Recently, more and more ISP providers have closed roads, further infringing on the interests of users. ISP providers mostly use a monitoring software called "Network Pioneer" to block routes. I found a way to crack it, you can try it. "Network Wizard" uses various methods to detect whether users use shared methods to access the Internet, thereby restricting them. I will crack them separately below:
1. Check whether there are different MAC addresses in the data packets with the same IP address. If so, it is determined that the user shares the Internet. The solution is to change the MAC address of each machine to the same; there are many ways to modify it, as follows:
(I) Conceal the truth from the sea
1. Modify the registry
Almost all network card drivers can be called by the NdisReadNetworkAddress parameter to read a user-specified MAC address from the registry. When the driver determines that the MAC address is valid, it will program the MAC address into the hardware register, ignoring the inherent MAC address of the network card. We can achieve our goal by manually modifying the Windows registry.
Run Windows Registry Editor under Winodws 98, expand "HKEY_LOCAL_MACHINE\System\Current ControlSet\Services\Class\Net", and you will see subkeys similar to "0000", "0001", and "0002". Start clicking from the "0000" subkey, and search for the content of the "DriverDesc" key under the subkey in turn until you find the network card registry information that is exactly the same as the target we are looking for.
After finding the correct network card, click the drop-down menu "Edit/New/String", and the string name is "Networkaddress". Double-click the mouse on the newly created "Networkaddress" string name to enter the value. Enter the new MAC address value you want to specify. The new MAC address should be a 12-bit hexadecimal number or letter, with no "-" between them, and a value similar to "00000000000" (note that the location of specific key values in Windows 98 and Windows 2000/XP is slightly different, and you can find it through the search function).
Under "NetworkAddress", continue to add a string value named "ParamDesc", which will be used as a description of the "NetworkAddress" item, and the value can be taken as "MAC Address". Then modify its content to what you want to set. As shown in the figure. In this way, we successfully modified the MAC address of the network card and restarted the computer.
2. Modify network card attributes
Most network cards can change their MAC address by modifying the network card properties in the control panel. In "Device Manager", right-click the network card icon that needs to be modified by the MAC address and select the "Properties/Advanced" tab. In the "Properties" area, you can see an item called "Network Address" or other similar name. Click it and enter the MAC address value to specify below "value" on the right. To enter 12 hexadecimal numbers or letters in succession, do not enter "-" between them. The settings will take effect after restarting the system.
(II) To remove the firewood from the bottom of the pot
If the user is using the network card of RealTek's RTL8139A/B/C/D series chips, there is a simpler way to modify the MAC address. The PG8139 software designed by RealTek can directly modify the MAC address of the RTL8139 series network cards, and even make the MAC address of the network card different after each startup. The specific operations are as follows:
Unzip into a folder, take the 8139C chip as an example, use notepad to open the file in the directory, modify the first line of the file, and change "NodeID" (Network Card Number) to the required new value. It is recommended that the initial value is "00 E0 4C 00 00 01". When modifying, please note that at least one space should be left between every two digits.
After saving, enter MS-DOS mode (note that you need to be in pure DOS mode), enter "pg8139 /pci" at the DOS prompt and press Enter. If the system prompts "Programming EEPROM is successful", it means that the change is successful. Every time the PG8139 program is successfully run, the system will automatically add the value of "NodeID" to 1 in the corresponding file. That is to say, the MAC address assigned to the current workstation network card during the first run is "00 E0 4C 00 00 01". The system will automatically assign "00 E0 4C 00 00 02" when the second run is "00 E0 4C 00 00 03" when the third run is "00 E0 4C 00 00 03"............ and so on. The MAC address of the network card can be modified in batches, and there is no need to modify the file repeatedly.
If the user's network card is a chip of other versions of RTL8139, just find the corresponding .cfg file to modify it.
In addition, there is an extreme method to achieve the purpose of cloning the MAC address by burning the EEPROM of the network card. However, this is very risky and complicated. Even experienced users will inevitably experience errors in the operation, so this kind of operation is not recommended.
(III) Borrowing the East Wind
If you are a Windows 2000/XP user, you can use the free MAC address modification software SMAC. After running SMAC, the list box in the window lists the network card that is working on the computer. After selecting the network card to be modified, enter the new MAC address in the six input boxes below the list box, click "Update MAC (Modify MAC Address)" on the right to complete the modification of the MAC address.
There are many tools to modify the MAC address, but most of them are only suitable for Windows 2000/XP. It is recommended to use "Super Rabbit Magic Settings" because it is not only simple and easy to use, but also effective in Windows 9x systems.
After the modification is completed, the general method is to restart the system. There is also an easy way to not restart the system. In "Device Manager", select the network adapter icon, right-click, and select "Disable" (please note whether the status bar has been displayed as "Disable" after the operation). Then right-click the selected network adapter and select "Enable" in the right-click menu. This will enable the modified settings to take effect.
2. Discover multiple machines and share the Internet through SNMP (simple network management protocol).
Some routers and ADSL cats have built-in SNMP services. You can check whether users have shared them through corresponding tools. Below is a rendering diagram of the number of connected users in ADSL MODEM provided by netizens through corresponding tools, where you can clearly see the number of shared users.
If you want to know whether your router or Big Cat has opened SNMP services, you can find a scanning software (ipscan, superscan...) to scan. If the 161 port is opened, the SNMP service is built-in. The solution is to use SNMP? The 61 port is banned.
Friends who use the router or turn on ADSL to share the Internet can enter the management interface with the option to turn off SNMP. If the cat's management interface does not have the option to turn off SNMP, you have to buy a router without SNMP service, such as TP-LINK TL-R400, put it between adsl mode and hub, and then do a NAT service in the router, so that the address that enters ADSL cat is an address, which solves the problem of sharing Internet access.
3. Monitor the number of concurrent ports. If there are more concurrent ports than the set number, it is determined to be shared.
This is a ridiculous setting. "Network Pioneer" keeps scanning the number of ports opened by users. If it is more than the set value, it is determined to be sharing. Sometimes, press the F5 key several times and it is considered to be sharing. Even a single user is affected by the Internet access. This cannot be cracked (unless you make the Internet Pioneer black). My solution here is to pretend to be an innocent user and go to the ISP's customer service phone to curse, and declare that if you don't do it, change the ISP, and the network will be normal in a while;
4. "Network Pioneer" also uses unknown methods to detect shared information from shared computers. The current solution is that all shared clients must install firewalls, set the security level to the highest, and all rules in the IP configuration rules that allow others to access the native machine, and allow PING native machine to be not allowed to prevent ICMP and IGMP attacks. If it is WINXP, you need to open the network firewall of the network card. After adopting the above cracking method, the local machine cannot be seen on your own LAN, and after WINXP opens the network firewall of the network card, files cannot be transmitted on QQ, which slows down, but finally can be shared again.