New CO anti virus

04/28/2008 01:11 bugaboo#1
This is a question going out to the guys that make alot of the edits, multiclients, and hacks. Do you think the new anti virus that is going to be part of the new patch is going to block CO edits or just search for keyloggers and such?

I opened the 5022.exe in a new folder and there is a folder called zftqat that doesn't exist in the current CO folder. This new folder contains the new anti virus program. I am wondering if I just bring all the other things into CO and put them where they belong without bringing in their anti virus program, will CO work or is it going to look for the anti virus and shut down if it doesn't find it. Or am I just giving TQ too much credit and have nothing to worry about.
04/28/2008 01:48 hok30#2
:D No one knows unless you/somone tries it out. If you delete the "AntiVirus" its going to have trouble deleting stuff and searching and making sure everything is good, so I think somone should try that. Lets just wait for somone that accually knows about this thing post :D
04/28/2008 05:59 galyutsinogen#3
I wonder if their shitty antivirus gonna make lags in game :eek:
We definetly need to get rid of it.. Anyway it can search ur pc for random shit, maybe they wanna steal information :D:rolleyes: those bastards
04/28/2008 07:26 bugaboo#4
well...I read the language.ini file in the anti virus folder. It looks like you have an option to scan or not and it looks like it will only scan you CO folder. It looks to me that it will not scan for anything outside of CO. But I'mstill wondering if it will detect my itemtype edits and so forth.
04/28/2008 12:59 hok30#5
Probably... If there is anything different with the C02 folder, it fixes it. But if it truely does what they say it does (keep programs from stealing your id/pw) then it would have to search more then just the CO folder.
04/28/2008 19:25 Some-Guy#6
Quote:
Originally Posted by hok30 View Post
Probably... If there is anything different with the C02 folder, it fixes it. But if it truely does what they say it does (keep programs from stealing your id/pw) then it would have to search more then just the CO folder.
Likely it will scan running processes also.

Chances are you'll be looking at something similar to GameGuard but obviously not so well made (from their point of view).
04/28/2008 23:15 hok30#7
Quote:
Originally Posted by Some-Guy View Post
Likely it will scan running processes also.

Yeah exactly..

Quote:
Originally Posted by Some-Guy View Post
Chances are you'll be looking at something similar to GameGuard but obviously not so well made (from their point of view).
Whats game guard?
04/28/2008 23:37 evanxxxm#8
hok30@
GameGuard is a popular virus scanner that game developers use
i dont know why everyone is whining about the co scanner
actually u guys should be surprise why CO doesnt have a scanner
if u have play online games long enough, u should be aware most games like WC3, Gunbound, Darkeden, Silkroad, Rakion alot more have scanners

well, gameguard does detect Cheatengine and WPEpro, and once u open them, the game will close immediately
04/29/2008 01:06 hok30#9
I see, I guess people are thinking that it will search your computer for cheats... or any sort of automative program... But now that I think about it, how would it know if it is a cheat or not? Just if it moved your mouse or typed a key? That doesn't make sense... Does it? It would have to know the process name to close when it sees it...
04/29/2008 01:45 poptarts9090#10
i was wondering, if they do detect item types and multi clients, will they botjail you or something?
04/29/2008 01:49 hok30#11
No one knows. The patch has not been released yet. Evan acts like theres nothing to worry about though.
04/29/2008 02:14 anti-noob#12
Online Games evolve with there updates and patches i was acutally suprised when i started playing conquer that there was no scanner/anti-virus or anti-cheat system i would have called it. There always gonna make better programs but sometimes we make better programs hack and cracks. lol remeber cotobo's repair feature? good things never last forever so make the most of them. There will still be fun (ways to bypass scanner) in Conquer although it may be limited.
04/29/2008 02:33 hok30#13
Quote:
Originally Posted by anti-noob View Post
although it may be limited.
Which is why everyone is whining about it. They want it how it is right now.
04/29/2008 09:28 Jalan_Jalan#14
File: TQAT.exe
Status:
INFECTED/MALWARE
MD5: 05d5f2841b46aecabdb796f6b22c11db
Packers detected:
-
Bit9 reports:
Scanner results
Scan taken on 29 Apr 2008 07:12:23 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Sophos Antivirus
Found Mal/Behav-156
VirusBuster
Found nothing
VBA32
Found nothing


"Description:
Mal/Behav-156 is a malicious program." (Source: [Only registered and activated users can see links. Click Here To Register...])

"Malicious behavior
Description:

Malicious behavior describes an executable file that displays characteristics or behavior that are found exclusively within malware and are therefore blocked to prevent likely intrusion, disruption or damage to computer systems." (Source: Sophos.com)

Well, I never scanned a virus scanner with a virus scanner before, maybe I should scan my AV too ...

But, seriously now, has any of the people on here that know something about programming / reverse engineering found out whether TQ's lil proggy is too curious?
04/29/2008 10:45 conquerman#15
You can block the antivirus from contacting internet (it tries connect when opening gameclient), looks like it still scans CO.....but if we block it from the web, wouldent that drasticly decrese the chance of being caught with edited CO.exe (containing multi and deleting the popupwebsite from CO when closing an account)?