D_EU_SA

Dam I hate to be the dude whos the dick that has to say something along the lines of, I told you so...

Edit:

Luke can you upload the files to rapidshare or some other uploading base so i can take a look just in case...

The first few are just .text files that include another link to another share cash download.
Then finally you get a folder with this in it and nothing else (as shown):
[Only registered and activated users can see links. Click Here To Register...]

and that's that.

Oh and that last password download has a .txt file saying: P1nOk0lz8q

and the first one was just blank.

Good game, good game.

Quote:

Originally Posted by Lukeff7 Incase anyone has yet to realise, this is just sharecash links within themselves to generate himself money. Hats of to the wanker, but still the mod who participated in this should be ashamed of himself.

Quote:

Originally Posted by Lukeff7 Ironic. Same file names. My only query is how you got the mod in on this little charade.

He got the moderator into this little "charade" by giving the moderator a legitimate file, with a termination string in it after 25 minutes, or so, of use. Should I close this, or does anyone expect him to actually give the file?

I'll give him an infraction for bogus links right now, until the community says otherwise.

Quote:

Originally Posted by Zacko7 He got the moderator into this little "charade" by giving the moderator a legitimate file, with a termination string in it after 10 minutes of use. Should I close this, or does anyone expect him to actually give the file?

I dont have the EU client so all I can say is that its most likely just a regular edit through hex related data to make it look legit. (who knows) Then again it could be the reg. DSEE, so what im getting at is that, it couldve been the reg DSEE just being able to run for a short period?

Like i said I have no knowledge of the EU client, just a stab in the dark.

Too small of a file so I doubt its even laced with anything thats worth worrying about.

Quote:

Originally Posted by defect I dont have the EU client so all I can say is that its most likely just a regular edit through hex related data to make it look legit. (who knows) Then again it could be the reg. DSEE, so what im getting at is that, it couldve been the reg DSEE just being able to run for a short period? Like i said I have no knowledge of the EU client, just a stab in the dark. Too small of a file so I doubt its even laced with anything thats worth worrying about.

True, the problem with this theory, is that theres no way DSEE could work without a bypass. Maybe he incorporated a bypass in it? Who knows.
I've heard of people using termination strings before too, which after a set amount of time, the file becomes corrupt and does not execute anymore. I've unpacked his file, and it's now empty, so I'm really confused.

The links are fake, well the .exe, fucking gay... if they r true put the damn file into rapid or mega or media.

That's true, should I just close this thread?

Quote:

Originally Posted by Zacko7 That's true, should I just close this thread?

Its really up to you.

Just view it with Olly and see what you can find. I really do doubt it that theres a termination string involved.

Quote:

Originally Posted by defect Its really up to you. Just view it with Olly and see what you can find. I really do doubt it that theres a termination string involved.

I can't run it anymore, there's no coding. That's the only logical explanation IMO.

Quote:

Originally Posted by Zacko7 I can't run it anymore, there's no coding. That's the only logical explanation IMO.

Totally beats me then. Probably a simple self modify code. Doubt it though, especially to incorporate it with DSEE/Dragonica. Around a good 25+ lines i think.

Quote:

Originally Posted by defect Totally beats me then. Probably a simple self modify code. Doubt it though, especially to incorporate it with DSEE/Dragonica. Around a good 25+ lines i think.

That's true. So much work for so little. Wouldn't it come up in a virus scan? It came up clean for me . . .

Maybe someone who knows more on this subject can come around and answer this problem. I'm completely confused.

Quote:

Originally Posted by Zacko7 That's true. So much work for so little. Wouldn't it come up in a virus scan? It came up clean for me . . . Maybe someone who knows more on this subject can come around and answer this problem. I'm completely confused.

Simple self modifying code dont usually show up on virus scans unless it makes direct changes to the users computer.

Virus scanners usually detect strings, either that or he edited strings of potential viruses or what not but unless he made the virus or whatever it couldve caused it to not run correctly so... ( a 2cents example)

Can't open it in Ollydbg.

can someone give me megaupload link please? i cant download..

notice that its a OLD picture means thats it is from DSEE when that worked and not his hack and.... means that he not got a hack only doing this for earning money by the site :D fuck him and ban him damn idiot....