.0.0....
and
04D210 75 00 54 00 6F 00 72 00 72 00 65 00 6E 00 74 00 u.T.o.r.r.e.n.t.
04D220 00 00 00 00 00 00 00 00 4D 2D 53 45 41 52 43 48 ........M-SEARCH
04D230 20 2A 20 48 54 54 50 2F 31 2E 31 0D 0A 48 4F 53 * HTTP/1.1..HOS
04D240 54 3A 20 32 33 39 2E 32 35 35 2E 32 35 35 2E 32 T: 239.255.255.2
04D250 35 30 3A 31 39 30 30 0D 0A 53 54 3A 75 70 6E 70 50:1900..ST:upnp
04D260 3A 72 6F 6F 74 64 65 76 69 63 65 0D 0A 4D 41 4E :rootdevice..MAN
04D270 3A 22 73 73 64 70 3A 64 69 73 63 6F 76 65 72 22 :"ssdp:discover"
following later
04D500 6A 00 6F 00 69 00 6E 00 20 00 6D 00 75 00 6C 00 j.o.i.n. .m.u.l.
04D510 74 00 69 00 63 00 61 00 73 00 74 00 20 00 67 00 t.i.c.a.s.t. .g.
04D520 72 00 6F 00 75 00 70 00 3B 00 20 00 45 00 72 00 r.o.u.p.;. .E.r.
04D530 72 00 6F 00 72 00 20 00 63 00 6F 00 64 00 65 00 r.o.r. .c.o.d.e.
04D540 3A 00 30 00 78 00 25 00 58 00 00 00 32 33 39 2E :.0.x.%.X...239.
04D550 32 35 35 2E 32 35 35 2E 32 35 30 00 00 00 00 00 255.255.250.....
The connection to Auto Update Server
0532F0 68 74 74 70 3A 2F 2F 75 70 64 61 74 65 2E 75 74 http://update.ut
053300 6F 72 72 65 6E 74 2E 63 6F 6D 2F 63 68 65 63 6B orrent.com/check
053310 75 70 64 61 74 65 2E 70 68 70 3F 76 3D 25 64 26 update.php?v=%d&
053320 71 76 3D 25 64 26 6C 76 3D 25 64 5F 25 64 5F 25 qv=%d&lv=%d_%d_%
053330 55 26 69 3D 25 64 26 6C 3D 25 55 26 63 3D 25 55 U&i=%d&l=%U&c=%U
053340 26 77 3D 25 58 26 68 3D 25 73 26 6B 3D 25 55 00 &w=%X&h=%s&k=%U.
053350 00 00 11 00 22 00 33 00 44 00 55 00 66 00 77 00 ....".3.D.U.f.w.
uTorrent Toolbar Default redirect Server:
056530 32 00 00 00 54 00 6F 00 6F 00 6C 00 62 00 61 00 2...T.o.o.l.b.a.
056540 72 00 57 00 69 00 6E 00 64 00 6F 00 77 00 33 00 r.W.i.n.d.o.w.3.
056550 32 00 00 00 68 74 74 70 3A 2F 2F 73 65 61 72 63 2...http://searc
056560 68 2E 75 74 6F 72 72 65 6E 74 2E 63 6F 6D 2F 73 h.utorrent.com/s
056570 65 61 72 63 68 2E 70 68 70 3F 71 3D 25 55 26 65 earch.php?q=%U&e
056580 3D 25 55 26 75 3D 31 00 25 73 25 73 00 00 00 00 =%U&u=1.%s%s....
Manuel update Server:
056D40 20 00 00 00 68 74 74 70 3A 2F 2F 77 77 77 2E 75 ...http://www.u
056D50 74 6F 72 72 65 6E 74 2E 63 6F 6D 2F 64 6F 77 6E torrent.com/down
056D60 6C 6F 61 64 2E 70 68 70 00 00 00 00 6F 1D 44 00 load.php....o.D.
Speed Test Server URL's
056F90 38 6B 29 00 68 74 74 70 3A 2F 2F 77 77 77 2E 64 8k).http://www.d
056FA0 73 6C 72 65 70 6F 72 74 73 2E 63 6F 6D 2F 73 70 slreports.com/sp
056FB0 65 65 64 74 65 73 74 00 68 74 74 70 3A 2F 2F 77 eedtest.http://w
056FC0 77 77 2E 75 74 6F 72 72 65 6E 74 2E 63 6F 6D 2F ww.utorrent.com/
056FD0 74 65 73 74 70 6F 72 74 2E 70 68 70 3F 70 6F 72 testport.php?por
056FE0 74 3D 25 64 00 00 00 00 63 72 42 00 8B 92 42 00 t=%d....crB.ïÆB.
Finally "Seba's 14 Joke "About" Dialog place:
05AB60 00 00 00 00 00 00 F0 BF A9 32 30 30 37 20 42 69 ......=+¬2007 Bi
05AB70 74 54 6F 72 72 65 6E 74 2C 20 49 6E 63 2E 0D 0A tTorrent, Inc...
05AB80 41 6C 6C 20 52 69 67 68 74 73 20 52 65 73 65 72 All Rights Reser
05AB90 76 65 64 2E 0D 0A 0D 0A 54 68 61 6E 6B 73 20 66 ved.....Thanks f
05ABA0 6F 72 20 75 73 69 6E 67 20 74 68 69 73 20 46 52 or using this FR
05ABB0 45 45 20 70 72 6F 67 72 61 6D 2E 20 57 65 20 68 EE program. We h
05ABC0 6F 70 65 20 79 6F 75 20 6C 69 6B 65 20 69 74 2E ope you like it.
05ABD0 20 49 66 20 79 6F 75 20 70 61 69 64 20 66 6F 72 If you paid for
05ABE0 20 69 74 2C 20 67 65 74 20 61 20 72 65 66 75 6E it, get a refun
05ABF0 64 21 0D 0A 0D 0A 54 68 61 6E 6B 73 20 74 6F 20 d!....Thanks to
05AC00 6C 75 64 64 65 2C 20 53 65 72 67 65 20 50 61 71 ludde, Serge Paq
05AC10 75 65 74 2C 20 7A 79 67 72 6F 6E 2C 20 61 6E 64 uet, zygron, and
05AC20 20 46 69 72 6F 6E 20 66 6F 72 20 61 6C 6C 20 74 Firon for all t
05AC30 68 65 20 68 65 6C 70 2E 00 41 6C 6C 20 66 69 6C he help..All fil
After here are only Language var paramaters
You can Website urls and IP numbers simple overwrite with points . or empty space and save the edited utorrent.exe as well you can replace these urls and ip numbers of your choice just the lengh must match or should be smaller. To customize website urls (sort url generators such as tiny url) may make it possible to change all urls for example using http://www.anonym.to/?http://www.whateversite.com/index.php -> is http://tinyurl.com/ypgwrl. There are redirrection services without any time delay in redirect to a url (anonymize) call homes.
please be patient, we will complete this guide with more detail informations and solutions.
Another quick solution is to add the websites url's and IP numbers in the
Windows HOSTS file:
in Windows\system32\drivers\etc\
edit HOSTSand add lines with:
127.0.0.1 239.192.152.143
127.0.0.1 239.255.255.250
127.0.0.1 172.16.0.0
127.0.0.1 169.254.0.0
127.0.0.1 192.168.0.0
# 127.0.0.1 10.0.0.0
On the other hand, if uTorrent will do kinds of suspected methodes in the client, uTorrent.exe will be done with a custom made exeprotector to make it difficult or impossible for the most to ever see the content but the small filesize will be gone or a good File Dump Tool for example Mgd (Multi Generic Dumper v.1.1 (C) 2006 by Snow Panther [Unpacking Gods]) can do in a second a dump.
* Usage : MGD
* Commands : A - Dump a part of process memory
- Parameters : [dumpfile]
- Additions : -K, -M, -P, -Z
C - CoolDump's EXE unpack
- Parameters : [ ]
- Additions : -D, -K, -M, -P, -W, -Z
G - Generic EXE unpack
- Parameters : none
- Additions : -D, -H, -I, -K, -M, -P, -Z
T - Trace EXE unpack (not implemented)
- Parameters : []
- Additions : -D, -I, -K, -M, -P, -Z
? - Help______________________________________________________________
µTorrent 1.7.1
µTorrent 1.7.1 - emu µT 1.6.1
µTorrent 1.7.2
µTorrent 1.7.2 - emu µT 1.6.1
waiting please link comming in an hour or two. There come some more mods cause the feature to discover local LAN/WAN can possible be in another uTorrent mod enabled using real internal IP
The instrucion guide how you can do the changes by self will be inculed the ready mods. They are unpacked so you can look into it. Mods no matter if eMule or any Bittorrent client done with a eXe Protector is no advice to use it ever, there can be something else inside what we don't know. uTorrent need to unpack only UPX, its a exe compressor/packer not protector and a Hexeditor to do the changes if you are unsure.
Testers work on the builds before links to public!!!
Instructions how to spoof uT 1.7.x Versions with uT 1.6 follow.
Ultimate Packer for eXecutables
Copyright (C) 1996,1997,1998,1999,2000,2001,2002,2003,2004,2005,2006,2007
UPX 3.00 Markus Oberhumer, Laszlo Molnar & John Reiser Apr 27th 2007
Usage: upx [-123456789dlthVL] [-qvfk] [-o file] file..
Commands:
-1 compress faster -9 compress better
--best compress best (can be slow for big files)
-d decompress -l list compressed file
-t test compressed file -V display version number
-h give this help -L display software license
Options:
-q be quiet -v be verbose
-oFILE write output to 'FILE'
-f force compression of suspicious files
--no-color, --mono, --color, --no-progress change look
Compression tuning options:
--brute try all available compression methods & filters [slow]
--ultra-brute try even more compression variants [very slow]
Backup options:
-k, --backup keep backup files
--no-backup no backup files [default]
Overlay options:
--overlay=copy copy any extra data attached to the file [default]
--overlay=strip strip any extra data attached to the file [DANGEROUS]
--overlay=skip don't compress a file with an overlay
Options for watcom/le:
--le produce LE output [default: EXE]
Options for win32/pe, rtm32/pe & arm/pe:
--compress-exports=0 do not compress the export section
--compress-exports=1 compress the export section [default]
--compress-icons=0 do not compress any icons
--compress-icons=1 compress all but the first icon
--compress-icons=2 compress all but the first icon directory [default]
--compress-icons=3 compress all icons
--compress-resources=0 do not compress any resources at all
--keep-resource=list do not compress resources specified by list
--strip-relocs=0 do not strip relocations
--strip-relocs=1 strip relocations [default]
--all-methods try all available compression methods
--all-filters try all available preprocessing filters
file.. executables to (de)compress
UPX comes with ABSOLUTELY NO WARRANTY; for details visit http://upx.sf.net
But...
http://whois.domaintools.com/192.168.0.0
27 other sites hosted on this server.
- Cdma1xcn.com
- Cuppyconsulting.com
- Erikreuter.com
- 25 more...
