<-- Link invalid - See my post ahead for more info...
I'm gonna check these out. The thing that was said about the scans is really true, these got something weird but IMA look at them . And if mods feel unsure just edit the post, don't start requesting any bans please .
I made some research on the Pak tool.exe . I ran it under a sandbox software and recorded all changes it would make. It loads some files in the current user temporary folder.
The files are:
Quote:
dllxxx.dll (x = wildcard) -->
1111.exe -->
BUT, the packtool probably isn't a virus. It's just someone between the users who added malware into it and continued to seed the modified version. I have managed to change it so that no virus files are moved to the temp folder but I will still continue to analyze the executable.
Well I'll post the new packer executable which is in my opinion safer and smaller (because of the removed stuff). It works exactly like the last one but this doesn't drop trojans to your temporary folder .
Btw @ Trane: You might want to edit the link to the original post with the packer because it indeed has some trojans. But don't use the ban-hammer .
WARNING!!
I can't be held responsible for any damage caused by this executable. I'm not saying it has some malware or that it doesn't, just because I'm not sure. It's up to you to decide if you trust this file. All I can say is that this file is safer than the previous file. Thanks.
Quote:
Originally Posted by ShangriLa
Instant --- Check ... NOD32 detect VIRUS FOR MEE ... but works fine ... some fake alerts doesn't matter
Works fine, but with virus . Looks like there was some in the package. Better to scan your computer.
Sorry uzeia gave me the pak tool....hmmm the first one he sent me was just the unpacker and it even threw off red alarms in the windows live anti virus scanner lol Never opened it just probed for packer itself which i guess had something funky too. Its cool ill just reformat again. Only takes 45 mins lol.Thanks alot Instant for the heads up bro. BTW trane....it better be the bear mace cuz the cop **** doesnt doo much to meh ;P But still i thank uzeia for giving it to meh he even said they were false alarms...guess he didnt know either. But i cant get the data.pak i made to run . hmmm
Filename: Pak Tool.exe
Status: Scan finished. 14 out of 20 scanners reported malware.
Scan taken on: Sun 31 May 2009 11:08:16 (CET)
Filename: Dekaron Pak-file packer.rar
Status: Scan finished. 10 out of 20 scanners reported malware.
Scan taken on: Sat 30 May 2009 16:51:31 (CET)
Thanks for posting the scan. As you can see the better Anti-Virus softwares (F-Secure, Kaspersky, Norman) doesn't detect anything in my replacement. It's because they use Sandbox technology in their scans and those didn't find anything suspicious once they ran the executable. The ones not using this technology will just scan for signatures and they will of course find the old signature of the trojan. Or that's how I would interpret the scan results .
Omfg.. I got so many questions, and my forehead is about to POP!
First, I want to know if the data.pak works after you packed it with Dekaron Pak-file packer
Seccond, the Eternia Dekaron Launcher, Dekaron eXtreme Launcher, and Official EU Dekaron launcher, are they those so-called Div Packers?.. And how did Eternia and eXtreme Redesign them??..
Man, I feel dumb right now.. xD I have some SERIOUS stuff to catch up on. ^^
Omfg.. I got so many questions, and my forehead is about to POP!
First, I want to know if the data.pak works after you packed it with Dekaron Pak-file packer
Seccond, the Eternia Dekaron Launcher, Dekaron eXtreme Launcher, and Official EU Dekaron launcher, are they those so-called Div Packers?.. And how did Eternia and eXtreme Redesign them??..
Man, I feel dumb right now.. xD I have some SERIOUS stuff to catch up on. ^^
1. I never packed anything with the packer. I need to translate it first. I would be glad if someone would post a picture of a translation .
2. If they got the sourcecode for the launcher it isn't hard to redesign it. It can be done just with "resource-hacking" too but then you can just redesign the look but not the functionality.
packer 05/25/2010 - Aion - 0 Replies where do i find a program that packs the extracted files back. im pretty sure therw is such a programs cuz theres a untradeable to tradeable item packer.
link if there was such a post about it.
[HELP]Dekaron Packer 12/06/2009 - Dekaron Private Server - 0 Replies Is there an public packers?
If so can you link me or can you direct me to where they were already posted(if posted)
thanks.
EDIT: nvm i found one, but i can't understand how to use it. It's the one from jenvers website.
can someone show me some tuts on how to use please.
N> grf packer 01/29/2006 - Ragnarok Online - 4 Replies ich bräuchte mal nen grf packer der nich bei koreanisch / acii/ abkackt
But Lmrt got banned
<-- Link invalid - See my post ahead for more info...
.
