Release EasyAccount for Call of DUTY 5 *supports v1.5*

[SwiZZyr]

Credits to BlackDove

Easy Account for CoD: WaW by BlackDove

• 
  
• Update to maximum rank and receive all unlocks
• Use player profiles (stats, unlocks, and rank) with other CD keys
• Backup or share player profiles with your friends

Prevent MD5Tool detection and being placed on the MBL by extracting Easy Account anywhere but your game folders and sub-folders. Also, never run EA when PB is running (see directions below).


Release Notes:

July 18th, 2009

• Added support for CoD:WaW 1.5
• Fixed false malware detection issue that caused file read errors and EA deletion.
• Be sure to run EA as Administrator.

April 12th, 2009

• Added support for CoD:WaW 1.4

March 5th, 2009

• Added support for CoD:WaW 1.3

February 8th, 2009

• Added support for CoD:WaW 1.2

November 14th, 2008

• Two new playerstats files included, playerstats.txt and playerstats65prestige.txt.
  
• playerstats.txt = level 65 with all unlocks and no prestige
  
• playerstats65prestige.txt = level 65 with all unlocks and max prestige (includes 5 additional custom classes)
  
• To use playerstats65prestige.txt, rename it to playerstats.txt (but make sure you rename the other playerstats.txt if it's in the same folder!)
  
• This should fix the bugs with the grenade error message that people were getting in previous playerstat files.
  
• Also, all challenges and stat data is not changed (set to 0 like a brand new profile) - so keep track of your progress starting at maximum level!

__________READ_____________ ____________ME________________

Easy Account (EA) allows for importing and saving player profiles (unlocks, ranks, challenges, etc.)

Essentially, EA is two programs in one: Easy Upgrade and Easy Transfer.

Accounts are imported and saved in a file called playerstats.txt (generated by EA).

Before using this program, please disable PB by renaming the "pb" folder and restart the game.

After generating a playerstats.txt or upgrading your account, you may then rename the folder back to "pb".


To import an account with EA:

1. A valid playerstats.txt need to be in same folder as EA (a useable example is included with EA).

2. Run the game, and at the menu screen, Alt+Tab to Windows.

3. Run EA and select correct game version.

4. Click Easy Upgrade. You should get this message: "Upgrade completed successfully!"

5. Alt+Tab back to the game. Your stats should be different.

It is best to play several rounds in an online, non-PB server to ensure that modified stats are "locked in."

Also, be sure you are using a playerstats.txt file that is generated from the same game version. Otherwise, not all stats may be unlocked.


To save an account with EA:

1. Run the game, and at the menu screen, Alt+Tab to Windows.

2. Run EA and select correct game version.

3. If you already have a playerstats.txt in the same folder as EA, then you will need to delete, move or rename it.

4. Click Easy Transfer. You should get this message: "Easy Transfer completed successfully!"

5. A playerstats.txt file will now exist in the same folder as EA.

This playerstats.txt can now be used by anyone to create a matching player profile.

[jackfrost123]

thanks works great awesome

[Toxic_Luv]

Didnt work for me

Says that it cant find the .dll

and deletes the .exe file

[maver1c]

doesnt work for some reason, terminates the files

[IdiotJuices]

Works. It doesn't delete but it moves to the Temp folder.

[IMayoboeiI]

It deleted it to recycle bin :S

[CampStaff]

When it deletes files and moves them "on its own", its usually a sign that its a keylogger/trojan that "melts".

Malware Detected

Heres the situation. The original account file's file size is only 36kb, but this trojans file size is 288kb.

Lets begin analysis:
[Only registered and activated users can see links. ]

As we see, the first process spawns 13 other processes. Those spawned processes are the Trojan/keylogger.

[Only registered and activated users can see links. ]

• [Only registered and activated users can see links. ]                                                   
               File: C:\DOCUME~1\Jim\LOCALS~1\Temp\ctfmon.exe.exe
               File Type: file
               Source File Hash: 4A942C7B0037F30DAA5002D3E3B09300DFF1F14F
               Creation/Distribution: CREATE_ALWAYS
               Desired Access: FILE_ANY_ACCESS
               Share Access: FILE_SHARE_WRITE
               Flags: FILE_ATTRIBUTE_NORMAL SECURITY_ANONYMOUS
               Stored as: a9172c2f8979224f7f908ee2c65cb6be.exe
                   
                                      
               File: C:\DOCUME~1\Jim\LOCALS~1\Temp\bot.exe
               File Type: file
               Source File Hash: 4A942C7B0037F30DC85000D3E3B09300F3EE2853
               Creation/Distribution: CREATE_ALWAYS
               Desired Access: FILE_ANY_ACCESS
               Share Access: FILE_SHARE_WRITE
               Flags: FILE_ATTRIBUTE_NORMAL SECURITY_ANONYMOUS
               Stored as: 134eacb60acdd2ba333b5f0f5decd195.exe
                   
                                      
               File: C:\DOCUME~1\Jim\LOCALS~1\Temp\EasyAccount.exe
               File Type: file
               Source File Hash: 467B931C000FFA3890290016275E2600E26B2668
               Creation/Distribution: CREATE_ALWAYS
               Desired Access: FILE_ANY_ACCESS
               Share Access: FILE_SHARE_WRITE
               Flags: FILE_ATTRIBUTE_NORMAL SECURITY_ANONYMOUS
               Stored as: f9522aac963f431d347ad6c58b92bea4.exe
  

It creates files on the infected computer, which allow real time access to the infected computer. The trojanner is allowed to view what the infected computer does, as it happens, sort of a remote access. The info to where the trojanner is, however is also viewable in our analysis:

<li id="winsocksub11_bullet" class="open_folder">[Only registered and activated users can see links. ]                        
Outgoing Connections
           Transport Protocol: TCP
           Remote Address: 208.120.202.187
           Remote Port: 3174
           Connection Established: 0
           Socket: 1396

[Only registered and activated users can see links. ]

Report generated: 28.8.2009 at 14.36.12 (GMT 1)
Filename: EasyAccount.exe
File size: 288 KB
MD5 Hash: fd81359fec5517bd21497f7e2ae118b1
SHA1 Hash: C01BDA8F60646AB8BB64BC4B05F6A0DE86F19054
Self-Extract Archive: Nothing found
Binder Detector: Nothing found
Detection rate: 5 on 22

Detections

a-squared - Net-Worm.Win32.Kolab!IK
Avira AntiVir - -
Avast - -
AVG - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
Ewido - -
F-PROT6 - -
Ikarus T3 - Net-Worm.Win32.Kolab
Kaspersky - -
McAfee - -
NOD32 v3 - -
Norman - -
Panda - -
QuickHeal - -
Solo Antivirus - -
Sophos - Mal/Generic-A
TrendMicro - -
VBA32 - Trojan-PSW.Win32.Dybalom.dp
VirusBuster - Trojan.Ceeinject.Gen