View Full Version : Unreal Tournament 3 v1.0 [GERMAN] No-DVD/Fixed EXE is a Trojan_Horse_Backdoor
bernisage
14-11-2007, 04:25
Unreal Tournament 3 v1.0 [GERMAN] No-DVD/Fixed EXE contain à virus.;)
Joe Forster/STA
14-11-2007, 04:31
(Wrong forum, moved.)
No, it doesn't. Read the PC Games forum FAQ and the note on each game page...
its very senseless to upload an unprotected ut 3 exe because this game does not have a protection!
yep, have to agree there, also worth noting the english / int / other languages ver isn't available yet, so the crack is only of use to ze germans ;p
the right pronounciation is tze tshörmannz... :D
the UT crack may really contain a virus cuz it seems to be the original exe with some mods (not protection related cuz there is none) and the orig exe doesn't give a virus warning. I cant test if the "crack" is a trojan cuz 26MB is too much for me (56k) :mad: but maybe someone else can...
bernisage
14-11-2007, 10:27
(Wrong forum, moved.)
No, it doesn't. Read the PC Games forum FAQ and the note on each game page...
Yes, i read the faq but this .exe contains a virus. I share what I discovered you know.
Joe Forster/STA
14-11-2007, 10:37
What virus scanner do you use? Have you tried other virus scanners, especially the ones the PC Games forum FAQ recommends?
acal3000
14-11-2007, 22:00
I don't have the game but since i was a bit bored right now i tried to download and scan the file with different avs but gamecopyworld doesnl load
I scanned the file with BitDefender Antivirus v10. No virus/trojan found.
Muji-FightR
15-11-2007, 07:51
Maybe it's patched to allow invalid serials being used online or on LAN or something, like the one for Doom3 RoE...
Doesn't explain the virus detection though, maybe packed with a shitty packer that's likely to be detected as a trojan/virus...
If someone can Hex compare the submitted EXE with an origianl EXE and see if it's been modified it might help!
If it's the same as the original then it will be removed.
The-S-Owl
15-11-2007, 13:47
The "crack" is a Visual Basic exe, with a Winsock ActiveX inside, not trustworthy if you would ask me...
acal3000
15-11-2007, 14:01
This are my results:
Clamav didn't found nothing
AVG detected a trojan.backdoor like was previouly reported (AVG could give false warnings sometimes but its rare in game exes)
NOD32 says cannot scan the file coz says it's blocked or in use I( thought maybe already blocked by AVG but I recopied the file from my other partition to another folder closed avg then put NOD32 and still says it's bloked
Also the file don't seems to contain icon (It should have the UT3 game icon or something)
I agree in be careful with the file this time
I agree looks supicious this time
Joe Forster/STA
15-11-2007, 14:28
NOD32 says nothing about it. But, yes, if the game is officially not protected at all then what's the point of a crack anyway?! I would also vote for removal.
visual basic exe, the game sure as hell aint coded in visual basic, winsock usage esp. on a vb exe usually raises my suspicions... alarm bells ringing...
i'll check the file when im in work tomorrow and let you know, but for now, my gut feeling : file is fake, and potentially dangerous...
crack exe -> visual basic exe (confirmed) - 28,360,218 bytes in size
original exe -> not vb exe - 28,064,848 bytes in size
crack exe has appended encrypted data... too
conclusion : malware, dropper of some sort, file should be deleted from hosting...
hex comparison shows far too many changes for this to be a valid modded executable
changing compiler environment from c -> visual basic makes no sense either
Ok I have reported it to Empire, he will hopefully remove it when he gets time.
It's been removed as there is definately something "wrong" with the exe available @ GCW...
It came from someone who has upped files before so I did not think it could be something... but then again where did he got it ;)
Julian2504
22-11-2007, 09:25
Hi.
I am from Germany and i dont understand everything from these Thread.
I understand that the patch is not okey.
But give there on another page an No-DVD crack ?
Ich have the game and my cd is broken -.-
... 3 years old baby -.-
Sie haben nicht die Richtlinien
kein ursprüngliches = keine Unterstützung von uns gelesen
(you have not read the rules
no original = no support from us)
and 3 year olds aren't allowed to legally play this game ;p
Joe Forster/STA
22-11-2007, 09:45
@Julian2504: You should contact the publisher for a replacement DVD. (I suggest you to read the forum rules: no original => no help on these forums.) Also, because the game is not protected (see http://fileforums.com/showthread.php?t=82568), you don't need a no-DVD patch anyway.
bobrik75
22-11-2007, 10:27
please tell me wher did you finde Thitj fixed exe for Unreal tur 3.i kannt finde it
YOU DONT NEED ONE... READ! and dont duplicate posts either...
Julian2504
23-11-2007, 09:07
ahhhhhh =)
Thanks
if i dont need a dvd i have no problems =)
Thank you !
But why is there no protection on the dvd oO
because the developers probably thought they didnt need one (which is stupid)
and, because usually all the unreal tournament games got patches, and after a bit of time, a patch release was done, which removed the protection... it could also be because they're 'relying' on the cd/dvd key in the game to work... i haven't had time to play the game, but the brief time i did, i didnt make an account and did played in offline mode, and the game didnt save my progress... (which was pretty damned annoying)....
pArtizAn
31-01-2008, 07:50
Russian official release of UT3 have a StarForce protection. Thanks to russian Noviy Disk publisher...
vBulletin® v3.7.4, Copyright ©2000-2008, Jelsoft Enterprises Ltd.