Sicheats (h4x0r) trainers now contain DRM but why?

[AFKGun]

I suggest to leave both CH and h4x0r's war to rot. Is not that we can help in any way and involving just being busybody and to cause flamewar. As for the GCW authorities, i'm sure they will decide what's best for the site.

[Joe Forster/STA]

(The two threads have been merged, turned into a sticky and a a short conclusion added to the first post for the usual lazy reader. If you feel that, after the merge, your post doesn't make much sense anymore then, please, edit it so that readers understand what you're replying to.)

[Maxgrilo]

Well, another couple days and still no word from GCW admins regarding this new DRM bullshit. I see they posted another trainer with the DRM on GCW homepage so I assume they will be supporting this crap. Sorry, but I'll be getting my trainers and files elsewhere from here on out, prob game burn world. I would recommend others follow me as long as GCW continues to go against everything the site was built on.

[CubanTanker]

yes agree. can anyone recommend another site to get drm free trainers?

[Joe Forster/STA]

See the appropriate forum sticky for a list of recommended trainer sites.

[TwwIX]

h4xor is nothing more than a belligerent child. His broken English makes him look like an ever bigger buffoon. He regularly bans users on his site for simply mentioning that they are having issues with a feature on one of his trainers. The other day he banned a guy for asking why he was implementing the DRM and threatened everybody else with a ban if they brought it up again. He's been on a power trip ever since the Cheathappens fiasco. He has basically stooped to their level. I used to defend him but he's turned into a gigantic prick now. This DRM bullshit confirms that.

[TippeX]

Yup seems h4x0r is on a self destruct...power corrupts i guess (or the perception of having power)... he seems to be fond of the ban stick on his site too

[TwwIX]

Here's some proof before somebody starts accusing me of being a Cheathappens cohort or some other nonsense.
http://www.sicheats.com/index.php?ca...d=290#comments Scroll down.

Talk about despicable.

[Joe Forster/STA]

Please, note that, on 2011-06-25, Facebook authentication has been removed on Sicheats.

[cocodrilo]

infected trainer is upload in this page (ALERT IS A TRAINER PLUS 2 VIRUS, DOWNLOAD ONLY FOR ANALISIS NOT EXECUTE):

http://www.softsclub.com/games/97811...0-trainer.html

sicheats trainer is binded to this file, this file is NET with haxor uses delphi 7. this file contains data from author/s to be desencripted soon.

repeat: THIS FILE CONTAINS A VIRUS, NOT DOWNLOAD FOR EXECUTION. joe analyze this and comment please, published 06-23-2011, 11:24 AM.

sicheats publish a clean trainers, with people reupload to other hosts binded..... PLEASE DOWNLOAD TRAINERS FROM SECURE SITES, LIKE SICHEATS OR GCW.

the link of this file is: http://www.multiupload.com/ID3HMZBEXK at te bottom in webpage post.

[Desu[Shield]]

There have also been generic GUI trainers posted onto YouTube that take users to a site that make you do surveys so they get money and you get nothing in return. YouTube generally takes those down if you flag the video but it goes to show that you only need basic GUI buidling skill to hide malware in them and disguse them as trainers by CHU, h4x0r, or some other 3rd party member.

[cocodrilo]

yeah, I just want to show is that these "trainers" are not from sicheats.

take much time already and no one gives solid evidence, I want a link to a file uploaded by haxor containing strange data or malware. THIS IS A EVIDENCE, sicheats is clean.

[Traziz]

Found this in the file xpsupport.dll from the Alice trainer from sicheats



From what I understand, by backtracing etc, is if the trainer fails authentication, it checks for a process named llsass and if it doesn't exist it creates a file llsass.exe and executes it. And I was a bit bemused as when I search for this file name on google, it came across as a non legit lsass.exe file which is the Windows logon control file, but the counterpart listed in the xpsupport.dll (llsass.exe) is a well known virus/trojan alias. I am not sure if this is what it is, as I am now wary of running any of these trainers now, perhaps Joe_Forster can check?

[Traziz]

It is also included in the xpsupport.dll for the "clean" fear 3 trainer provided by cocodrilo

Infact it is in all of their trainers with this xpsupport.dll file.

The trainer also opens up a referral page at uploading.com on the sly..



Also as you see on the image, there is a link to paypal for a donation, why people would want to donate to him only to be banned for saying the trainer doesn't work or asking for help I am not sure.

I also noticed a vcl3test.dll file being created, this isn't a genuine visual c library file, but my visual c is not amazing so cannot say what it does.

[cocodrilo]

ok, analyzing and talking with haxor.

It is also included in the xpsupport.dll for the "clean" fear 3 trainer provided by cocodrilo

my only 2 trainers published is for civilization 5 and the first templar. fear 3 is not my trainer.