Mabipake-esque [Release]

Page 1 of 25 1 2311 Last »
05/17/2012 07:27 shadowsforu#1
[Only registered and activated users can see links. Click Here To Register...]
^^;

You will get no instructions, nor troubleshooting help.

I'll let you find out what makes this build of Mabipake so... unique.

;)

Virus-total report:

Code:
SHA256:	67805bf0eb12fa8f8429c8089f34f2c352e098af655e43758946cd8b7c06ff7e
File name:	Mabinogi.zip
Detection ratio:	21 / 42
Analysis date:	 2012-05-17 05:03:35 UTC ( 3 minutes ago ) 
00
More details
Antivirus	Result	Update
AhnLab-V3	-	20120516
AntiVir	TR/Spy.874496.12	20120517
Antiy-AVL	-	20120517
Avast	Win32:Malware-gen	20120516
AVG	-	20120516
BitDefender	Gen:Trojan.Heur.LP.1y4aae4Yfyki	20120517
ByteHero	-	20120515
CAT-QuickHeal	(Suspicious) - DNAScan	20120517
ClamAV	-	20120517
Commtouch	W32/MalCrypt.E.gen!********	20120517
Comodo	UnclassifiedMalware	20120517
DrWeb	-	20120517
Emsisoft	Gen.Trojan.Heur!IK	20120517
eSafe	-	20120516
eTrust-Vet	-	20120516
F-Prot	W32/MalCrypt.E.gen!********	20120516
F-Secure	Gen:Trojan.Heur.LP.1y4aae4Yfyki	20120517
Fortinet	Evx.BY!tr	20120517
GData	Gen:Trojan.Heur.LP.1y4aae4Yfyki	20120517
Ikarus	Gen.Trojan.Heur	20120517
Jiangmin	-	20120517
K7AntiVirus	Riskware	20120516
Kaspersky	-	20120517
McAfee	Generic.evx!by	20120517
McAfee-GW-Edition	Generic.evx!by	20120517
Microsoft	-	20120516
NOD32	-	20120517
Norman	W32/Suspicious_Gen.UVMP	20120516
nProtect	-	20120517
Panda	-	20120516
PCTools	-	20120517
Rising	-	20120517
Sophos	Sus/ComPack-M	20120517
SUPERAntiSpyware	-	20120517
Symantec	Trojan.Gen.2	20120516
TheHacker	-	20120517
TrendMicro	TROJ_GEN.R29C8EB	20120517
TrendMicro-HouseCall	TROJ_GEN.R29C8EB	20120517
VBA32	-	20120516
VIPRE	Trojan.Win32.Generic!BT	20120517
ViRobot	-	20120517
VirusBuster	-	20120517

These results are all because of Crackshield and Dinput. Dinput is the majority of heuristic detection, because it was packed using the same packing method as some other reported malware. It is not malicious, as confirmed by the Virus report, it is only detected as a generic form of malware.

Conclusion: False-positive.

Images:
[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]
05/17/2012 07:47 retarded jas161#2
what did you do to this? >:l
05/17/2012 13:40 adam_j#3
Quote:
Originally Posted by retarded jas161 View Post
what did you do to this? >:l
He did nothing to it, he didn't even make it. (So, he couldn't really have done anything to it)
I'm using it myself, there's nothing wrong with it, it's just.. different.

Seriously, give it a try, use a VM if you're really that worried.
05/17/2012 19:59 mabiblue#4
this is sendhook BAN ver right?
05/17/2012 20:46 Aka.#5
Quote:
Originally Posted by mabiblue View Post
this is sendhook BAN ver right?
This version is, yes.
05/17/2012 21:16 Winnehx3#6
I salute thee! You are the true hero of Leafre!
05/17/2012 21:47 harrybong1#7
Oh lol nvm.
05/17/2012 22:25 nekomaster#8
hmm where would one get alissaplus ? cuz i got everything else working but my alissa sends dont work owo
05/17/2012 22:33 Winnehx3#9
Quote:
Originally Posted by nekomaster View Post
hmm where would one get alissaplus ? cuz i got everything else working but my alissa sends dont work owo
You find a good place to fish, set the hook, and catch the fish. And then you put it into the bucket and begin thinking about what dishes to make with the fish.
05/17/2012 22:48 tomtoms#10
Quote:
Originally Posted by mabiblue View Post
this is sendhook BAN ver right?
you mean that this version get you ban or that it has limit on send feature?
05/17/2012 23:42 razer951#11
Quote:
Originally Posted by tomtoms View Post
you mean that this version get you ban or that it has limit on send feature?
The more logical one.
05/18/2012 00:39 Aka.#12
Quote:
Originally Posted by tomtoms View Post
you mean that this version get you ban or that it has limit on send feature?
I have never seen Marck troll people with stuff that would give you a virus or get you banned, he is a pretty decent guy.
05/18/2012 00:53 Epvp_God#13
Quote:
Originally Posted by Aka. View Post
This version is, yes.
Seems the creator didn't update the send hook by what I hear. I'll take a look n' see. lulz

BTW, someone should post a log to show what mods are working.
05/18/2012 02:07 shadowsforu#14
Quote:
Originally Posted by Epvp_God View Post
Seems the creator didn't update the send hook by what I hear. I'll take a look n' see. lulz

BTW, someone should post a log to show what mods are working.
You can easily rule out what mods are working simply by asking yourself the question, "Does it rely on sending packets?"

So obviously modules such as "Mod_Dorren" which auto-picks up whatever you drop, will not work etc, etc. (Some features included in modules such as Potato and kukulite only rely on recieved packets I believe, so those will work to an extent. I trust you understand where I'm going here. ^^; )

Now to address the other part of your post;

The author purposely did not hook the send function. I've confirmed that it's not the pake_dinput at fault, I used older versions on many different systems to verify that this is the case. It is actually the loader itself, which does not enable the send hook. (Blocking, or whatever synonym you want to use works here.)

An e-mail was also sent to the person this was obtained from originally, and he confirms that the author of this purposely designed it so that sending would not work.

(Roughly translated)
Quote:
This is because an author makes send specifications not to be usable.
We can do nothing..
05/18/2012 02:14 adam_j#15
Quote:
Originally Posted by shadowsforu View Post
You can easily rule out what mods are working simply by asking yourself the question, "Does it rely on sending packets?"

So obviously modules such as "Mod_Dorren" which auto-picks up whatever you drop, will not work etc, etc. (Some features included in modules such as Potato and kukulite only rely on recieved packets I believe, so those will work to an extent. I trust you understand where I'm going here. ^^;)

Now to address the other part of your post;

The author purposely did not hook the send function. I've confirmed that it's not the pake_dinput at fault, I used older versions on many different systems to verify that this is the case. It is actually the loader itself, which does not enable the send hook. (Blocking, or whatever synonym you want to use works here.)

An e-mail was also sent to the person this was obtained from originally, and he confirms that the author of this purposely designed it so that sending would not work.

(Roughly translated)
Still, this could be unpacked and learned from. There's still a number of functions that were updated for use with the current client, and that would probably be pretty good learning material, IF you can unpack it.

I hear the packing skills used upon on this release are scouter destroying.
Page 1 of 25 1 2311 Last »