Div packer/launcher

[ShangriLa]

yeah we have those files But Lmrt got banned

[HellSpider]

Originally Posted by ItsNobody

<-- Link invalid - See my post ahead for more info...

I'm gonna check these out. The thing that was said about the scans is really true, these got something weird but IMA look at them . And if mods feel unsure just edit the post, don't start requesting any bans please .

[ShangriLa]

Instant --- Check ... NOD32 detect VIRUS FOR MEE ... but works fine ... some fake alerts doesn't matter

[ex6tenCe]

LMAO, look at this loser

Originally Posted by ShangriLa

I have these packers ... But some antiviruses detect FAKE trojan .... i wanna post it , but i will get BANNED so, i wont rlz

btw: if you get banned with your 6post acc, nobody would care anyway

[HellSpider]

I made some research on the Pak tool.exe . I ran it under a sandbox software and recorded all changes it would make. It loads some files in the current user temporary folder.

The files are:

dllxxx.dll (x = wildcard) -->
1111.exe -->

BUT, the packtool probably isn't a virus. It's just someone between the users who added malware into it and continued to seed the modified version. I have managed to change it so that no virus files are moved to the temp folder but I will still continue to analyze the executable.

Well I'll post the new packer executable which is in my opinion safer and smaller (because of the removed stuff). It works exactly like the last one but this doesn't drop trojans to your temporary folder .

Btw @ Trane: You might want to edit the link to the original post with the packer because it indeed has some trojans. But don't use the ban-hammer .



WARNING!!

I can't be held responsible for any damage caused by this executable. I'm not saying it has some malware or that it doesn't, just because I'm not sure. It's up to you to decide if you trust this file. All I can say is that this file is safer than the previous file. Thanks.

Originally Posted by ShangriLa

Instant --- Check ... NOD32 detect VIRUS FOR MEE ... but works fine ... some fake alerts doesn't matter

Works fine, but with virus . Looks like there was some in the package. Better to scan your computer.

[ex6tenCe]

Originally Posted by InstantDeath

Btw @ Trane: You might want to edit the link to the original post with the packer because it indeed has some trojans. But don't use the ban-hammer .

Originally Posted by ~trane~

Ok, I will use ban-mace :O

LMAO!!!!

[ItsNobody]

Sorry uzeia gave me the pak tool....hmmm the first one he sent me was just the unpacker and it even threw off red alarms in the windows live anti virus scanner lol Never opened it just probed for packer itself which i guess had something funky too. Its cool ill just reformat again. Only takes 45 mins lol.Thanks alot Instant for the heads up bro. BTW trane....it better be the bear mace cuz the cop **** doesnt doo much to meh ;P But still i thank uzeia for giving it to meh he even said they were false alarms...guess he didnt know either. But i cant get the data.pak i made to run . hmmm

[janvier123]

Filename: Pak Tool.exe
Status: Scan finished. 14 out of 20 scanners reported malware.
Scan taken on: Sun 31 May 2009 11:08:16 (CET)



Filename: Dekaron Pak-file packer.rar
Status: Scan finished. 10 out of 20 scanners reported malware.
Scan taken on: Sat 30 May 2009 16:51:31 (CET)

[HellSpider]

Originally Posted by janvier123

Filename: Pak Tool.exe
Status: Scan finished. 14 out of 20 scanners reported malware.
Scan taken on: Sun 31 May 2009 11:08:16 (CET)



Filename: Dekaron Pak-file packer.rar
Status: Scan finished. 10 out of 20 scanners reported malware.
Scan taken on: Sat 30 May 2009 16:51:31 (CET)

Thanks for posting the scan. As you can see the better Anti-Virus softwares (F-Secure, Kaspersky, Norman) doesn't detect anything in my replacement. It's because they use Sandbox technology in their scans and those didn't find anything suspicious once they ran the executable. The ones not using this technology will just scan for signatures and they will of course find the old signature of the trojan. Or that's how I would interpret the scan results .

[jeffijoe]

Omfg.. I got so many questions, and my forehead is about to POP!

First, I want to know if the data.pak works after you packed it with Dekaron Pak-file packer

Seccond, the Eternia Dekaron Launcher, Dekaron eXtreme Launcher, and Official EU Dekaron launcher, are they those so-called Div Packers?.. And how did Eternia and eXtreme Redesign them??..

Man, I feel dumb right now.. xD I have some SERIOUS stuff to catch up on. ^^

[HellSpider]

Originally Posted by jeffijoe

Omfg.. I got so many questions, and my forehead is about to POP!

First, I want to know if the data.pak works after you packed it with Dekaron Pak-file packer

Seccond, the Eternia Dekaron Launcher, Dekaron eXtreme Launcher, and Official EU Dekaron launcher, are they those so-called Div Packers?.. And how did Eternia and eXtreme Redesign them??..

Man, I feel dumb right now.. xD I have some SERIOUS stuff to catch up on. ^^

1. I never packed anything with the packer. I need to translate it first. I would be glad if someone would post a picture of a translation .

2. If they got the sourcecode for the launcher it isn't hard to redesign it. It can be done just with "resource-hacking" too but then you can just redesign the look but not the functionality.

[ItsNobody]

Has anyone got a data.pak working with this packer?

[HellSpider]

Nope, not yet .

[ItsNobody]

Hmmm Im currently getting someone to translate the prog...finding out exactly what i need

[HellSpider]

Originally Posted by ItsNobody

Hmmm Im currently getting someone to translate the prog...finding out exactly what i need

I'm translating that too but it's kinda hard when all the letters are just random signs .

I should make an virtual korean OS but if you said someone is already translating that I don't think I'll start doing it.