[IDEA]Bypassing TSearch

Discussion on Helbreath Hacks. New ones Released. and how to work them.
Post Reply
bolex17
Loyal fan
Posts: 364
Joined: Wed Nov 19, 2003 6:19 am

Post by bolex17 »

hrrm, since USA packed there client up, u cant use tsearch n shiet.
anyone tried this method before, get rootkit and hide tsearch and try running tsearch from there?
i havn't tried since i dont have helbreath yet, a little feedback pls?
<img src='http://server3.uploadit.org/files/bolex17-thabest.JPG' border='0' alt='user posted image' /><br><br><span style='color:red'><b><a href='http://hbtop50.berserkvision.com/in.php?id=582' target='_blank'>Click Here To Support Outpost!</a></b></span><br><br><span style='color:red'>Shit List</span><br>popic<br>pronoob
binarydata
DBfiller
Posts: 3816
Joined: Fri Oct 31, 2003 5:30 am
Location: San Diego CA, USA
Contact:

Post by binarydata »

use artmoney or just rename tsearch like klks did with wpe

and the 3.7+ client closes anything with tsearch or wpe in the window title, so even if u could hide it, how would u use it?
<img src='http://img88.exs.cx/img88/2290/7666.jpg' border='0' alt='user posted image' />
bolex17
Loyal fan
Posts: 364
Joined: Wed Nov 19, 2003 6:19 am

Post by bolex17 »

hrmm, binary can u try this tsearch that i edited to see if its detected, just use rootkit to hide it.

<a href='http://www.geocities.com/bolex17/E-Search.zip' target='_blank'>E-Search</a>

<a href='http://www.geocities.com/bolex17/GamblerRootKit.zip' target='_blank'>Gambler Rootkit</a>

<img src='http://server3.uploadit.org/files/bolex17-thabest.JPG' border='0' alt='user posted image' /><br><br><span style='color:red'><b><a href='http://hbtop50.berserkvision.com/in.php?id=582' target='_blank'>Click Here To Support Outpost!</a></b></span><br><br><span style='color:red'>Shit List</span><br>popic<br>pronoob
binarydata
DBfiller
Posts: 3816
Joined: Fri Oct 31, 2003 5:30 am
Location: San Diego CA, USA
Contact:

Post by binarydata »

yea, the esearch thing works fine, all you have to do is change the window title
<img src='http://img88.exs.cx/img88/2290/7666.jpg' border='0' alt='user posted image' />
jmh
Member
Posts: 156
Joined: Sat Dec 13, 2003 6:13 pm

Post by jmh »

can't you just hex edit the window title to sumthing else?
<a href='http://www.beehivemail.com/pages/index.php?refid=jmh1' target='_blank'><img src='http://img235.imageshack.us/img235/7226 ... er16vn.gif' border='0' alt='user posted image' /></a>
binarydata
DBfiller
Posts: 3816
Joined: Fri Oct 31, 2003 5:30 am
Location: San Diego CA, USA
Contact:

Post by binarydata »

jmh wrote: can't you just hex edit the window title to sumthing else?
no
<img src='http://img88.exs.cx/img88/2290/7666.jpg' border='0' alt='user posted image' />
Smashing
Member
Posts: 168
Joined: Mon Jul 19, 2004 11:46 pm

Post by Smashing »

binarydata wrote:
jmh wrote: can't you just hex edit the window title to sumthing else?
no
i honestly dont think you know as much as you act like you do

i personally think you no almost nothing
if you did know something you would probably be willing to share it


i just think your a 12 year old twirp that thinks he is a man cause he has a single hair on his balls


grow up you cunt
hell9
noob
Posts: 20
Joined: Wed Aug 11, 2004 9:36 am

Post by hell9 »

hmm... have u all try out this program, Process Guard... it hiden those file that u choose and dont let it get detected... i not sure izzit gonna work on HB, but is work on some other games... :huh: *sry, my english is poor, hope u all understan it*

~Peace~
tyteman
Spamtastic
Posts: 1149
Joined: Wed Nov 12, 2003 2:00 pm
Location: CA, USA

Post by tyteman »

superflymexican wrote:
binarydata wrote:
jmh wrote: can't you just hex edit the window title to sumthing else?
no
i honestly dont think you know as much as you act like you do

i personally think you no almost nothing
if you did know something you would probably be willing to share it


i just think your a 12 year old twirp that thinks he is a man cause he has a single hair on his balls


grow up you cunt
hex editing no longer works.. try it if you dun blieve me.. they detect the actual values left on when tsearch is running.. so changing the name and hex editing the title won't do jack shit.. you need a new program.. i suggest using artmoney cause its the closest as you can get.. and we know..

i haven't tried and hide programs.. maybe it will work
"<i>One night I was talking to God, but I realized I was talking to <u>myself</u></i>"<br><br><img src='http://img61.imageshack.us/img61/2678/untitled13bf.gif' border='0' alt='user posted image' /><br><br><b><u>Links</u></b><br>
bolex17
Loyal fan
Posts: 364
Joined: Wed Nov 19, 2003 6:19 am

Post by bolex17 »

u can either use cheat Engine, or hide Tsearch with Rootkit :]
<img src='http://server3.uploadit.org/files/bolex17-thabest.JPG' border='0' alt='user posted image' /><br><br><span style='color:red'><b><a href='http://hbtop50.berserkvision.com/in.php?id=582' target='_blank'>Click Here To Support Outpost!</a></b></span><br><br><span style='color:red'>Shit List</span><br>popic<br>pronoob
Zabuza
Member
Posts: 160
Joined: Thu Jan 22, 2004 11:05 pm

Post by Zabuza »

binarydata wrote: the 3.7+ client closes anything with tsearch or wpe in the window title
You can sue siementech for that, the client also tryes to f*ck your tsearch exe with a really newbye method.
Private
Member
Posts: 128
Joined: Sat Jan 10, 2004 2:39 pm

Post by Private »

noobs
Post Reply