Showing results 1 to 2 of 2

Thread: Regarding Virus Scans

  1. #1
    Senior Member
    Retired Staff Member

    Celestial Entity
    gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126 has a reputation beyond repute gamepin126's Avatar
    Join Date
    Oct 2004
    Posts
    20,110
    Downloads
    14
    Uploads
    0

    Regarding Virus Scans

    I know that you people like to post virus scans, a lot. In regards hack downloads containing viruses, trojans, keyloggers, etc. So I'm going to educate you on how we do things, and how to read a virus scan. First, you need some background info.

    .:Packers:.

    Quote Originally Posted by wiki
    Executable compression is also frequently used to deter reverse engineering or to obfuscate the contents of the executable (for example, to hide the presence of malware from antivirus scanners) by proprietary methods of compression and/or added encryption. Executable compression can be used to prevent direct disassembly, mask string literals and modify signatures. Although this does not eliminate the chance of reverse engineering, it can make the process more costly.
    http://en.wikipedia.org/wiki/Executable_compression
    There is quite a large list at the bottom of the page, most authors use UPX because it's very compatible, free and easy to use packer. A lot of compilers come bundled with it, even a lot of big software companies use it, too. So if you see any of these names or "Packer.Win32.blah" or something that says "Crypt" that simply means that the file you scanned is packed. Simple as that. Packing is not malicious, it's quite widely used, and safe. I'm not saying that all packed software is safe, just the method of packing is. I have no doubt viruses have it too.
    In a nut-shell: Anything Crypt.* is a good indication the file has been compressed similar to zip or rar. This might mean the software is trying to hide something but most typically in the case of hacks, the author is trying to obscure their code from theft and/or making the file smaller for distribution purposes.
    .:How Hacks Work:.

    Starcraft utilizes predominantly 'DLL injection' which is a coding term that means to deliver a piece of software into another application using unconventional means, in our case this is the 'hack' itself into the 'game'. For a virus, not so much. Hacks and viruses aren't that indifferent. The only difference is the end result. Modifying memory, executing code, modifying files and communicating to the internet (our more sophisticated hacks do this for authentication 'n' stuff).

    Just make sure you know what you're downloading, and where it's coming from. I'm not going to vouch for anything other than what our staff has hand-made, and personally posted. The staff are not responsible for any User Downloads you get from this site. We do our best to make sure what you download is safe, however unless we have the source, it's very hard to call something 100% safe. All the Official Downloads are made personally by our skilled staff, and are 100% safe.

    Because most new virus scanners run in the background to try detect viruses before they become wide spread on your computer, and attempt to catch unidentified ones, they have to scan files based on heuristics. This means that anything that makes code calls not done by standard software. I.E. viruses and hacks both use remote memory writes "WriteProcessMemory", this will usually set off an alert as something that could potentially hurt your computer, and is thus called "Suspicious" even though the scanner doesn't specifically know if it's malicious or not.

    Some common false positives and real viruses listed below. Discover any others that should belong in this list? Let us know.
    THESE ARE OK
    • HackTool.Win32.blah
    • Packer.Win32.blah
    • TR/Crypt.XPACK.Gen


    THESE ARE BAD
    • BackDoor.W32.Bifrose.tzm
    • VirusConstructor.Davwormgen
    • Trojan.Rootkit.A
    Also, be aware that virus scanners scan based on characteristics of KNOWN and WIDESPREAD malicious software. They are never 100% accurate, nor are capable of finding 100% of the "bad stuff."

    If your virus scanner is not allowing your hacks to be ran, this is a good thing. The protection is working, you either have to manually add it to the "allow" list or simply turn off your protection.

    Some very good popular scanners are:
    Online malware scan
    VirusTotal - Free Online Virus and Malware Scan

    If I've used some big words you're not familiar with, here is a glossary of terms related to viruses. click

    If you have any questions you'd like to ask me, or some information you'd think would be useful in this post, please PM me.

    Online malware scan
    VirusTotal - Free Online Virus and Malware Scan
    Last edited by Zynastor : 01-25-2009 at 04:02 AM
    Uppercase is not shouting, this is a myth perpetuated by housewives and sex offenders.
    --
    Set a trashcan on fire and keep a bum warm for a night. Set the bum on fire, and keep him warm for the rest of his life.
    --
    If debugging is the process of removing bugs, then programming must be the process of putting them in. - Edsger Dijkstra

  2. #2
    Master Yoshi Senior Member
    Game Hacking Staff
    Moderator

    Blessed
    Zynastor is a name known to all Zynastor is a name known to all Zynastor is a name known to all Zynastor is a name known to all Zynastor is a name known to all Zynastor's Avatar
    Join Date
    Jun 2005
    Location
    Australia
    Posts
    2,352
    Downloads
    18
    Uploads
    1

    Updated!

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

     

Similar Threads

  1. [WarCraft] Toggle Unit Health Bars - In Game
    By eternal88soul in forum Old downloads
    Replies: 4
    Last Post: 07-11-2007, 08:15 AM
  2. Alternate starcraft
    By abwolf in forum Mods & Maps
    Replies: 13
    Last Post: 07-09-2007, 03:46 PM
  3. ASCII Macro Submissions.
    By gamepin126 in forum Starcraft Hacking Related
    Replies: 50
    Last Post: 11-12-2006, 05:13 AM
  4. Okay, I'm sick of being a gamehacking noob:
    By MarcX in forum Starcraft Hacking Related
    Replies: 62
    Last Post: 09-25-2005, 12:14 PM

Posting Rules

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts