JoeK's Project Central

[Deriaz]

Hey guys!
this looks awesome, but it seems like you stopped updating it, any plans on releasing a new update any time soon?

[DragonGoddess]

Originally Posted by Deriaz

Hey guys!
this looks awesome, but it seems like you stopped updating it, any plans on releasing a new update any time soon?

Right now is not the best time for Joek to update CO2M8 anyway because TQ is realeasing all the patches for Valentines Day and all the others. He'll probably update in a week or two when TQ isn't updating constantly because of holiday events.

[Ulfius]

Originally Posted by leman

hi! any way to bypass antivirus?
Cos i cant DL finish. it block by anti virus.

There are two versions of each co2m8 release (a and b). If one causes a virus alert, try the other one.

[zackzz]

it doesn't work in the newest patch?

[daveq]

Originally Posted by zackzz

it doesn't work in the newest patch?

It does if you update the addresses.
What I've gathered so far, copy this into your ma-global.inf file:

[ListVer]
CO2=5100
REV=9

[MemAdd]
;CPS=&H5DB6F8
CharLV=&H5DB200
CharName=&H5DA7C8
CharStam=&H5DB1F8
;CharXP=&H5DB490
;ClientZoom=&H5D91E0
MapID=&H5D8F00
MapName=&H5D8F70
MoneyInv=&H5DB484
MoneyWh=&H5DB8F0
Ping=&H5DE770
Spouse=&H5DAEB8
SrvName=&H5DEA60
;VPS = &H5DB4C4
;XPcnt=&H5DB14C
Xpos=&H5DA898
Ypos=&H5DA89C
;VPS=&H5DB4C4
;OrdX=
;OrdY=

[joek]

Sorry Ive been away for a bit will do another update soon as I can.

[ThatDudeANTHONY]

You have to buy it though

[_tal]

Originally Posted by joek

CO2hud Project (For Game Client v5027 and under)
Character details manager (account name, account pw, warehouse pw, notes)
Client starter (starts tools as well)
Login handler (logs in characters)
Trigger actions/skills (xp, stamina, sit, reload arrows, guards, etc)
Pop health/mana potions when required
Active character information display (xp, vp, server, etc)
Fast switching between client screens
Auto press mouse left/right and/or ctrl/shift
Works well with target bots like partner (even for tao's)

This is just a short summary of the many functions of this program, check out the development link for full details.
This project is pixel based so only handles one character at a time but character switching is made very easy. Use CO2m8 if you need to deal with multiple characters at the same time.

CO2hud Full Details - post bugs & comments here --->

Now uses a external table to get its memory addresses, so you should not need to update this version again until it has new features.....


Download CO2HUD Here ->

I'm not really sure about this, nor do I even care, but I just thought I would throw it out here anyway. I do not have the file on my computer, and won't be downloading it again, or I would upload it somewhere:

2/23/2009 7:15:11 AM Detected: Packed.Win32.Black.a C:\Users\therewasafoldernamehere\anotherfolderyay\ cohud\CO2hud.exe

[bugaboo]

Originally Posted by _tal

I'm not really sure about this, nor do I even care, but I just thought I would throw it out here anyway. I do not have the file on my computer, and won't be downloading it again, or I would upload it somewhere:

2/23/2009 7:15:11 AM Detected: Packed.Win32.Black.a C:\Users\therewasafoldernamehere\anotherfolderyay\ cohud\CO2hud.exe

you idiots think that by creating an account and coming here to say that a program that has been known to work for years is suspicious is pretty lame. TQ can't stop hacks so they come here to make people think things are bugged. WEAK ***

[_tal]

Originally Posted by bugaboo

you idiots think that by creating an account and coming here to say that a program that has been known to work for years is suspicious is pretty lame. TQ can't stop hacks so they come here to make people think things are bugged. WEAK ASS

In case you do not know, any program may perform actions that you are unaware of. You are never positively sure of what goes on in the background. The one way of knowing exactly what a program does is by obtaining the source code. I simply stated that, based on my scan, your account MAY be at risk of getting stolen.

Read deeper, I DO NOT CARE. I left this forum years ago. Why don't you also scan the file instead of gripping at me about it. I was just allowing those who actually care about stuff like this to know what I ran across. I was only telling people to take heed of the program.

If you are going to "flame?" me, go ahead. I don't really care. I've said what I came here for. If you assume I am affiliated with TQ, you are far beyond help. I don't care to be involved with a money-hungry company. I am an old Conquer player and decent elitepvper. Waste your time as you wish...

I also forgot to state that the scan was a routine scan of my entire computer with Kaspersky Internet Security 2009 v8.0.0.454

P.S. I downloaded it again and obtained the same verdict:
2/24/2009 1:49:46 PM C:\folder\folder\folder\folder\folder\archive\CO2h ud.exe WinRAR archiver Detected: Packed.Win32.Black.a


After scanning the file myself, I scanned the file at a few recommended places:

1st--http://virusscan.jotti.org/

Service load:  	
0% 	  	  	100%
File: 	CO2hud-118(2).rar
Status: 	
INFECTED/MALWARE
MD5: 	c6a6d8764583738060bc07367f9ff42b
Packers detected: 	
Analyzing...

Scan taken on 24 Feb 2009 18:48:43 (GMT)
A-Squared 	
Found nothing
AntiVir 	
Found nothing
ArcaVir 	
Found nothing
Avast 	
Found nothing
AVG Antivirus 	
Found nothing
BitDefender 	
Found nothing
ClamAV 	
Found nothing
CPsecure 	
Found nothing
Dr.Web 	
Found Trojan.Packed.650
F-Prot Antivirus 	
Found nothing
F-Secure Anti-Virus 	
Found Packed.Win32.Black.a
Ikarus 	
Found Trojan-Downloader.Win32.Bagle.jc
Kaspersky Anti-Virus 	
Found Packed.Win32.Black.a
NOD32 	
Found nothing
Norman Virus Control 	
Found nothing
Panda Antivirus 	
Found nothing
Sophos Antivirus 	
Found Mal/Behav-285
VirusBuster 	
Found Packed/Themida
VBA32 	
Found nothing

2nd--http://www.virustotal.com/analisis/4793632e6dae01ad90055801a1e25a6a

File CO2hud-118_2_.rar received on 02.24.2009 19:49:58 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 18/39 (46.16%)

Antivirus  	Version  	Last Update  	Result
a-squared	4.0.0.93	2009.02.24	-
AhnLab-V3	2009.2.24.0	2009.02.24	-
AntiVir	7.9.0.88	2009.02.24	-
Authentium	5.1.0.4	2009.02.24	W32/Heuristic-THX!********
Avast	4.8.1335.0	2009.02.24	-
AVG	8.0.0.237	2009.02.24	Win32/Themida
BitDefender	7.2	2009.02.24	-
CAT-QuickHeal	10.00	2009.02.22	-
ClamAV	0.94.1	2009.02.24	-
Comodo	983	2009.02.20	Unclassified Malware
DrWeb	4.44.0.09170	2009.02.24	Trojan.Packed.650
eSafe	7.0.17.0	2009.02.19	-
eTrust-Vet	31.6.6372	2009.02.24	-
F-Prot	4.4.4.56	2009.02.24	W32/Heuristic-THX!********
F-Secure	8.0.14470.0	2009.02.24	Packed.Win32.Black.a
Fortinet	3.117.0.0	2009.02.24	W32/Packed.2D18!tr
GData	19	2009.02.24	-
Ikarus	T3.1.1.45.0	2009.02.24	-
K7AntiVirus	7.10.639	2009.02.21	Trojan.Win32.Malware.1
Kaspersky	7.0.0.125	2009.02.24	Packed.Win32.Black.a
McAfee	5535	2009.02.24	New Malware.jn
McAfee+Artemis	5534	2009.02.23	New Malware.jn
Microsoft	1.4306	2009.02.24	-
NOD32	3886	2009.02.24	probably a variant of Win32/Obfuscated
Norman	6.00.06	2009.02.24	-
nProtect	2009.1.8.0	2009.02.24	-
Panda	10.0.0.10	2009.02.23	Suspicious file
PCTools	4.4.2.0	2009.02.24	Packed/Themida
Prevx1	V2	2009.02.24	Medium Risk Malware
Rising	21.18.12.00	2009.02.24	-
SecureWeb-Gateway	6.7.6	2009.02.24	-
Sophos	4.39.0	2009.02.24	Mal/Behav-285
Sunbelt	3.2.1856.2	2009.02.24	<Corrupted Archive>
Symantec	10	2009.02.24	-
TheHacker	6.3.2.5.264	2009.02.24	-
TrendMicro	8.700.0.1004	2009.02.24	-
VBA32	3.12.10.0	2009.02.24	-
ViRobot	2009.2.24.1621	2009.02.24	-
VirusBuster	4.5.11.0	2009.02.24	Packed/Themida

3rd--http://www.viruschief.com/index.html

[b]Antivir:[/b] [color=green]Nothing found[/color]
[b]ArcaVir:[/b] [color=green]Nothing found[/color]
[b]Avast:[/b] [color=green]Nothing found[/color]
[b]AVG:[/b] [color=green]Nothing found[/color]
[b]BitDefender:[/b] [color=green]Nothing found[/color]
[b]F-Prot:[/b] [color=green]Nothing found[/color]
[b]Norman:[/b] [color=green]Nothing found[/color]
[b]Rising:[/b] [color=green]Nothing found[/color]
[b]VirusBlokAda32:[/b] [color=green]Nothing found[/color]
[b]VirusBuster:[/b] [color=green]Nothing found[/color]

[URL=http://www.viruschief.com/report.html?report_id=9943b23eeddff352e8e188e16358ead04a6cd4a0]Report overview[/URL]
[i]Scanned by [URL=http://www.viruschief.com]viruschief.com[/URL][/i]

What more proof do you need? Seriously...

[bugaboo]

Wall of text coming. Apologies upfront.

Originally Posted by _tal

In case you do not know, any program may perform actions that you are unaware of. You are never positively sure of what goes on in the background. The one way of knowing exactly what a program does is by obtaining the source code. I simply stated that, based on my scan, your account MAY be at risk of getting stolen.

Well.. actually you never said that at all... let me remind you...(and yes... I do know that any program can do things in the background.)

Originally Posted by _tal

I'm not really sure about this, nor do I even care, but I just thought I would throw it out here anyway. I do not have the file on my computer, and won't be downloading it again, or I would upload it somewhere:

What you did was post a few scans of a file and claim that it has trojans.

Originally Posted by _tal

Read deeper, I DO NOT CARE. I left this forum years ago. Why don't you also scan the file instead of gripping at me about it. I was just allowing those who actually care about stuff like this to know what I ran across. I was only telling people to take heed of the program.

Not only do I scan any files that I download but I also read the majority of the posts in a thread before I download it to see what kind of feedback it is getting. You obviously didn't bother to do that. I should ask you, why don't you learn about false positives instead of gripping at me?

Originally Posted by joek

I will reiterate just so you all know,
co2m8 is packaged using a Themida style encryption/protection system.
This is to protect my intellectual property and to ensure wormed versions are not released by others.
Down side is some anti-virus programs get false positives so its a mixed blessing but I think its safer to do it this way.

Many anti-virus programs detect all themida style packed stuff as a possible virus because they can't tell the difference. The anti virus people have become slack in identifying real threats and are now using blanket tactics. This is a false reading, hence the name given for these readings being "False Positives". They are not real viruses but the virus scanners think they are. If Joek had packed a virus into his programs, I highly doubt that the moderators for this site would have pinned this thread.

Originally Posted by _tal

If you are going to "flame?" me, go ahead. I don't really care. I've said what I came here for. If you assume I am affiliated with TQ, you are far beyond help. I don't care to be involved with a money-hungry company. I am an old Conquer player and decent elitepvper. Waste your time as you wish...

Flame? what I was doing was seeing a guy that had 1 post and created an account the same day he made that 1 post, just to post the same scans that have been posted over and over and have been explained over and over about the false positives. If you are a decent elitepvper as you say, you would have heard of false positives before. And yes... guys from TQ do create accounts just to go through threads and post false scans to scare off the 10-12 year old kids that don't know any better and have them spread rumors.

Originally Posted by _tal

What more proof do you need? Seriously...

Proof? well...lets try real world proof, not just relying on a scan. I have used Joek's programs for over 2 years now. Never once had a problem with anything. Never had any accounts hacked, never had any gear stolen, never had any chars botjailed. Never had any other suspicious activity on my computer. And I run complete scans all the time.

[_tal]

Originally Posted by bugaboo

Wall of text coming. Apologies upfront.

Well.. actually you never said that at all... let me remind you...(and yes... I do know that any program can do things in the background.)

What you did was post a few scans of a file and claim that it has trojans.

Not only do I scan any files that I download but I also read the majority of the posts in a thread before I download it to see what kind of feedback it is getting. You obviously didn't bother to do that. I should ask you, why don't you learn about false positives instead of gripping at me?

Many anti-virus programs detect all themida style packed stuff as a possible virus because they can't tell the difference. The anti virus people have become slack in identifying real threats and are now using blanket tactics. This is a false reading, hence the name given for these readings being "False Positives". They are not real viruses but the virus scanners think they are. If Joek had packed a virus into his programs, I highly doubt that the moderators for this site would have pinned this thread.

Flame? what I was doing was seeing a guy that had 1 post and created an account the same day he made that 1 post, just to post the same scans that have been posted over and over and have been explained over and over about the false positives. If you are a decent elitepvper as you say, you would have heard of false positives before. And yes... guys from TQ do create accounts just to go through threads and post false scans to scare off the 10-12 year old kids that don't know any better and have them spread rumors.

Proof? well...lets try real world proof, not just relying on a scan. I have used Joek's programs for over 2 years now. Never once had a problem with anything. Never had any accounts hacked, never had any gear stolen, never had any chars botjailed. Never had any other suspicious activity on my computer. And I run complete scans all the time.

By reading what I typed, and reading information given by the links, you should have inferred that the file MAY be dangerous. I know I never went out and said it may harm your computer, but common sense and a little reading should have told you that thats what I made that post for. One of the links I provided even mentioned Themida (). I only came here to state that the file may contain malicious code. And, once again, MAY harm you're computer and/or account.

I do not believe I made a statement that claimed, without a shadow of a doubt, your account would get stolen, etc.,. Yes I do know of false positives, and "packed stuff." Gripping at you? I only made statements. You basically assumed that my scan was false, and all I did was provide slight proof of some anti-virus software finding problems with the file, to prove that I wasn't just lying about the scan.

Also, if you would have paid attention to the last scan, everything came clean. If I came here to wreak havoc on the reputation of JoeK or his program, do you really think I would provide clean scan results? That scan was there to also provide evidence that those other scans may in-fact have been invalid and were simply false positives.

P.S. Maybe I overlooked it, but no where in the thread did I find any mention of a Packed.Win32.Black.a, prior to my post. Most scans referred to CO2m8.

Once again, I only came here to say what my scan found. And to show that I didn't fake my scan results. Nothing more.

A final note:
I personally believe the file to be completely harmless. It has been on my computer for longer than 5 months now. I think I even ran CO2hud once or twice, but never really saw a reason to use it on a daily basis. I shall not waste anymore time on this matter, though. Have a nice day.

[Acidburncx]

joek will u update this?

[bugaboo]

Originally Posted by _tal

I shall not waste anymore time on this matter, though. Have a nice day.

On this .... we agree

[naddo1]

OMFG.....

I have never had such a big smile on face as much as that after the last 4-5 threads....

_TAL <----- Too much time on your hands... TQ affiliate...nah... this guys is too serious

bugaboo <---- chill,have a reefer, but totally agreeable

Guys, lets let Joek do what he does best... (thanks Joek BTW)


ps.. anychance of some memory updates