[OUTDATED / UNSUPPORTED] RemoveWAT

Discussion in 'Windows 7' started by Hazar, Oct 15, 2009.

Thread Status:
Not open for further replies.
  1. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,567
    3,885
    120
    One queston...Why?
    You have installed Daz's Windows Loader so you should totally ignore RemoveWat (No need to have them both)
     
  2. tod

    tod MDL Novice

    Aug 11, 2010
    29
    0
    0
    for curiosity
    i want to know more as possible of these cracks and maybe i will choose this removewat in future if something will go wrong with win7loader
     
  3. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,522
    4,113
    270
    Really running out of rearms isn't a problem anymore if you know what I'm saying man ;)
     
  4. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,567
    3,885
    120
    In that case start reading what this hack actually does (only 336 pages) ;)
     
  5. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,482
    460
    90
    Yeah, secr9tos is OBVIOUSLY a kid, that's why he is a respected developer who made the oem driver and helped with various aspects of RemoveWAT and made lots of it possible. Oh wait, is he still a kid?

    Your logic, to be frank, is stupid.

    I'm pretty sure he knows a LOT more about assembly, cracking and reverse engineering than you ever will.

    His post count doesn't mean everything, he's ALSO a talented member.
     
  6. BobSheep

    BobSheep MDL Guru

    Apr 19, 2010
    2,330
    1,394
    90
    #3226 BobSheep, Sep 4, 2010
    Last edited: Sep 4, 2010
    I'm very sure Hazar has not included anything nasty in his app. I'm also sure it's the Virus Scan Companies doing a little favour for M$ as well, just as they did when they detected the XP Keygen as something nasty which was written in standard Visual Studio 6.0 MFC and was perfectly safe.

    We'll have to wait until Hazar reports back if he thinks anyone has tampered with his app.
     
  7. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    995
    134
    30
    #3227 secr9tos, Sep 4, 2010
    Last edited: Sep 4, 2010
    Are you kidding? My post-count has nothing to do with my point of view. I don't underestimate you;) but to me it seems like you are a sort of "attention w*ore" or troll. Choose what you like best.

    I've written three Windows 7 & Windows Server 2008 R2 activators, I'm part of Chew7 project, working together with other ppl on other projects, etc... AND YOU call me a "kid" or "script kiddy"?? :mad::mad::mad::mad:

    What are you doing? Coding viruses with batch?:p:p


    This is my last comment on this issue... coz otherwise I'll get p*ssed.
     
  8. FreeStyler

    FreeStyler MDL Guru

    Jun 23, 2007
    3,567
    3,885
    120
    Boys, calm down and take it easy, you are giving him more attention then he deserves ;)
     
  9. Ashq

    Ashq MDL Novice

    May 3, 2010
    9
    0
    0
    #3229 Ashq, Sep 5, 2010
    Last edited: Sep 5, 2010

    LOL,even a child can do that better take up some courses..and he calls himself as a developer, i bet u s-irl.
     
  10. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    995
    134
    30
  11. ohmygod

    ohmygod MDL Novice

    Aug 30, 2010
    3
    0
    0
    #3231 ohmygod, Sep 5, 2010
    Last edited by a moderator: Apr 20, 2017
    Hopefully someone can help answer. The RemoveWAT resources contains 32-bit and 64-bit files. My problem is since this application was compiled under 32-bit, the assumptions where the 64-bit files were deployed is in question.

    Code:
                    this.ProgressBar1.PerformStep();
                    if (File.Exists(Conversions.ToString(Operators.ConcatenateObject(this.windir, @"\System32\slwga.dll.bak"))))
                    {
                        if (File.Exists(Conversions.ToString(Operators.ConcatenateObject(this.windir, @"\System32\slwga.dll"))))
                        {
                            this.Takeown(Operators.ConcatenateObject(this.windir, @"\System32\slwga.dll"));
                            File.Delete(Conversions.ToString(Operators.ConcatenateObject(this.windir, @"\System32\slwga.dll")));
                        }
                        this.Takeown(Operators.ConcatenateObject(this.windir, @"\System32\slwga.dll.bak"));
                        MyProject.Computer.FileSystem.RenameFile(Conversions.ToString(Operators.ConcatenateObject(this.windir, @"\System32\slwga.dll.bak")), "slwga.dll");
                    }
                    this.ProgressBar1.PerformStep();
                    if (File.Exists(Conversions.ToString(Operators.ConcatenateObject(this.windir, @"\SysWOW64\slwga.dll.bak"))))
                    {
                        if (File.Exists(Conversions.ToString(Operators.ConcatenateObject(this.windir, @"\SysWOW64\slwga.dll"))))
                        {
                            this.Takeown(Operators.ConcatenateObject(this.windir, @"\SysWOW64\slwga.dll"));
                            File.Delete(Conversions.ToString(Operators.ConcatenateObject(this.windir, @"\SysWOW64\slwga.dll")));
                        }
                        this.Takeown(Operators.ConcatenateObject(this.windir, @"\SysWOW64\slwga.dll.bak"));
                        MyProject.Computer.FileSystem.RenameFile(Conversions.ToString(Operators.ConcatenateObject(this.windir, @"\SysWOW64\slwga.dll.bak")), "slwga.dll");
                    }
                    this.ProgressBar1.Value = Conversions.ToInteger("100");
    
    Hazar any idea? I'm just trying to verify that things are put in place where they should be. Too lazy to crack anything these days.

    Thanks
     
  12. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,482
    460
    90
    Uhm... It's compiled to run as 32bit on a 32bit machine and 64bit on a 64bit machine. If you run it on a 64bit machine it'll appear as a native 64bit process but if you run it on a 32bit machine it will still work.

    So no idea what you mean, sorry.

    It's possible an old version is floating about with the compiler settings wrong, though.
     
  13. ohmygod

    ohmygod MDL Novice

    Aug 30, 2010
    3
    0
    0
    Do you have a 64-bit compilation version of RemoveWAT.exe? I dumped the PE where it shows 32-bit addressing. The same .exe cannot be used on both systems unless you take care of NTDLL's system path redirection problem. The NT DLL will screw with your path once it detects 32 bits.
     
  14. iakoboss7

    iakoboss7 MDL Novice

    Sep 8, 2010
    28
    6
    0
    hello there, this is a very interesting tool and i can say it cause i am using it now :) also a big thanks for the developers of it.

    what i wanted to ask is if ANY windows update can possibly "find" and disable this application or even worse "lock" windows from even being able to log in.

    i am asking this so i can know if installing ANY windows update can do something of the ones mentioned above to my windows 7 x64 machine!
    so am i safe to install all windows updates? should i install only some of them? (if thats the case what is the category of them? for example i shouldnt install the security ones?)
     
  15. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,522
    4,113
    270
    Install any update with this tool. Windows doesn't usually lock when "caught" it just gives warning maybe couple hr use then restarts.
     
  16. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,522
    4,113
    270
    All that stuff is free in torrents...lol SUper Spammer :p
     
  17. iakoboss7

    iakoboss7 MDL Novice

    Sep 8, 2010
    28
    6
    0
    you mean that if it gets "caught" then it will restart its self every time after that in a couple of hours? can this get fixed?
     
  18. timesurfer

    timesurfer MDL Developer

    Nov 22, 2009
    8,522
    4,113
    270
    Don't worry about it til it happens if it does there will always be another exploit!
     
  19. iakoboss7

    iakoboss7 MDL Novice

    Sep 8, 2010
    28
    6
    0
    cool :) thanks
     
  20. Piercedshane

    Piercedshane MDL Novice

    Sep 8, 2010
    1
    0
    0
    #3240 Piercedshane, Sep 8, 2010
    Last edited: Sep 8, 2010
    Hey Hazar i must say hats off to you on the the removewat.... I have been usen it for a couple of months but now im getting the popups to validate and or my version is not genuine .. Do i not have the right removewat or?? Thanks