Senior Member




I know that you people like to post virus scans, a lot. In regards hack downloads containing viruses, trojans, keyloggers, etc. So I'm going to educate you on how we do things, and how to read a virus scan. First, you need some background info.
.:Packers:.
There is quite a large list at the bottom of the page, most authors use UPX because it's very compatible, free and easy to use packer. A lot of compilers come bundled with it, even a lot of big software companies use it, too. So if you see any of these names or "Packer.Win32.blah" or something that says "Crypt" that simply means that the file you scanned is packed. Simple as that. Packing is not malicious, it's quite widely used, and safe. I'm not saying that all packed software is safe, just the method of packing is. I have no doubt viruses have it too.Originally Posted by wiki
In a nut-shell: Anything Crypt.* is a good indication the file has been compressed similar to zip or rar. This might mean the software is trying to hide something but most typically in the case of hacks, the author is trying to obscure their code from theft and/or making the file smaller for distribution purposes..:How Hacks Work:.
Starcraft utilizes predominantly 'DLL injection' which is a coding term that means to deliver a piece of software into another application using unconventional means, in our case this is the 'hack' itself into the 'game'. For a virus, not so much. Hacks and viruses aren't that indifferent. The only difference is the end result. Modifying memory, executing code, modifying files and communicating to the internet (our more sophisticated hacks do this for authentication 'n' stuff).
Just make sure you know what you're downloading, and where it's coming from. I'm not going to vouch for anything other than what our staff has hand-made, and personally posted. The staff are not responsible for any User Downloads you get from this site. We do our best to make sure what you download is safe, however unless we have the source, it's very hard to call something 100% safe. All the Official Downloads are made personally by our skilled staff, and are 100% safe.
Because most new virus scanners run in the background to try detect viruses before they become wide spread on your computer, and attempt to catch unidentified ones, they have to scan files based on heuristics. This means that anything that makes code calls not done by standard software. I.E. viruses and hacks both use remote memory writes "WriteProcessMemory", this will usually set off an alert as something that could potentially hurt your computer, and is thus called "Suspicious" even though the scanner doesn't specifically know if it's malicious or not.
Some common false positives and real viruses listed below. Discover any others that should belong in this list? Let us know.
THESE ARE OKAlso, be aware that virus scanners scan based on characteristics of KNOWN and WIDESPREAD malicious software. They are never 100% accurate, nor are capable of finding 100% of the "bad stuff."
- HackTool.Win32.blah
- Packer.Win32.blah
- TR/Crypt.XPACK.Gen
THESE ARE BAD
- BackDoor.W32.Bifrose.tzm
- VirusConstructor.Davwormgen
- Trojan.Rootkit.A
If your virus scanner is not allowing your hacks to be ran, this is a good thing. The protection is working, you either have to manually add it to the "allow" list or simply turn off your protection.
Some very good popular scanners are:
Online malware scan
VirusTotal - Free Online Virus and Malware Scan
If I've used some big words you're not familiar with, here is a glossary of terms related to viruses. click
If you have any questions you'd like to ask me, or some information you'd think would be useful in this post, please PM me.
Online malware scan
VirusTotal - Free Online Virus and Malware Scan
Last edited by Zynastor : 01-25-2009 at 04:02 AM
Uppercase is not shouting, this is a myth perpetuated by housewives and sex offenders.
--
Set a trashcan on fire and keep a bum warm for a night. Set the bum on fire, and keep him warm for the rest of his life.
--
If debugging is the process of removing bugs, then programming must be the process of putting them in. - Edsger Dijkstra



Updated!
There are currently 1 users browsing this thread. (0 members and 1 guests)