how can I remove MShield from the client?
Printable View
how can I remove MShield from the client?
mshield wont remove that you need to remove it by yourself use olly
or maybe if you have a backup on your cabalmain :)
is there a guide how to remove it?
it's all about hacking :DQuote:
Originally Posted by sasuke
It depends on how Mshield is attached. Most likely, the entry point in cabalmain has been changed and the dll is attached immediately from the new entry point. In this case you need to replace "PUSH cabalmain.00A389E3" with "JMP 00A2232E".
http://www.image-share.com/upload/4007/115m.jpg :http://www.image-share.com/upload/4007/116m.jpg
It is advisable to clear the remains of this function below by replacing all the lines with INT3. But this is not necessary, just extra garbage in the file is undesirable.
http://www.image-share.com/upload/4007/117m.jpg
Removing Msheld for hacking does not make sense, because you still can not find out the real XOR keys.
I don't need it for hacking I need it for my client but it has MShield which I want to remove
use lordpe find the dll that load mshield. easy way