i didnt plan a comeback but i cant stand the major stupidity here anymore. joe, you wanted an actual, verifiable proof? here is one for you.
http://www.megaupload.com/?d=S1SQP6BC.
this is the fear3 trainer i downloaded from sicheats an hour ago. when it exits it leaves a background process called "chsuxx.exe" behind which searches for executables on c: containing "cheathappens" and changes their "This program cannot be run in DOS mode." stub to "Cheathappens sucks!!!". you can clearly see the code responsible for this starting at offset 000782be in the main executable. btw both the exe and the dll already have the stub replaced. how pathetic.
i also found the "llsass" string Traziz referred to in the dll. how you joe managed to miss it i have no idea. well, on a second though i actually do.
i havent found the other references _yet_ but its only a matter of time and my mates here at ch are also working on it. you can ban me and you can delete this post if you like but the truth is already out there. bad luck for you i guess...
