COtopiaV0.9

gorgman · 02/04/2007, 23:23

*Edit - file removed by DM *

heres cotobo for that you cant dl cotopia i cant findthe file to dl it

Fretch15 · 02/09/2007, 18:34

Quote:

Originally posted by gorgman@Feb 4 2007, 23:23
heres cotobo for that you cant dl cotopia i cant findthe file to dl it

Lol , here is a virusscan from Jotti and VirusTotal

Jotti:

File: CoToBo.rar
Status: OK
MD5: c12a5dd8b3de174d8b3069d42def7115
Packers detected: -

Scan taken on 09 Feb 2007 17:19 (GMT)
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
VirusBuster
Found nothing
VBA32
Found nothing

So far so good,.... BUT jotti does not search with Panda

here comes VirusTotals search

VirusTotal:

Complete scanning result of "CoToBo.rar", received in VirusTotal at 02.09.2007, 18:16:47 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.36 02.09.2007 no virus found
Authentium 4.93.8 02.09.2007 no virus found
Avast 4.7.936.0 02.09.2007 no virus found
AVG 386 02.09.2007 no virus found
BitDefender 7.2 02.09.2007 no virus found
CAT-QuickHeal 9.00 02.09.2007 no virus found
ClamAV devel-20060426 02.09.2007 no virus found
DrWeb 4.33 02.09.2007 no virus found
eSafe 7.0.14.0 02.09.2007 no virus found
eTrust-Vet 30.4.3382 02.09.2007 no virus found
Ewido 4.0 02.09.2007 no virus found
Fortinet 2.85.0.0 02.09.2007 no virus found
F-Prot 4.2.1.29 02.09.2007 no virus found
F-Secure 6.70.13030.0 02.09.2007 no virus found
Ikarus T3.1.0.31 02.09.2007 no virus found
Kaspersky 4.0.2.24 02.09.2007 no virus found
McAfee 4960 02.09.2007 no virus found
Microsoft 1.2101 02.08.2007 no virus found
NOD32v2 2048 02.09.2007 no virus found
Norman 5.80.02 02.09.2007 no virus found
Panda 9.0.0.4 02.09.2007 Suspicious file<-------- ?? Would you mind telling what this is?
Prevx1 V2 02.09.2007 no virus found
Sophos 4.13.0 02.08.2007 no virus found
Sunbelt 2.2.907.0 02.09.2007 no virus found
Symantec 10 02.09.2007 no virus found
TheHacker 6.1.6.055 02.09.2007 no virus found
UNA 1.83 02.08.2007 no virus found
VBA32 3.11.2 02.08.2007 no virus found
VirusBuster 4.3.19:9 02.09.2007 no virus found

Aditional Information
File size: 157204 bytes
MD5: c12a5dd8b3de174d8b3069d42def7115
SHA1: f231a0b6a340dd689d37b78151b951e31d4a4f79

DON`T DOWNLOAD unless we get a good expenation on what that "suspicous file" is

ralphc4898 · 02/11/2007, 05:20

???

a1blaster · 02/12/2007, 03:53

False positives for scans on COtopiaV0.7 Hack Pack.

I looked into this matter of the scan I posted above, I also ran new scan on COtopiaV0.7.zip I have in archive.>>>

Quote:

Complete scanning result of "COtopiaV0.7.zip", received in VirusTotal at 02.12.2007, 03:17:01 (CET).

Antivirus Version Update Result
AntiVir 7.3.1.36 02.11.2007* no virus found
Authentium 4.93.8 02.12.2007* no virus found
Avast 4.7.936.0 02.11.2007* no virus found
AVG 386 02.11.2007* no virus found
BitDefender 7.2 02.12.2007* no virus found
CAT-QuickHeal 9.00 02.09.2007* no virus found
ClamAV devel-20060426 02.11.2007* no virus found
DrWeb 4.33 02.11.2007* no virus found
eSafe 7.0.14.0 02.09.2007 suspicious Trojan/Worm <--From UPX packers that are used!
eTrust-Vet 30.4.3384 02.10.2007* no virus found
Ewido 4.0 02.11.2007* no virus found
Fortinet 2.85.0.0 02.12.2007* no virus found
F-Prot 4.2.1.29 02.12.2007* no virus found
F-Secure 6.70.13030.0 02.11.2007* no virus found
Ikarus T3.1.0.31 02.11.2007 IM-Worm.Win32.Sohanad.aa <--False Positive From AutoIt V3.2.2
Kaspersky 4.0.2.24 02.12.2007* no virus found
McAfee 4960 02.09.2007* no virus found
Microsoft 1.2204 02.12.2007* no virus found
NOD32v2 2053 02.11.2007* no virus found
Norman 5.80.02 02.09.2007* no virus found
Panda 9.0.0.4 02.11.2007* no virus found
Prevx1 V2 02.12.2007* no virus found
Sophos 4.13.0 02.12.2007* no virus found
Sunbelt 2.2.907.0 02.09.2007* no virus found
Symantec 10 02.12.2007* no virus found
TheHacker 6.1.6.056 02.11.2007* no virus found
UNA 1.83 02.09.2007 Worm.Win32.Sohanad.t <--False Positive From AutoIt V3.2.2
VBA32 3.11.2 02.11.2007 IM-Worm.Win32.Sohanad.t <--False Positive From AutoIt V3.2.2
VirusBuster 4.3.19:9 02.11.2007 no virus found

Aditional Information
File size: 1284719 bytes
MD5: 7614c731c2a60bdb4fb26d145c95b3c0
SHA1: 6df63f1f6f269dd796e961154d430ddd030b1a23
packers: UPX
packers: UPX, UPX, UPX, UPX, UPX, UPX
packers: UPX

Ikarus T3.1.0.31 02.11.2007 IM-Worm.Win32.Sohanad.aa <--False Positive From AutoIt V3.2.2
UNA 1.83 02.09.2007 Worm.Win32.Sohanad.t <--False Positive From AutoIt V3.2.2
VBA32 3.11.2 02.11.2007 IM-Worm.Win32.Sohanad.t <--False Positive From AutoIt V3.2.2
These are all False Positives caused by the AutoItSC.bin file that Aut2Exe.exe uses to make autoit-v3.2.2.0 .au3 script files into .exe files. I sacned AutoItSC.bin file that comes from autoit-v3.2.2.0 themselves and got the same scan as above. I have also used at packet sniffer with this program and found no unusual activity from them.

Here's a link to AutoIt Forums that states this Are my AutoIt EXE's really infected?, How and Why your EXE's have been deleted. >

Copy from this link>

Quote:

If you have been using AutoIt for any length of time you will know that it is a great, and powerful scripting language. As with all powerful languages there comes a downside. Virus creation by those that are malicious.

AutoIt has no virii installed on your system, and if a script you have created has been marked as a virus, (and you're not malicious) then this is a false positive. They found a set of instructions in an AutoIt EXE out there somewhere, took the general signature of the file, and now all AutoIt EXE's are marked (or most of them). This can be due to several reasons.
AutoIt is packed with UPX. UPX is an open source software compression packer. It is used with many virii (to make them smaller).
Malicious scripter got the AutoIt script engine recognized as a virus.
And I am sure there are more ways your executable could be marked, but that covers the basics.

Now I am sure you are wanting to know what you can do to get back up and running without being recognized as a virus. You have to send in a report to the offending AV company alerting them to the false positive they have made. It never hurts to send in your source code along with a compiled exe, to help them realize their mistake.

You may have to wait up to 24 hours for them to release an update. The time it takes really depends on the offending AV company.

Anti-Virus Links
AntiVir
Website
Contact
Avast!
Website
Contact
McAfee
Website
Contact (email address)
Symantec (Norton)
Website
Contact
AVG
Website
Contact (It says sales or other ?'s I assume this will work)
ClamWin
Website
Contact
ClamAV
Website
Contact (I would only contact the ones with "virusdb maintainer or virus submission management")
BitDefender
Website
Contact
ZoneLabs
Website
Contact
Norman
Website
Contact (email address)
eSafe
Website
Contact (login required)
A2 (A-Squared)
Website
Contact (email address)
Edit: Added Website links and Contact links.

I hope this helps you understand why your AutoIt executables are marked as virii.
JS

The AV sites are supposed to be links but they don't make the copy and paste over to the quote.

I will PM death1111 and DM2000 about this post.

Hopefully death1111 will start working on this project again.

DM2000 · 02/12/2007, 04:18

Hi,

Yup. Some AV triggerred false alarm on AutoIt.

Thank you for the hard work a1

(^^).

DM

stephanie · 02/13/2007, 11:47

guys~ can u help me with some bots for conquer. im using tao n i wan to lvl it fast. any program tat u can suggest me? o sent it to me? or teach me?

LongPham · 02/17/2007, 15:44

noob

Ysuran · 02/18/2007, 07:08

Hmmm.....I'm trying to open the file with auto it but it won't.....

treecheetahdolo · 02/21/2007, 01:58

Quote:

Originally posted by death1111@Dec 30 2006, 23:42
Another update to COtopia, I know with the new patch it might not be as useful as before but at least it's something. For those of you who do not know, you need Auto-It to run the script. You can download Auto-It at.... . *NOTE* Once downloaded move the folder COtopiaV0.7 to wherever you want, open it, and run the COtopiaV0.7. All files MUST be in the same directory for it to work. My advice would be to make a shortcut of COtopiaV0.7 and place it in ur desktop.

COtopiaV0.1
-Basic ore dropper

COtopiaV0.2
-Added Dropping ore options

COtopiaV0.3
-New Interface
-Added "Log off on gem" function

COtopiaV0.4
-Added "Log off on bluename" function (If this function is on, it will take a screenshot right before it log's, for various reasons. Normal directory for screenshots would be "Start/MyComputer/local disk (C/Programfiles/Conquer 2.0/screenshots for those of you who do not know.

-Added Msg box that pops up after client is closed specifying the reason of log, whether it be Bluename, or gem (If it logged because a gem was found, it will say which gem was mined in the message box.)

COtopiaV0.5
-Fixed copper and gold ore pixel bug.

-Fixed major bug with COtopia resolution 1024x768.

COtopiaV0.6
-New interface
-Added all resolutions
-Added Auto-Stigma feature

COtopiaV0.7
-New interface
-Added Auto Skill-Lvler

------------------------------------------------------------------------------------------------------------------------

Download COtopiaV0.7 from one of the sites below...

--

--

Please post bugs and suggestions for upcoming updates please.

He posted wrong link
This is that RIGHT Auto-it link
Auto-it Version 3

<hr>Append on Feb 21 2007, 02:57<hr> SUGGESTION
Skill lvler works great but u forgot one thing....
When you're Blessed (Praying Stone) Ur Stamina goes up 2x Faster. So that means i could Be Leveling Stamina Skills 2x as fast. XD

Can u Accomadate the "Blessed" XD

gabrola · 02/24/2007, 01:19

Ty Helps a lot

jiggles · 02/25/2007, 20:04

OK, i downloaded the programs to run the scripts and i downloaded the hack pack. Ok, so how does this work. Does the game say i got an ore or do they just come up in my inventory. Cause i clicked gold ores and all i get are iron ores.

Please help im a noob to this kind of stuff.

a1blaster · 02/25/2007, 20:58

Quote:

Originally posted by jiggles@Feb 25 2007, 13:04
OK, i downloaded the programs to run the scripts and i downloaded the hack pack. Ok, so how does this work. Does the game say i got an ore or do they just come up in my inventory. Cause i clicked gold ores and all i get are iron ores.

Please help im a noob to this kind of stuff.

Anything you clicked it will be drop. So if you checked the gold, it will drop the gold and keep the others. Uncheck gold to keep them and check iron ore to drop those if thats what you want to drop.

jiggles · 02/26/2007, 01:32

Oh, ok thanks

Oh yea, one more question. Does my inventory have to be full for it to drop the ores ?

death1111 · 02/27/2007, 00:08

Lol, as to that x2 stamina thing if its really necassary ill add it.

@A1blaster, thanks for clearin up the dropping options for jiggles.
@treecheetahdolo, thanks for posting the new auto-it link
@stephani, Die.

asi · 02/27/2007, 13:33

So this thing does work?

And is it safe?