Sicheats (h4x0r) trainers now contain DRM but why?

[AFKGun]

If anyone want to find out the h4x0r trainer's purpose would scan the program for outbound data, destination IP can be detected by 3rd party firewall like ZoneAlarm, and type of data can be capture by WireShark etc.

Seriously how much that i don't get what is going on? So far i only understand h4x0r and CH, one is accusing for code stealing. Seriously, a real hacker wouldn't give a fk for just one code. Unless one is fighting for their life's work.

[Joe Forster/STA]

Originally Posted by AFKGun

destination IP can be detected by 3rd party firewall like ZoneAlarm

Just on a completely off-topic side note, using the free version of ZoneAlarm is one of the best ways to NOT defend your computer against attacks coming from the network. See http://www.matousec.com/projects/pro...ge/results.php for suggestions on which firewall to use.

Originally Posted by tazzoun

After the whole fake trainer thing, shouldn't Empire ALREADY only be accepting h4x0r trainers from h4xor himself?

He is but there could still be "security holes" in him acting as a "human firewall". Although let me add: none of us - other than Empire and h4x0r themselves - knows how Empire checks this and it's just how it should be.

Originally Posted by tazzoun

h4x0r can easily control the files on his own website and files from anywhere else (even this site) could POSSIBLY be fake or tampered with.

After how we defended him against Cheathappens, I can hardly believe that he personally would upload intentionally infected versions of his trainers to GCW. And, even if he did, it would become obvious within days, if not hours, that (almost) all Sicheats trainers on GCW are different from the originals and those on GCW (almost) all contain some kind of malware. I find this completely unrealistic!

Originally Posted by tazzoun

This whole thing could probably easily be cleared up by a simple post by Empire.

Sure. And I already answered this, look above.

[cocodrilo]

Could the one on GCW be the fake with a trojan inside?

No no, not in this site. one contains a valid key (already banned) user and password for direct use. in others sites.

this dll is a trainer published in sicheats, for the first templar game:

http://www.sendspace.com/file/w1e1vn

please search for stealt code, malicious code etc. is the only published online trainer with one hit kill option, which I can explain how it works and how to get to separate the player from enemies.

[TippeX]

You getting a feeling of deja-vu joe?

[tazzoun]

Tippex and Joe: I downloaded the trainer from GCW, not from h4x0r's website. My guess is that after reading these posts, h4x0r removed the malware from the trainers posted on his own site. After the whole fake trainer thing, shouldn't Empire ALREADY only be accepting h4x0r trainers from h4xor himself? You can clearly see why it's pointless to waste time on this as h4x0r can easily control the files on his own website and files from anywhere else (even this site) could POSSIBLY be fake or tampered with.

This whole thing could probably easily be cleared up by a simple post by Empire. He can tell you where the trainer came from (if it DID come from h4x0r, then why does it no longer match the one on his website?) and if he knew about the DRM and if he supports it, etc.

[Maxgrilo]

I think people are starting to lose focus on the real issue here. Malware or not, should GCW be hosting files that REQUIRE you to register at a third party site (which may or may not be harvesting your info or might at any time in the future) in order to simply use the file? It's my opinon that files hosted on this site should run independently of any outside program or authentication process. Just because these trainers may not collect or send any data now, that could easily be changed at any point down the road by h4x0r's team once the trainers were being readily accepted and posted on this site.

[Joe Forster/STA]

Originally Posted by Maxgrilo

Just because these trainers may not collect or send any data now, that could easily be changed at any point down the road by h4x0r's team once the trainers were being readily accepted and posted on this site.

I already wrote that everything that is not caught by the virus scanner as obvious malware is "readily" accepted; it's always been so. If h4x0r - or anyone else, for that matter - wanted to distribute trainers - or any stuff that is on-topic on GCW, for that matter - infected with a trojan via GCW then he or she could've done that years ago. (Although Empire might have some aces up his sleeve for such tricks, I don't know.)

The situation is new and can't really decide whether I should support this kind of trainers. The final word is obviously Empire's but, if we start a discussion about it, then it may take a week or more: we, moderators, have no special "0-second" communication channel to him either!

Originally Posted by TippeX

You getting a feeling of deja-vu joe?

I have to say, even if a bit reluctantly: yes. But, you see, I'm always open to constructive suggestions so it would be a stupid idea - also see "mindless censorship" - to reject certain ideas right away, I'm rather trying to understand what people are trying to say.

Originally Posted by AFKGun

Off-topic Reply to Joe: Yes I see how it is not recommended but I tried it ZA like 5 years ago and it tracks every program's incoming/outgoing connections in detail, so is useful on that part.

Ohhh, don't worry, I myself have been using ZoneAlarm for years... until I found that page.

[cocodrilo]

Someone uploaded a trainer infected, this trainer IS NOT FROM SICHEATS. This creates a file in system32/adobe/update.exe with image icon, steals passwords from firefox etc.

please check the md5 file with the original from sicheats.

[AFKGun]

Off-topic Reply to Joe: Yes I see how it is not recommended but I tried it ZA like 5 years ago and it tracks every program's incoming/outgoing connections in detail, so is useful on that part. I don't really use 3rd party firewall for protection, Windows Firewall somewhat good enough for me.

EDIT: And to addon, h4x0r's trainer need NFO to boot, so modded tr with hex edit? Not quite possible with UPX compressing i think

EDIT2: BOOM! 4 more F3AR v16 trainers added to GCW DL page.

[Lerianis]

Originally Posted by tazzoun

First of all, I have been downloading trainers from here for a long time. I am not some kind of cheathappens lover so please don't dismiss me as such like you do everyone else that says a negative word about h4x0r.

I just downloaded the FEAR 3 trainer by h4x0r from the GCW website. Apparently to use this FREE trainer I have to go to sicheats.com, create an account there, create a FACEBOOK account, download some kind of key and then always leave my internet connection on so the FREE trainer can authenticate itself. Say what? How exactly is this different than cheathappens again? The only reason a FREE trainer would need all this type of crap is so that the creator can harvest the information being collected and sell it off to advertisers, etc.

After looking further at this "authentication" process of h4x0r's trainer, I then learned that it also carries with it a malicious payload that stays resident in memory even after the trainer is done. It actively scans memory and HD for anything with the word "cheathappens" and then attaches a viral signature to it so those files no longer function. This can easily be reproduced and examined by anyone with a debugger or memory scanner using the files from GCW or h4x0rs website.

So, I must ask the obvious question -- why does GCW continue to entertain this stuff from h4x0r? Seriously, is he paying you guys to host this crap?

So now I have to jump through about 10 hoops plus give h4x0r my personal information just to use a FREE trainer that I downloaded from GCW. What's next you guys? Selling trainers like cheathappens?

Agreed.... I love the trainers from Sicheats.com, but this kind of stuff is getting on my bad side.... I had the gall (in his mind) to post about it and how it was very suspicious that he called for this (not to mention that some people don't have always on internet connections), and the bastard banned me for doing that!

I am beginning to think that Sicheats isn't the 'white knight' in this and that he might have just as black an armor as Cheathappens.

Log-ins are a dealbreaker for me in my opinion..... free or not, there is no reason to require that and it IS just another form of DRM.

Originally Posted by Maxgrilo

I think people are starting to lose focus on the real issue here. Malware or not, should GCW be hosting files that REQUIRE you to register at a third party site (which may or may not be harvesting your info or might at any time in the future) in order to simply use the file? It's my opinon that files hosted on this site should run independently of any outside program or authentication process. Just because these trainers may not collect or send any data now, that could easily be changed at any point down the road by h4x0r's team once the trainers were being readily accepted and posted on this site.

THAT is what I am worried about as well..... I don't want something on my damned computer that needs a connection to the internet just to use the thing. I simply don't..... if there is a PURPOSE behind the internet connection like with a browser that REQUIRES it, that is fine..... trainers? Don't require it in the slightest.

[darkedone02]

Originally Posted by Lerianis

Agreed.... I love the trainers from Sicheats.com, but this kind of stuff is getting on my bad side.... I had the gall (in his mind) to post about it and how it was very suspicious that he called for this (not to mention that some people don't have always on internet connections), and the bastard banned me for doing that!

I am beginning to think that Sicheats isn't the 'white knight' in this and that he might have just as black an armor as Cheathappens.

Log-ins are a dealbreaker for me in my opinion..... free or not, there is no reason to require that and it IS just another form of DRM.



THAT is what I am worried about as well..... I don't want something on my damned computer that needs a connection to the internet just to use the thing. I simply don't..... if there is a PURPOSE behind the internet connection like with a browser that REQUIRES it, that is fine..... trainers? Don't require it in the slightest.

I did that as well, i spoke up about it but h4x0r's banned me for it, which is stupid. This is DRM, I stand up against it because it's stupid, and h4x0r's have doomed himself.

[AFKGun]

I suggest to leave both CH and h4x0r's war to rot. Is not that we can help in any way and involving just being busybody and to cause flamewar. As for the GCW authorities, i'm sure they will decide what's best for the site.

[Joe Forster/STA]

(The two threads have been merged, turned into a sticky and a a short conclusion added to the first post for the usual lazy reader. If you feel that, after the merge, your post doesn't make much sense anymore then, please, edit it so that readers understand what you're replying to.)

[darkedone02]

So yall suffering the same thing just like what cheathappens been doing to h4x0r's. H4x0r's is also doing the same thing as they doing as well after few invasions from cheathappens, fake proofing and propaganda. Is anyone else affected into this flame war like Kelset? HoG? LinGon?

[Joe Forster/STA]

FileForums "only" got in the way and later became a battleground. We have no information other than what's already explained in our announcements as we published everything we learned. And I'm happy to be able to forget all of that...