tag:blogger.com,1999:blog-5001631240231852561.post8200726371044636110..comments2023-09-29T02:45:26.809-07:00Comments on Technical Tips: How to resolve "You don't have administrator rights! freeSSHd will close!" error message while launch freeSSHd?Technical Tipshttp://www.blogger.com/profile/11361726371671236608noreply@blogger.comBlogger24125tag:blogger.com,1999:blog-5001631240231852561.post-15963712536060149002022-07-13T00:39:26.272-07:002022-07-13T00:39:26.272-07:00"Dipen Parekh" procedure saved my life, ..."Dipen Parekh" procedure saved my life, thanks a lot!kiechuhttps://www.blogger.com/profile/07072653989677827964noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-64479068294664669832021-09-22T22:39:22.291-07:002021-09-22T22:39:22.291-07:00You must run with OllyDbg v1.10 and follow "D...You must run with OllyDbg v1.10 and follow "Dipen Parekh" procedure, it works!Pakonhttps://www.blogger.com/profile/09162509909226095301noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-55263653624736886532020-01-15T09:10:56.187-08:002020-01-15T09:10:56.187-08:00Hi I have the version 1.3.1 but I can not find the...Hi I have the version 1.3.1 but I can not find the correct expression I have tried all indicated and nothingAnonymushttps://www.blogger.com/profile/13124937301075615758noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-39237904803529064352018-08-23T12:54:45.450-07:002018-08-23T12:54:45.450-07:00Dipen Parekh is the man! Otherwise, you could hose...Dipen Parekh is the man! Otherwise, you could hose your Windows machine irreparably.Anonymoushttps://www.blogger.com/profile/10027110671128479114noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-45542764466781208842017-12-29T22:01:21.942-08:002017-12-29T22:01:21.942-08:00What can I say but.... you're brilliant!
Tha...What can I say but.... you're brilliant!<br /><br />Thank you so much. Worked exactly as directed on version 1.2.6.22, Server 2008. What I can't understand is why this issue has occurred only once on many installations - all of which are identical i.e. they are all produced from the one disk image.Anonymoushttps://www.blogger.com/profile/15441501416661705809noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-34142861890796540112017-03-21T23:45:46.131-07:002017-03-21T23:45:46.131-07:00I use version 1.3.1
go to addr => 00402DE1
an...I use version 1.3.1 <br />go to addr => 00402DE1 <br />and edit as instruction <br /><br />Many thank for helping us.Nrawut Phrommahithttps://www.blogger.com/profile/09730079616424492715noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-61214639427713043532016-06-07T14:45:10.996-07:002016-06-07T14:45:10.996-07:00TL;DR .... follow the instructions provided by &qu...TL;DR .... follow the instructions provided by "Dipen Parekh" in the comments above. Worked perfectly.Corbett Endershttps://www.blogger.com/profile/10138031353797409816noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-29045563141782248202016-01-17T11:58:29.424-08:002016-01-17T11:58:29.424-08:00You can just open it (version 1.3.1) in hex editor...You can just open it (version 1.3.1) in hex editor and look for these bytes 85C07456 and then replace them with 85C09090yuryg5https://www.blogger.com/profile/01653662720601013138noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-21086717237282214362015-12-31T09:24:19.270-08:002015-12-31T09:24:19.270-08:00If you cannot find the address, follow the instruc...If you cannot find the address, follow the instructions provided by "Dipen Parekh" in the comments abovestbrownlowhttps://www.blogger.com/profile/01796886116873645474noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-88933238711376669212015-09-30T13:14:35.016-07:002015-09-30T13:14:35.016-07:00Don't work if I use the version 1.2.1.12
some...Don't work if I use the version 1.2.1.12<br /><br />somebody has the same problem?Anonymoushttps://www.blogger.com/profile/09106297856594579666noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-8405950130568114672015-08-03T14:24:18.918-07:002015-08-03T14:24:18.918-07:00I installed version 1.3.1 and edited the bytes at ...I installed version 1.3.1 and edited the bytes at 0130333f. The existing bytes were 74 56, rather than 74 49. The rest of the directions were fine.Thomas Saynehttps://www.blogger.com/profile/14649371221441557867noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-48451702650493312902015-06-02T05:48:59.995-07:002015-06-02T05:48:59.995-07:00Version 1.3.1 can run on a non-admin account by :-...Version 1.3.1 can run on a non-admin account by :-<br /><br />Short way<br />=========<br />Load OllyDbg (run as administrator - lol that's what this is about)<br />File>>Open point to your original executable<br />Right click in CPU main thread >> View >> MODULE freeSSHD (if you can't find it on the list you are already in it)<br />*This opens and sets the module to the right one.<br /><br />CTRL+G <br />enter 0025333E<br />*scrolls to the instruction at this addrress<br />highlight and right click >> binary >> edit >> enter 90 90 >> OK<br />select the 2 90 NOP instructions SHIFT+ LEFT MOUSE<br />right click >> copy to executable >> selection >> OK<br /><br />*opens a new window<br />right click >> save file >> save your file<br />run it<br /><br />Why this requires this silly account when Windows can run in admin mode I do not understand.<br /><br />D.Anonymoushttps://www.blogger.com/profile/09509983636018996435noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-33281632327970765642015-05-26T05:05:28.835-07:002015-05-26T05:05:28.835-07:00Hi Friends, Please ensure that the module at top s...Hi Friends, Please ensure that the module at top says FreeSSHD and not ntdll or any other module. To change the module press Alt+E and select the FreeSSHDService.exe module, generally the first one in the list. Easier way to find the Address in this module is to right click and Search for-->All referenced text strings, a new window opens, here right click and "Search for text" then search for the text "Tray icon shown (admin logged in)", note down this address, go back to the main window and then search for the noted address and then scroll up 4 lines and you will find the address with value of 74 49 or 74 56, change this to 90 90 and follow the rest of the steps.Dipen Parekhhttps://www.blogger.com/profile/09341867328293633956noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-85553908145062753182015-04-28T02:46:59.024-07:002015-04-28T02:46:59.024-07:00I changed it at 0130333f, and it's 74 49 I thi...I changed it at 0130333f, and it's 74 49 I think instead of the existing binary bytes given. You can tell from the screen shot which line it is approximately.<br />At own risk but worked for me.Anonymoushttps://www.blogger.com/profile/07239911527901400065noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-81552855665607137462015-02-05T08:37:49.072-08:002015-02-05T08:37:49.072-08:00What would be the address on freeSSHd 1.3.1.26?What would be the address on freeSSHd 1.3.1.26?xhttps://www.blogger.com/profile/12536823843737079759noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-35283349785137058852015-01-30T04:11:33.459-08:002015-01-30T04:11:33.459-08:00For freeSSHd version 1.3.0 I NOP'ed 2 bytes st...For freeSSHd version <b>1.3.0</b> I NOP'ed 2 bytes starting from address <b>0098333E</b> and could open exe after that. Thanks for the guide!Unknownhttps://www.blogger.com/profile/09388249261862159266noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-72767496395291885562015-01-21T04:28:58.745-08:002015-01-21T04:28:58.745-08:00Gracias, me ha funcionado perfectamenteGracias, me ha funcionado perfectamenteMiguelhttps://www.blogger.com/profile/08829141334871703198noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-69477768651658416892015-01-16T08:41:56.412-08:002015-01-16T08:41:56.412-08:00That address can not be found any longer, not sure...That address can not be found any longer, not sure of freesshd changed...Anonymoushttps://www.blogger.com/profile/01815628600913616088noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-12523679869365815552014-12-24T07:27:20.871-08:002014-12-24T07:27:20.871-08:00That works smoothly. Many thanks!That works smoothly. Many thanks!Anonymoushttps://www.blogger.com/profile/01896266486993428165noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-67797240088287007652014-10-20T02:25:55.597-07:002014-10-20T02:25:55.597-07:00Works perfect!, thanks.Works perfect!, thanks.Zukohttps://www.blogger.com/profile/06741663899828249241noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-21572228283500292992014-09-17T23:36:27.256-07:002014-09-17T23:36:27.256-07:00This works!!!This works!!!Anonymoushttps://www.blogger.com/profile/14573325150202159908noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-54361505993873257102014-08-27T11:11:02.846-07:002014-08-27T11:11:02.846-07:00perfecto probado en windows server 2012perfecto probado en windows server 2012Chacoteyhttps://www.blogger.com/profile/02929223152526366698noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-77427104372188520942014-03-18T04:10:26.242-07:002014-03-18T04:10:26.242-07:00Thank you, this works perfectly on a Windows Serve...Thank you, this works perfectly on a Windows Server 2003!Carlhttps://www.blogger.com/profile/03304779834540571874noreply@blogger.comtag:blogger.com,1999:blog-5001631240231852561.post-55573649052109812152014-03-12T22:11:35.777-07:002014-03-12T22:11:35.777-07:00Thank you so much its working...Thank you so much its working...Anonymoushttps://www.blogger.com/profile/04172367034260218439noreply@blogger.com