It was my pleasure ;)

i don't know if could be useful, i've seen the new trillian web check protection yesterday and this program use these imports of Wininet.dll

HttpOpenRequestA
InternetCloseHandle
InternetConnectA
HttpSendRequestA
InternetQueryDataAvailable
InternetReadFile
InternetQueryOptionA
InternetSetOptionA
InternetOpenA
HttpQueryInfoA

so look fro strange names into imports.. maybe your program uses stupid functicon like these bye

and these:

WSAAccept
WSAConnect
WSARecv
WSARecvDisconnect
WSASend
WSASendDisconnect
WSASocketA

"Personally I don't like the style of "press F8, make a dump using PETools, fix the offset at...". I prefer the way of logic explaination (not tutorial) and ideas suggestion"

Yeah,,i agree completely with these words and also, if possible, ideas suggestion with a little rhetoric digressions in the old +Orc's oratorian style. Ahh...i'm sure i'm not the only one who misses so much that old texts.....Sorry.