Ethereum Mining NoDevFee 0% v15.0 🔥 - page 22.

tesar

newbie

Activity: 43

Merit: 0

Quote from: esfomeado on July 18, 2017, 04:37:28 AM

You are just replacing some "static" strings that show in the program.
There isn't anything being mined to this address.
Stop spreading misinformation.

You should follow the thread before you comment, he put in a detailed analysis by inspecting network packets.. Hope you are not Falcon in disguise

And pls do not give your opinions if you do not know the facts.. For everyone else watching the thread, the patch is very simple and it works.. Without the patch your hash rate will go down and redirected to Falcon's address intermittently.

esfomeado

newbie

Activity: 16

Merit: 0

Quote from: borox on July 16, 2017, 05:16:57 AM

Hi,

I already found out, that this program is a scam by disassembling and debugging. Plus I proposed a method to patch it, so that it will behave like we would have expected. With this modification, all Claymore's DevFeeMining will go to your own ethereum-address and the NoDevFee71-program evolves into a very nice and smooth running tool.

Quote from: borox on July 12, 2017, 05:02:04 AM

Hi,

I have found no evidence of virus activity in the code and no evidence for the strange redirection to the private stratum-server IP I reported. It could be a result of using the nicehash-software for some time, in between (I use it as auto-fallback, if the main poolmining has a problem).
BUT it has a random redirection to the authors mining-address 0x78.. build in. After I patched the software, all DevFee arrives at my own account, without exception.
The following submitted-shares numbers are broken down for a 100MHs mining rig for easy comparision.

Unpatched NoDevFee (24h run): mean value 176 shares per hour
Patched NoDevFee (24h run): mean value 182 shares per hour

That makes an average of 6 shares per hour mined to the authors purse.

So, dear @Millenium Falcon, thank your for programming this software, but could you please remove the undocumented mining-redirection to your purse? Or, at least, add a note to your posting regarding this topic?

Quote from: borox on July 12, 2017, 07:03:20 AM

Quote from: dhaern on July 12, 2017, 05:33:46 AM

How do you patching the .exe? with x64dbg? Could you add a little guide for do it please?

For the easy-goin you can open the exe with some hex-editor, then either search ASCII for 0x78 or you direct jump to address 00008EE0 (hex). There you find the authors 0x78.. address. Change it to yours and you will be fine

Take care not to change any other byte but the ether-address.

Patch-Tutorial:

Download & Install HxD Editor from here: https://mh-nexus.de/
Download NoDevFee71 and unpack into a folder
Start HxD & use "File->Open" (Ctrl-O), browse to the NoDevFee71-Folder
Open the File "NoDevFee.exe"
Now press "Search->Replace" (Ctrl-R)
enter 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF into the field "Search for:" and your own Ethereum-Address into field "Replace with:"
make sure, the selection "Datatype:" is set to "Text-string" and "Search direction"->"All" is checked
now press "Replace all" (Alt-A)
HxD should now say "Replaced 2 occurences of 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF"
Press "Ok" and then "File->Save" (Ctrl-S)
Done Now all detected DevFeeMining will go to your ethereum-address.

what to do, if an error pops up, after pressing "Replace all":

Error "This replace operation changes file size. Do you want to proceed?" - 1st deny by pressing "No"
.. simply check exactly, if you entered the ethereum-addresses correctly. Check, if you copied in blanks in front, or after the address and remove them
Error "Can't find 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF"
.. repeat the search-and-replace with address 0x69b612b2088a75054de71d7ec10dc50d3be94f55 in field "Search for:"

Regards,

borox

Code:

Donations welcome :) 
BTC 18AT1kRgSoGrw1TCPpduPnWnX7t1TK23Xo
ETH 0x3084a8657ccf9d21575e5dd8357a2deaf1904ef6

You are just replacing some "static" strings that show in the program.
There isn't anything being mined to this address.
Stop spreading misinformation.

Moon2eth

newbie

Activity: 31

Merit: 0

Whenever Devfee kicks in I get "socket closed by pool" error. Thoughts?

Am I hammering the pool too hard? I'm using ethermine and have connection retry set to 1 second.

NikWing

newbie

Activity: 18

Merit: 0

right now I see no decrease in MH/s
a moment ago claymore went into devfee mining and found 4 shares. 4 at once XDD (single GPU)

btw, I switched pool again and somehow the found shares are higher on ethermine, but I see a few stale shares now and then (between 1 to 3)

BattleField

jr. member

Activity: 62

Merit: 2

Does the NoDevFee v7.1 just steal the Claymore Devfee or the normal mining share as well?

gzpc01

newbie

Activity: 10

Merit: 0

When to dig a mine without a fee with Musiccoin ? Wink

DevFee: ETH: Stratum - connecting to 'exp-eu.dwarfpool.com' <37.48.109.37> port 8018
DevFee: ETH: Stratum - connecting to 'europe.ethash-hub.miningpoolhub.com' <172.104.138.108> port 20565

borox

newbie

Activity: 44

Merit: 0

Hi,

I already found out, that this program is a scam by disassembling and debugging. Plus I proposed a method to patch it, so that it will behave like we would have expected. With this modification, all Claymore's DevFeeMining will go to your own ethereum-address and the NoDevFee71-program evolves into a very nice and smooth running tool.

Quote from: borox on July 12, 2017, 05:02:04 AM

Hi,

I have found no evidence of virus activity in the code and no evidence for the strange redirection to the private stratum-server IP I reported. It could be a result of using the nicehash-software for some time, in between (I use it as auto-fallback, if the main poolmining has a problem).
BUT it has a random redirection to the authors mining-address 0x78.. build in. After I patched the software, all DevFee arrives at my own account, without exception.
The following submitted-shares numbers are broken down for a 100MHs mining rig for easy comparision.

Unpatched NoDevFee (24h run): mean value 176 shares per hour
Patched NoDevFee (24h run): mean value 182 shares per hour

That makes an average of 6 shares per hour mined to the authors purse.

So, dear @Millenium Falcon, thank your for programming this software, but could you please remove the undocumented mining-redirection to your purse? Or, at least, add a note to your posting regarding this topic?

Quote from: borox on July 12, 2017, 07:03:20 AM

Quote from: dhaern on July 12, 2017, 05:33:46 AM

How do you patching the .exe? with x64dbg? Could you add a little guide for do it please?

For the easy-goin you can open the exe with some hex-editor, then either search ASCII for 0x78 or you direct jump to address 00008EE0 (hex). There you find the authors 0x78.. address. Change it to yours and you will be fine

Take care not to change any other byte but the ether-address.

Patch-Tutorial:

Download & Install HxD Editor from here: https://mh-nexus.de/
Download NoDevFee71 and unpack into a folder
Start HxD & use "File->Open" (Ctrl-O), browse to the NoDevFee71-Folder
Open the File "NoDevFee.exe"
Now press "Search->Replace" (Ctrl-R)
enter 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF into the field "Search for:" and your own Ethereum-Address into field "Replace with:"
make sure, the selection "Datatype:" is set to "Text-string" and "Search direction"->"All" is checked
now press "Replace all" (Alt-A)
HxD should now say "Replaced 2 occurences of 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF"
Press "Ok" and then "File->Save" (Ctrl-S)
Done Now all detected DevFeeMining will go to your ethereum-address.

what to do, if an error pops up, after pressing "Replace all":

Error "This replace operation changes file size. Do you want to proceed?" - 1st deny by pressing "No"
.. simply check exactly, if you entered the ethereum-addresses correctly. Check, if you copied in blanks in front, or after the address and remove them
Error "Can't find 0x783231dEBa1FaFd90b4F146fDB21a374C29737fF"
.. repeat the search-and-replace with address 0x69b612b2088a75054de71d7ec10dc50d3be94f55 in field "Search for:"

Regards,

borox

Code:

Donations welcome :) 
BTC 18AT1kRgSoGrw1TCPpduPnWnX7t1TK23Xo
ETH 0x3084a8657ccf9d21575e5dd8357a2deaf1904ef6

vio99

newbie

Activity: 32

Merit: 0

Well i dont know abou you guys , but to me seems ok for the moment. After 1 night with that program indeed the speed has dropted with 5 MH/s but the shares ware a litlle bigger, stable shares 1-3 per hour :-/ , anyway i send the program to a friend to take a look at him in a few days i will tell you if it`s a scam or not http://imgur.com/a/MpXjQ . Sorry for the bad english

Happy minning

ncBB

full member

Activity: 158

Merit: 100

profittrailer.cn

Quote from: Millenium Falcon on July 09, 2017, 02:05:00 PM

Quote from: funnyboy027 on July 08, 2017, 08:21:38 PM

Millenium Falcon, explain why your default miner at 0x69b612b2088a75054de71d7ec10dc50d3be94f55 has very high hashrate, does it come from stealing hashrate of people running your app

Because some of my mining rigs work without worker name, using Genoil miner

Change and add worker names, and show us you are not scamming people, thanks.

paradoxum

full member

Activity: 138

Merit: 100

Well, it does seem silly to be getting mad at the OP for stealing when the intention of the program was to steal from Claymore.

Having said that, Millenium Falcon has been outed as a crook and I doubt you'll see him log back in again, at least not under that alias.

xxcsu

hero member

Activity: 1498

Merit: 597

All of you who is playing with this bs , mostly novice users, members, probably lost more shares in the past few months than claymore taking away from you with his 1% fee !!!
You probably already lost a lot of shares

You probably already lost some hashpower

You probably generated a lot of stale shares

You probably get unstable pool side reported average hashrate

You probably get some trouble to use RDP ,Radmin, TeamViewer or any remote access software ...
Definitely you lost some $ if you are a long term user of this cheat , crack , hack ...whatever you calling it ...

WHY ARE U GUYS DEALING WITH SOMETHING LIKE THIS ? Do you think its worth it ?

In the beginning he probably was stealing more than what he takes away from u now , he might cut back his "earning" after a few ppl started to found out whats going on

Quote from: xxcsu on February 24, 2017, 02:03:34 PM

Im a kind of person who like to try new things ... No , not because i dont want to pay that 1% fee for claymore for his job , bc members on this this forum need to know who is the possible scammer. so i give a try for this patch , hack , crack , bypass ... whatever you calling this, just like i did last time with another smart guy , who tried to do the same thing before , but at least he asked for a money ahead , and was not stealing mined income from miners

There is my own experience with this bs ... It might work for you ,but not for me ... you can decide for yourself. I run a little bit more than 48 hours this test with this cheat and there is my results ...

AND NO I DID NOT GET THIS GRAPH FROM ANOTHER TOPIC , THIS IS MY OWN GRAPH FROM ETHERMINE.ORG with a little bit over 48 hours run

the topic OP said a few times his software can really benefit larger miners with 50-100 GPU , so i decided to try this and used around 50 GPU for this test run

cryptday

newbie

Activity: 6

Merit: 0

All my cards are AMD at the moment.. i'm just asking for :

1) Claymore version 9.6 or 9.7 for possible detection of noDevFee ..
2) NoDevFee version 7.1 .. if it's better than 5.5, what's changed ? Is it better ? Does it worth updating ?

I still have to patch it though..
What about stale shares using a proxy ?? Anybody has more experience on that ?

Thank you all guys !

tesar

newbie

Activity: 43

Merit: 0

Quote from: doktor83 on July 15, 2017, 01:37:35 AM

Quote from: cryptday on July 14, 2017, 07:33:24 PM

Hello guys !

i've read the whole thread and i would like to ask... which version is the best to use ? 7.1 or 5.5 ??
I'm using claymore 9.5 with 5.5 at the moment (not patched yet as i just read the last pages..) which works great except the shares that go to falcon's wallet as indicated ...

Is it worth updating to 9.7 with 7.1 ? Or maybe another combination ??
Thank you all and mostly to the guys who reverse engineered this "addon" and to falcon even if he should have told the whole truth...

Best would be not to use this at all, and go with one of the proxies, there are a few.

I used python proxy for few days, it worked but too many stale shares, that made my effective rate worse than DevFee

tesar

newbie

Activity: 43

Merit: 0

Quote from: cryptday on July 14, 2017, 07:33:24 PM

Hello guys !

i've read the whole thread and i would like to ask... which version is the best to use ? 7.1 or 5.5 ??
I'm using claymore 9.5 with 5.5 at the moment (not patched yet as i just read the last pages..) which works great except the shares that go to falcon's wallet as indicated ...

Is it worth updating to 9.7 with 7.1 ? Or maybe another combination ??
Thank you all and mostly to the guys who reverse engineered this "addon" and to falcon even if he should have told the whole truth...

Am using 9.7 with 7.1 no issues.. 9.7 improved hashrates for nvidia, probably Claymore got free ride improvements from ethminer..

doktor83

hero member

Activity: 2548

Merit: 626

Quote from: cryptday on July 14, 2017, 07:33:24 PM

Hello guys !

i've read the whole thread and i would like to ask... which version is the best to use ? 7.1 or 5.5 ??
I'm using claymore 9.5 with 5.5 at the moment (not patched yet as i just read the last pages..) which works great except the shares that go to falcon's wallet as indicated ...

Is it worth updating to 9.7 with 7.1 ? Or maybe another combination ??
Thank you all and mostly to the guys who reverse engineered this "addon" and to falcon even if he should have told the whole truth...

Best would be not to use this at all, and go with one of the proxies, there are a few.

cryptday

newbie

Activity: 6

Merit: 0

Hello guys !

i've read the whole thread and i would like to ask... which version is the best to use ? 7.1 or 5.5 ??
I'm using claymore 9.5 with 5.5 at the moment (not patched yet as i just read the last pages..) which works great except the shares that go to falcon's wallet as indicated ...

Is it worth updating to 9.7 with 7.1 ? Or maybe another combination ??
Thank you all and mostly to the guys who reverse engineered this "addon" and to falcon even if he should have told the whole truth...

chaxshet

newbie

Activity: 27

Merit: 0

thanks for confirming guys.

But was it the difficulty of eth increased thats why its kind'a slow when I used the patch? Just have 270 jobs for 24hrs mining for one 1060

tesar

newbie

Activity: 43

Merit: 0

Quote from: chaxshet on July 14, 2017, 03:02:22 AM

Quote from: Facinat on July 14, 2017, 02:33:21 AM

Quote from: chaxshet on July 13, 2017, 08:59:33 PM

How to use this one? The read me is not that clear.

In the bat file, how can I add 2 wallets because Im using dual. And which to run first? Claymore's or this one?

You only need the ETH wallet.

Thanks

I experienced a bug. When I ran this patch, on the first two rounds it successfully redirected to my wallet. But on third devfee, it goes to dev wallet. Then after that, in my wallet again

If you are seeing message in the window, you can ignore that.. Devfee address is yours after the patch, that's what you change to yours

tesar

newbie

Activity: 43

Merit: 0

Quote from: doktor83 on July 13, 2017, 01:55:52 PM

Quote from: tesar on July 13, 2017, 01:52:44 PM

Quote from: NikWing on July 13, 2017, 01:34:31 PM

tesar, you're right, it's under 7.0 and I had to read twice until I saw it XD *so tired*

I currently try it using 9.7, no visible error messages yet

by the way, how do I notice stale shares with nanopool? If the number of shared mentioned there is the same as claymore reports, does it mean that there was no stale share?

it would be nice to add a workername (or if nodevfee it would use the same as the one set on claymore), but oh well

I switched from nanopool to ethermine.. I dont remember seeing stale shares being reported on nanopool, not sure if they pay for stale shares like ethermine.

are you sure that ethermine still pays for stale shares?

Not really sure, read somewhere they did.

raumi29

newbie

Activity: 15

Merit: 0

How did you check that?

Topic: Ethereum Mining NoDevFee 0% v15.0 🔥 - page 22. (Read 164844 times)