04 October 2007

New Adware bundled torrent client: TURBO TORRENT

1 comments


• Clean and free, without any adware or spyware.
• Stable and fast core, very low CPU usage.
• The most visually appealing as well as feature rich Bittorrent client.
• Built-in Web based Torrent search engine.
• Very intuitive and user friendly GUI.
• Comes complete with Install / Uninstall Wizard.
• Built-in Torrent Search Engine (Web based).
• Multiple simultaneous downloads, ability to select download files in one torrent and set file priority.
• Queuing and downloading of multiple torrents. (Starting, stopping, pausing, queue up, queue down etc)
• Ability to limit the upload speed as well as download speed.
• Intelligent Connection Optimize, Auto Optimization for different connections, runs well using all default settings.
• Intelligent Rate Control, optimize the upload distribution in order to get the max download rate.
• Intelligent Disk Allocating, no long-time disk allocation, also decrease the disk fragment to almost zero.
• Intelligent Hash Scan, no time-consuming scanning when seeding / resume.
• Ability to block IP temporarily or permanently.
• Support Muti-tracker torrent format, and utf-8 extension, UDP tracker Protocol.
• Real-time list of peer addresses and their statistics. Reverse DNS toggle-able.
• Advanced Progress bar graphically illustrates which pieces of the file have been downloaded.
• A graph to display upload and download rates over time. Each torrent being downloaded has it's own graph record.
• Optional Web Interface for remote adminstration.
• Friends Priority System. Friends IP address can be set to get upload preference if they are downloading the same file.
• Temporary upload priority can be given to peers by right clicking them in the list.
• Peers can be banned by right clicking them in the list.
• Detailed message view for statistics and error reporting.
• System tray icon graphically displays upload download statistics.
• Can be set to use user customizable folders for storing torrent and incoming files.
• User customizable upload choker (the choker determines which peer you upload to):
• User customizable color settings to change look and feel.
• User customizable global upload rate.
• User customizable upload behavior (upload rate / number of uploads)
• User customizable listening ports, ip bindings
• Multi-Tracker support
• Written in Python. Utilizes wxWidgets.

Website: http://www.turbotorrent.com/
Advertiser u.a.: http://www.netzwelt.de/software/3882-turbo-torrent.html
http://icehouse-forum.at/index.php?showtopic=4063
http://turbo-torrent.uptodown.com/
http://www.google.com/search?q=turbo+torrent

Virus info:
Adware.Whenu.E
MEDIUM
VERY LOW (Europe - Germany - Spain - Poland and South America - Brazil)
Size: varies
Found : 2007 Jun 19
* %ProgramFiles%\VVSN\VVSN.exe
* %ProgramFiles%\VVSN\VVSN.cfg
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ "VVSN" = "%ProgramFiles%\VVSN\VVSN.exe"

more info: http://www.bitdefender.com/VIRUS-1000147-de--Adware.Whenu.E.html
http://www.turbotorrent.com/turbo.exe

same schematic as the other malware clients. One and the same Webtemplate under different names and styles hosted.

Virus update: in latest Version are 3 Viruses:
  • Virus Name: Application.Adware.Savenow.G
  • Virus Name: Adware.BHO
  • Virus Name: Adware.VB
Setup Installer unpacked content:

WINDIR\System32:
coltea.dll
odbvgie.dll

+
Program Dir\
VVSN\VVSN.exe (Save Now Ads)

[Settings]
Rect=1044
NumFields=6
Title=Turbo Torrent is supported by advertising.

[Field 1]
Type=bitmap
...

[Field 2]
Type=Label
Text=You help support Turbo Torrent by agreeing to install WhenU SaveNow advertising software. While you are browsing online, our software will display pop up advertisements and comparison shopping results related to your Web-browsing activity.\r\n\r\nWe respect your privacy. We collect only non-personally-identifiable information so we can deliver more relevant advertising and improve the performance of our software. To find out more,\r\n or call us toll-free at 1-866-WhenU-11.\r\n\r\nPlease read our and
...

[Field 3]
Type=Link
Text=click here
State=http://www.whenu.com/moreinfo.html
...

[Field 4]
Type=Link
Text=End User License Agreement
State=http://www.whenu.com/products_savenow_la.html
...

[Field 5]
Type=Link
Text=Privacy Policy.
State=http://www.whenu.com/pc_savenow.html
...

[Field 6]
Type=Label
Text=By clicking "Next" below, I agree to download this software, and I accept the terms of the End User License Agreement and Privacy Policy.
...


Its G3 Pyton BitTorrent Build File Dates: 06/14/2006 engine G3 src recompiled with a small gui changes, BHO dll's added and bundled with advertising second application.

Turbo Torrent comes with Malware
TorrentSpy and the others
malware clients are Rufus Original modification and added with Adware

Read more Wikipedia
(
malware clients version of Rufus created by TorrentSpy with WhenU SaveNow adware bundled in it)

eMule 0.48a ZZUL BastarD v1.9.1

0 comments
(JPG)

26.09.07
Version 1.9.1
Based on ZZUL 0.48a code by zz

* ADD: BestShare payback.
* ADD: conditional compilation
* ADD: Green back color for collections in SharedList
* ADD: 4-way sorting for rating/U-D in client queue & upload queue
* ADD: sorting on upload conditions column is now possible
* ADD: shortcut [CTRL]+[F] to immediately assign a Friend Slot
* REM: PushSmallFile option for collections
* CNG: Old PowerRelease is now called SuperRelease and the priority given to a file is dynmic depending on the shared ratio value.
Quick description:
- priority is set at max (100) when share ratio < 2
- at each share ratio unit increase file upload priority is decreased of 10 (so at 2 it becomes 90, at 3 is 80... at 9 is 20 and at 10 is 10)
- minimum priority for SuperRelease file is however 10 whatever the share ratio
* CNG: NiceHash parameters tuned a little bit (at higher load the CPU is now used a bit more)
* FIX: friend slot assignment & interface update
* FIX: friend note was broken in 1.9.0 (sorry)
* FIX: server removal when max number of retries is set to 0.
Now with that setting no server is going to be removed from server list even though the connection fail lots of times
* FIX: upload client available chunk in upload list
* New shortcuts to easily set file upload priority in SharedFiles list:
- [CTRL]+# where # is from 0 to 9 immediately sets the priority to that value (0 means priority = 10)
- [CTRL]+[+] increases priority
- [CTRL]-[-] decreases priority
- [CTRL]+[] sets SuperRelease

19.06.07
Version 1.9.0
Based on ZZUL 0.48a code by zz
* Same as 1.8.3 functionality but with 0.48a core
* Mostly bug fix

Téléchargement ed2k:
Executable (ed2k) Source (ed2k)
Download Binaries & Sources @eMuleFuture

Azureus 3.0.3.4

0 comments
Changes in Azureus 3.0.3.4
2007.10.04:
FEATURE: UI | Added "All Peers" view [amc1]
CHANGE: Core | Added workarounds for some buggy UPnP router implementations [parg]
CHANGE: UI | NAT status bar indicator and health icons now ignore UDP and LAN-local connections [The 8472]
BUGFIX: Core | Fixed bug where a torrent's save location is "forgotten" when a recheck is done in some circumstances [amc1]
BUGFIX: Core | Fixed MacOSX playback bug [TuxPaper]
BUGFIX: Core | Fixed update restart bug [Parg]

Homepage: http://azureus.sourceforge.net

Download for Windows: http://downloads.sourceforge.net/azureus/Azureus_3.0.3.4_windows.exe
Mirror: http://static.zudeo.com/files/Azureus_3_0_windows.exe
Other OS and SRC

Thunder 5.7.2.371 DDR Source Project

1 comments
About Thunder DDR Mod Hack:

Thunder 5.7.2.371 DDR1.5 Advertising free version
The reversing hack source code

Thunder5.7.2.371 DDR Ver1.5 SourceProject ReadMe
I announced today I write source code, learning to play the role of the exchange, because in the near future there, I will be involved in a very important test, although the results of the examination is not important for me in terms of, but I definitely wanted to efforts. I will not have time to defend these things, instead of it lying in the drive, the better off, so I can heart Saitantan to review all of the homework, otherwise resort of heart.

Well, the software things, including the documentation and code for myself, I have a detailed record and debugging large number of documents recorded, but unfortunately are written in the papers, so I can upload, but I can put all the code of upload, although our understanding of it some will be difficult, but I explained in a little below, in order to have a global concept.

Local Download:
http://bbs.happyhome.name/upload/DDR_371Project_Source.rar
Microsoft network drives download:
http://cid-778609f9f4685429.skydrive.live.com/self.aspx/Public/DDR_371Project_Source.rar

Source directory and document summarization explained:
.........This is the main directory
371Project .........这个是迅雷5.7.2.371版的目录
LinkSimulate .........这个是模拟链接的ATL框架支持的ActiveX源代码
s_parselink .........模拟链接解密静态库源代码(即base64解码编码库)
setup371 .........这个是5.7.2.371安装脚本和迅雷安装文件
ThunderSetting .........这个就是大家熟悉的"DDR迅雷设置中心"的源代码了
tpatch371 .........细心的人一定知道DDR迅雷program目录里面有个tpatch.dll文件, 这个就是那个文件的源代码
iTargetAD_Re .........这个是我改写的iTarget.dll文件的ASM源代码,为什么用asm写,你打开看就知道了。

Build environment:
Visual Studio 2005
masm32(This is win32 ASM Compiler, only iTargeAD_Re in a directory of files you will need it)
Inno Setup5 (Script Compiler, setup371 contents packaged need it)

  If you want to practice editing operation, it would need the above three software. I can guarantee is perfectly through the compiler, and if you do not understand some of the compiler or some not familiar with the environment, do not need to worry too much, you can look at the source code, on the basis of the understanding and use their familiar environment to rewrite.

  Of course I admit that some of them written in code does not seem to be very elegant, but it is not my real level, I only can run up to code, not to find ways to help code has become more beautiful, because the family was not supported program, I can only write a gap between interludes, although this was quite bad, but it is also expedient 1:00, but I still add many notes you see in the paper I was the Notes are added, the notes will be the source of light, without any changes and deletions (You will find the same in many wrong notes other characters ^ _ ^).

  Welcome everyone to rewrite, can also raise questions and views, but I might not be able to give an answer to a control time online, so I do not have much hope. But I will have time for the occasional look at the back :-)

And then to say that, some time ago there are many netizens to visit my space, Happyhome, I often tell my friends, my visit statistics is called up to the noises, almost close to tan (x) (0 to PI / 2) those curves, but the future of 100 many days, may not go out my version, because I have a new goal. Now 2007.9.27 8:55, I do not know what the new version of the Thunder will be a time, in fact, I would like to give us a new version of the 380 (call it the moment) modified the source code, but I can not wait, this can not be regarded as a matter of regret, but I hope that when I come back to see more interesting cool version ......

  Of course light source is not enough, some things I want you to use OllyDbg or other debugging software. In fact this is not difficult, at best, only a simple CrackMe it, but there should be some patience, more comprehensive analysis of the results recorded.

  tpach371 Contents of the file is the key to shielding advertising can be used LordPE software tools, or similar procedures inside inserted into Thunder because with the way memory is rewriting that can be combined OllyDbg, In memory of rewriting code before and after the changes. Otherwise, you just look at this part of a code might be rain, because some local use asm can explain. 1:00 to give tips on how to debug, I suggest you inside the debuggerWriteProcessMemory, in memory of rewriting code before and after the changes.

  ThunderSetting Contents of the file is Thunder set DDR Center; is a rewrite of GUI Shell ini files, and there is nothing substantive content, but it has set up convenient.LinkSimulate Simulation is the key link, although T is the crux of the simple but very clear, I look at the IDL document description, a COM replace it, I get all the parameters Thunderbolt threw it to the COM, working, and I had to stop it is.
  s_parselink Yes static libraries, LinkSimulate and tpatch371 it will be called, there are two base64 decoding and encryption functions, and some special links conversion function, the chain will not be intimidated, I have here the full conversion method.

  iTargetAD_Re The most simple, I also added a makefile document, so you will not compile time too tired, huh ....
  Then setup371 libary a script compiler code, and the removal of community interaction OCrack_XLCommunity.dll.bak files, you can put it with the genuine XLCommunity.dll by comparison tool to control document, a change Oh, of course, see some 16-digit string is not any different significance, you have to practice to OllyDBG below what in the end to what has changed, why such a change, this will be harvested ....

Actually, I should put all the items inside a project, but I did not do so, leading to more chaos directory now, but I have the strength to do our best to have all explained again.

  Well, so I have to pick the key points are clear, and the rest to rely on yourself, you are willing to change how Tim ah ah ah censored can, the best way out is to digest all of that and then Ctrl-Delete, re-create their own.

  Finally, I would like to quote the New teachers do at the end of the sentence: From despair find hope, life will eventually glory.......

Date: Birthday
by DDrMsdos

All DDR Project Downloads:

English FAQ and Translation Pack for Thunder:
I am using Xunlei English Translation

03 October 2007

RegDoctor v1.88

0 comments

(Released September 14, 2007)

Fix Windows Registry Problems to Improve Your System's Performance

Is your computer running slow? Are you experiencing computer crashes or windows error messages? Do you want to improve your system performance and stability? If you are answering yes, then you very likely need to clean up your Windows registry.

Registry problems are the common cause of Windows crashes, error messages, and degraded performance! RegDoctor can safely and quickly clean and repair Windows registry problems with a few simple mouse clicks! RegDoctor uses an intelligent, high-performance detection engine to accurately identify missing and invalid references in your Windows registry. Identified registry problems are listed and rated by risk level using an easy to understand color-coded system for your information. You can choose to have RegDoctor automatically repair all identified problems, or more selectively choose which problems to repair immediately. RegDoctor also offers a Restore feature to create registry backup files, giving you the capability to safely undo any registry changes.

The auto-start feature of RegDoctor helps to support its regular use. By using RegDoctor regularly to clean and repair your registry, your system should not only be more stable but it will also help Windows and your software run faster. Click here for more information on why you need software for cleaning your Windows registry.

Works with Windows 95/98/ME/2000/XP/Vista.
FullSetup by AxMan
special greetings to the old Amiga and Commodore C64 scene.


Download Full Setup: - Mirror - Mirror - Mirror - Mirrors - Mirrors

Download site1 - site2

The complete optimized EdiTion: Download - Mirrors - Mirrors

NoLimit v 2.0 Datefaker (emule mods with expiration time?)

2 comments
Nolimit date faker - NoLimit is a datefaker!

Nolimit date faker


--\ ____ _____ /--
---\ / __/ / ___/ /---
----\ / /__ / / /----
-----\ /__ / / / /-----
------\ ___/ / / /___ /------
------/ /____/HMEiT /_____/ORP \------
-----/ \-----
----/ \----
----\ Knowledge For Fun /----
----/ Knowledge For Free \----
----\ /----
-----=>> 1999 & Forever <<=----- Smeita Proudly Present NoLimit 2.0

For the english, see the starting lines...
Pour le francais, aller plus bas...

-----------------------------------------------------------------------
ENGLISH INFORMATION |
--------------------

NoLimit is a datefaker !
Let me explain you this with an example.... :

We are the 1st August, and you have just download a cool shareware...
At the 31th August, you launch your cool shareware and a nasty nag
screen inform you that you cannot use this prog now because the
30 days limit is passed...bad news...

The first reflex is to find a crack on internet...
Bad luck this time, you haven't find any crack for this shareware :((

Oh, Sheet !! What can you do ??!
Here it is ! NoLimit can help you ! :))

So, you launch NoLimit..

-First, you must select the main Executable of your cool shareware.
-Secondly, you have to enter a date before the date of expiration...

So, we are on 31th August...
From the 1st to the 30 August, you have used the shareware with no
problemo...So, enter a date between the 1st and the 30 August...
"15/08/1999" for example...

-Quit NoLimit...

Then, a little launcher has been created by NoLimit in his
installation directory...Launch it !
"It's a kind of magic !" :))
Now, you can use your coolshareware by executing this launcher...
You can create a new shortcut to it, you can move it to another
directory...BUT NEVER RENAME IT OR IT WILL NOT RUN PROPERLY !!
----------------------------------------------------------------------
INFO en FRANCAIS |
-----------------

NoLimit est un DateFaker !
Laissez moi vous expliquez ca avec un exemple... :

Nous sommes le 1 Aout, et vous venez de telecharger un shareware cool!
Arrivé au 31 Aout, vous lancez ce shareware et...un vilain nag-screen
vous informe que vous ne pouvez plus utiliser ce shareware car vous
avez dépassé la limite de 30 jours....Pas cool :(((

Votre premier reflex : chercher le crack sur sur internet !
Seulement, pas de chance, vous ne le trouvez pas... :((

Que faire ? C'est là qu'intervient NoLimit 2.0 !!
Lancez NoLimit...

-D'abord, selectionnez le fichier executable principal du shareware..
-Ensuite, vous devez entrez une date...Quel date ?

Bon, on a dit qu'au 31 Aout, ca marchait plus....
Ben ya ka mettre une date un peu avant :) genre..le 15 Aout...
Vous entrez donc "15/08/1999"....

-Vous pouvez quittez NoLimit, la configuration est finie..

Maintenant, allez dans le repertoire ou vous avez copiez NoLimit...
Un fichier nommé "Launch xxxx.exe" s'est créé...
(xxxx = nom de votre shareware...)

Lancez ce fichier : Magie !! :))

Bon, normalement, ca marche et vous pouvez a nouveau utiliser votre
shareware sans limit de temps...

Vous pouvez bien sur créer un raccourcis vers le "launcher", ou
le changer de repertoire...MAIS NE LE RENOMMER JAMAIS !!!
SI VOUS LE RENOMER, LE LAUNCHER NE FONCTIONNERA PLUS !!


Bon, a part ca, je pense que ce programme est assez facile
d'utilisation...Mais en cas de pepin (je vois pas trop, mais bon...)

No Limit date faker + Trial-Reset 3.0 RC7 Test with eMule Merza SmaLL

eMule v0.47c Merza SmaLL v7.2 final


Download + Mirrors:
NoLimit 2.0 date faker
(63.21 KB) - Mirror1 - Mirror2 - Mirror3
NoLimit 2.0 + Trialreset 3.0 RC7
(461,3 Кб) - Mirror1 - Mirror2 - Mirror3
BBS
search mirrors

There are some more good applications around to emulate by programs the system time to a given time and time freezer appz.

Archive