newtopic  postreply Home » Forums » Rift » Rift - Bots / Macros / Hacks  [ 4 posts ] 

Running the rift client in an unprivileged mode to hide hack : Rift - Bots / Macros / Hacks

Posted: April 8th, 2011, 7:51 pm  
longshot666

Total Posts: 20
Joined: March 28th, 2011, 8:01 am
premium
premium
The batch file will do the following for you:

* Create a normal unprivileged user account. The Username/Password is Yoda/Password1.
* Set the registry key to remove Yoda from the logon screen. (We're just using it to launch Rift.)
* Set permissions on the Rift folder to give Yoda full control. (for patching)
* Create a batch file on your desktop to run Rift with the Yoda account. (using PsExec)
* Set the registry key to prevent the Rift Error Handler from running.
* Copy your old %AppData%\Rift configuration files to the new account.


Note: You can find/replace Yoda/Password1 with whatever name and password you like -- stay away from spaces and special characters.

Prerequisites:

* You must have Windows Vista 64-bit or Windows 7 64-bit.
* You must have Rift installed into the default folder. (or you can find/replace with your path)
* Download and install Debugging Tools for Windows 64-bit into the default folder.
http://msdl.microsoft.com/download/symbols/debuggers/dbg_amd64_6.11.1.404.msi
CDB.EXE should be in "C:\Program Files\Debugging Tools for Windows (x64)".
* Download PsExec.exe and put it somewhere in the path. I suggest just dropping it in your C:\Windows\System32 folder.
http://download.sysinternals.com/Files/PsTools.zip


Instructions:

* Copy the batch file (below) into Notepad and save the file as INSTALL.CMD on your desktop.
* Right-click INSTALL.CMD and choose Run As Administrator. Delete INSTALL.CMD when finished.
* Any time you want to run Rift, launch the RIFT.CMD file on your desktop.


Note: The Windows security model will only allow a normal user to see their processes (.exe names) and the processes being run as services. Run all your hacking programs with your usual administrator account and they will be hidden from Trion.

Batch File:

Code: Select all

net user Yoda Password1 /add
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList" /v Yoda /t REG_DWORD /d 0
icacls "C:\Program Files (x86)\RIFT Game" /grant Yoda:F
echo psexec -u Yoda -p Password1 -d -w "C:\Program Files (x86)\RIFT Game" "C:\Program Files (x86)\RIFT Game\riftpatchlive.exe" > %userprofile%\desktop\RIFT.CMD
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rifterrorhandler.exe" /v debugger /t REG_SZ /d "c:\progra~1\debugg~1\cdb.exe -c q"
xcopy /i /y /e /c %appdata%\Rift C:\Users\Yoda\AppData\Roaming\Rift


Last edited by longshot666 on April 10th, 2011, 11:00 am, edited 1 time in total.
Posted: April 9th, 2011, 12:28 am  
cocomonster

Total Posts: 10
Joined: January 9th, 2008, 8:19 am
premium
premium
I can confirm this!!
Posted: April 9th, 2011, 2:50 pm  
immortalhz

Total Posts: 7
Joined: April 5th, 2011, 4:17 am
premium
premium
copypaste from other forum :D
Posted: April 14th, 2011, 1:27 pm  
Tault_admin

Total Posts: 29974
Joined: November 9th, 2002, 9:57 am
User avatar
administrator
administrator
Nice find moving this to confirmed.
Want Advertisements After The Last Post Removed? Create A Free Account!
blue large dotWho is online
Users browsing this forum: No registered users and 2 guests
newtopic  postreply Page 1 of 1