Can someone hex edit these?

[Synomenon]

Don't know the first thing about hex editors, but I found something that supposedly works for a problem I'm having. It involves using a hex editor on two exe files.

I installed a USB monitor that I keep all of my sidebar gadgets on. However, the monitor does not run instantly and often times the sidebar will load before the USB monitor does once Windows starts. Because of this, the gadgets will appear all over my main monitor instead of on the USB monitor since the sidebar loads before the USB monitor becomes operational.

I've tried delaying the startup of the sidebar and it works the first time I restart after I setup the delay, but once you launch sidebar it automatically puts itself back on the startup list and then begins launching immediately again.

It doesn't have a GUI with an option to disable from automatically adding itself to the startup list so you have to edit the exe file to change or remove the line that tells it to add itself. It doesn't give you the option at all.

I found a forum where someone had the same issue I'm having, but the solution is to use a hex editor on the sidebar exe file.

http://www.w7forums.com/stop-sidebar-exe-autorunning-t3807.html


Can anyone edit the two files for me? Or give me a step-by-step on how to do the hex editing?

I can email the two exe files to whoever wants to take a look.

Thanks for any help.

 

[Synomenon]

Bump...

 

[Synomenon]

The run string for the 64-bit sidebar exe starts at: 0x00005F1C

and for the 32-bit sidebar it starts at: 0x000AC534

 

[CycloWizard]

Have you tried just downloading a hex editor and changing it yourself? Within the hex editor, just search for the string you need, then edit the values. The hex and English are usually shown with one on either side of the editor to make editing easy. It's been a long time since I did anything like this, so I can't necessarily recommend a program, but I'm sure a quick Googling will yield plenty of free programs that will do the job.

 

[Synomenon]

Yes, I've downloaded a couple of hex editors, but when I search for those values I posted above, neither find them. I don't know what option to choose in the searches in the first place. They have different options you can choose in the hex editors when you search.

Also, I can't find the specific line they're talking about on the side that does show some English.

 

[C1]

This looks like a hex editor that works for Windows registry keys:

http://www.chmaas.handshake.de/delphi/freeware/xvi32/xvi32.htm

 

[PottedMeat]

This looks like a hex editor that works for Windows registry keys:

http://www.chmaas.handshake.de/delphi/freeware/xvi32/xvi32.htm

yeah, this one is easy to use.

 

[Synomenon]

Yeah, that's one of the free hex editors I tried. I can't figure out how to find those strings I posted up above.

 

[PottedMeat]

...you can't find the address 0x00005F1C, look at the ascii representation, see the string, and edit the value?

 

[Synomenon]

I don't even know how to work with hex, ascii, etc.. I'm not a programmer and the most advanced computer related class I've ever taken was Intro. to management information systems.

 

[PottedMeat]

note - i only skimmed the thread you gave and assumed the 0x5F1C hex edit was the thing you wanted to do

*make a copy of the file, call it original.exe or something if this doesn't work.

xvi32
1. open the file
2. click->address->goto, click hexadecimal, paste 00005F1C, click absolute, click ok
3. look in right table and see the string, one letter per square starting at 00005F1C
4. open notepad, type 'S' and copy it to the clipboard
5. the first letter of the string should be highlighted still in xvi32, then click edit->clipboard->paste. now the right table should have the original string but this time the first character replaced by an 'S'

then save the file

 

[Synomenon]

Thanks. Will give this a try.

The run string for the 64-bit sidebar exe starts at: 0x00005F1C

and for the 32-bit sidebar it starts at: 0x000AC534

 

[Synomenon]

It worked! Also, they had it switched around. 00005F1C is for the 32-bit sidebar and 000AC534 is for the 64-bit sidebar.