Div packer/launcher

yeah we have those files :) But Lmrt got banned

Quote:

Originally Posted by ItsNobody [Only registered and activated users can see links. Click Here To Register...]<-- Link invalid - See my post ahead for more info... [Only registered and activated users can see links. Click Here To Register...]

I'm gonna check these out. The thing that was said about the scans is really true, these got something weird but IMA look at them :). And if mods feel unsure just edit the post, don't start requesting any bans please :).

Instant --- Check ... NOD32 detect VIRUS FOR MEE ... but works fine ... some fake alerts doesn't matter :)

LMAO, look at this loser

Quote:

Originally Posted by ShangriLa I have these packers ... But some antiviruses detect FAKE trojan .... i wanna post it , but i will get BANNED so, i wont rlz

btw: if you get banned with your 6post acc, nobody would care anyway

I made some research on the Pak tool.exe . I ran it under a sandbox software and recorded all changes it would make. It loads some files in the current user temporary folder.

The files are:

Quote:

dllxxx.dll (x = wildcard) --> [Only registered and activated users can see links. Click Here To Register...] 1111.exe --> [Only registered and activated users can see links. Click Here To Register...]

BUT, the packtool probably isn't a virus. It's just someone between the users who added malware into it and continued to seed the modified version. I have managed to change it so that no virus files are moved to the temp folder but I will still continue to analyze the executable.

Well I'll post the new packer executable which is in my opinion safer and smaller (because of the removed stuff). It works exactly like the last one but this doesn't drop trojans to your temporary folder :).

Btw @ Trane: You might want to edit the link to the original post with the packer because it indeed has some trojans. But don't use the ban-hammer :).

[Only registered and activated users can see links. Click Here To Register...]

WARNING!!

I can't be held responsible for any damage caused by this executable. I'm not saying it has some malware or that it doesn't, just because I'm not sure. It's up to you to decide if you trust this file. All I can say is that this file is safer than the previous file. Thanks.

Quote:

Originally Posted by ShangriLa Instant --- Check ... NOD32 detect VIRUS FOR MEE ... but works fine ... some fake alerts doesn't matter :)

Works fine, but with virus :). Looks like there was some in the package. Better to scan your computer.

Quote:

Originally Posted by InstantDeath Btw @ Trane: You might want to edit the link to the original post with the packer because it indeed has some trojans. But don't use the ban-hammer :).

Quote:

Originally Posted by ~trane~ Ok, I will use ban-mace :O

LMAO!!!!

[Only registered and activated users can see links. Click Here To Register...]

Sorry uzeia gave me the pak tool....hmmm the first one he sent me was just the unpacker and it even threw off red alarms in the windows live anti virus scanner lol Never opened it just probed for packer itself which i guess had something funky too. Its cool ill just reformat again. Only takes 45 mins lol.Thanks alot Instant for the heads up bro. BTW trane....it better be the bear mace cuz the cop shit doesnt doo much to meh ;P But still i thank uzeia for giving it to meh he even said they were false alarms...guess he didnt know either. But i cant get the data.pak i made to run . hmmm

Filename: Pak Tool.exe
Status: Scan finished. 14 out of 20 scanners reported malware.
Scan taken on: Sun 31 May 2009 11:08:16 (CET)
[Only registered and activated users can see links. Click Here To Register...]


Filename: Dekaron Pak-file packer.rar
Status: Scan finished. 10 out of 20 scanners reported malware.
Scan taken on: Sat 30 May 2009 16:51:31 (CET)
[Only registered and activated users can see links. Click Here To Register...]

Quote:

Originally Posted by janvier123 Filename: Pak Tool.exe Status: Scan finished. 14 out of 20 scanners reported malware. Scan taken on: Sun 31 May 2009 11:08:16 (CET) [Only registered and activated users can see links. Click Here To Register...] Filename: Dekaron Pak-file packer.rar Status: Scan finished. 10 out of 20 scanners reported malware. Scan taken on: Sat 30 May 2009 16:51:31 (CET) [Only registered and activated users can see links. Click Here To Register...]

Thanks for posting the scan. As you can see the better Anti-Virus softwares (F-Secure, Kaspersky, Norman) doesn't detect anything in my replacement. It's because they use Sandbox technology in their scans and those didn't find anything suspicious once they ran the executable. The ones not using this technology will just scan for signatures and they will of course find the old signature of the trojan. Or that's how I would interpret the scan results :).

Omfg.. I got so many questions, and my forehead is about to POP!

First, I want to know if the data.pak works after you packed it with Dekaron Pak-file packer

Seccond, the Eternia Dekaron Launcher, Dekaron eXtreme Launcher, and Official EU Dekaron launcher, are they those so-called Div Packers?.. And how did Eternia and eXtreme Redesign them??..

Man, I feel dumb right now.. xD I have some SERIOUS stuff to catch up on. ^^

Quote:

Originally Posted by jeffijoe Omfg.. I got so many questions, and my forehead is about to POP! First, I want to know if the data.pak works after you packed it with Dekaron Pak-file packer Seccond, the Eternia Dekaron Launcher, Dekaron eXtreme Launcher, and Official EU Dekaron launcher, are they those so-called Div Packers?.. And how did Eternia and eXtreme Redesign them??.. Man, I feel dumb right now.. xD I have some SERIOUS stuff to catch up on. ^^

1. I never packed anything with the packer. I need to translate it first. I would be glad if someone would post a picture of a translation :).

2. If they got the sourcecode for the launcher it isn't hard to redesign it. It can be done just with "resource-hacking" too but then you can just redesign the look but not the functionality.

Has anyone got a data.pak working with this packer?

Nope, not yet :(.

Hmmm Im currently getting someone to translate the prog...finding out exactly what i need

Quote:

Originally Posted by ItsNobody Hmmm Im currently getting someone to translate the prog...finding out exactly what i need

I'm translating that too but it's kinda hard when all the letters are just random signs :).

I should make an virtual korean OS but if you said someone is already translating that I don't think I'll start doing it.