Sicheats (h4x0r) trainers now contain DRM but why?

[Joe Forster/STA]

(sigh) I'm getting tired...

There's a sticky in the GameCopyWorld Support forum about how to upload stuff and it is mentioned in the PC Games forum FAQ, too; see http://ul.gamecopyworld.com. Also, if you had read this: Sending Game Patches/Fixes by E-Mail then you'd also know that, at least, basic information about the submitted package should be added.

I don't know how exactly Empire processes this kind of information but if someone (preferably the author himself or herself) uploads a trainer then he or she should mention everything that is important to know about it. Apparently, the uploader of h4x0r's F.E.A.R. 3 trainer added to the upload message that a key and Internet connection is required, which is pretty much an important thing to know. It is also possible that Empire already knows about h4x0r's "DRM" and added it himself. Because there are some standard texts in GCW's download entries, I assume Empire has templates for often used instructions.

[AFKGun]

Thx Joe, sorry being noob as i'm just couple hrs new here, was raged by h4x0r's v16 trainer and found something thought worth the sharing.

G4m3 0n 4eva!
bye

EDIT: Forgot to add, this FEAR3 h4x0r's v16 trainer doesn't shutdown correctly, it remain as hidden process in RAM. Make sure Task Manager shut it down, i FEAR the trainer opens connections to somewhere else as it required active internet connection for login & "maybe" h4x.

[TippeX]

Originally Posted by AFKGun

i FEAR the trainer opens connections to somewhere else as it required active internet connection for login & "maybe" h4x.

That shit is EXACTLY what we dont want..at best its a guess..if you have no proof then dont say it..

[cocodrilo]

Para los que acusan de robo de informacion, simplemente poner una denuncia y nos veremos en los tribunales. pero aviso, pagaran las costas mas la indemnizacion por difamacion/injurias. es una opcion legal, no tenemos miedo y presentaremos todas las fuentes de las validaciones tanto del cliente como del servidor implementadas por mi.

ahora bien, solo por respeto a este sitio, si joe quiere le paso las fuentes de la validacion online y que el vea con sus propios ojos que lo unico que se envia es el contenido de la key y ninguna informacion mas. el podra compilar y ver que realmente valida.

Veo mucho experto en "analisis de ejecutables", pero ninguno da un analisis serio, con pruebas y detallado. algo simple, un sniffer y observar que informacion envia, tan sencillo como eso. lo mas prudente sin tener pruebas es tener la boca cerrada, ya que en caso contrario solo se hace el ridiculo.

y una ultima aclaracion, gratis no quiere decir que se pierdan los derechos sobre el trabajo y que se pueda regalar para que otros obtengan beneficios.

nadie roba datos de nadie, nadie vende datos de nadie, si usaramos facebook para eso ¿crees que nos dejarian hacerlo en su nombre? es bastante ridiculo. eso se llama FACEBOOK CONNECT que esta implementado en miles de paginas web y ningun usuario se queja.

¿no te gusta la medida? simplemente no la uses.

Joe si tienes alguna duda sobre algun proceso de los trainers puedes hablar conmigo en privado y te aclarare todo sin ningun problema.

Si la estupidez volara, hay gente que necesitaria una pista de aterrizaje en su jardin.

[Joe Forster/STA]

@cocodrilo: If I'm not mistaken, you're a Sicheats trainer maker, along with h4x0r. This is an English-only forum and I delete non-English posts on sight. I'm making an exception with you but translate your post to English (preferably NOT with a translator software), otherwise it will be deleted.

[TippeX]

Fired crocodrilos post through the translator on my phone..result wasnt too bad..

translation begin...

For those who accuse him of stealing information, simply make a complaint and we will be in court. but notice, pay the cost plus compensation for defamation / libel. is a legal option, we are not afraid and we will present all sources of validation both client and server implemented by me.

now, only out of respect for this site, if joe wants you step online validation sources and that they see with their own eyes that the only thing that is sent is the key content of the information and no more. can compile and see the really valid.

I see a lot expert "analysis of executables," but no one gives a serious analysis, with tests and detailed. something simple, a sniffer and see what information it sends, as simple as that. the most prudent without proof is keep your mouth shut, because otherwise one is a fool.

and a final point, free does not mean losing the rights to the work and can give for others to obtain benefits.

nobody steals data from nobody, nobody sells data to anyone, if you use Facebook for that do you think they would let us do so on their behalf? is quite ridiculous. that's called FACEBOOK CONNECT is implemented in thousands of web pages and any user complains.

Do not you like so far? just do not use it.

Joe if you have any questions about any process of the trainers can talk to me privately and I will clarify everything without any problem.

If stupidity fly, some people would need a runway in your garden.

translation end

my comments
Threatening court for people making accusations is FUCKING IDIOTIC.. You lost any credibility you possibly had with me when you said that..

As for executable analysis..what makes you think your code is not being analysed?

I also heard some old school retired sceners think this 'drm' bullshit is getting out of hand, and i suspect a tool is made already that breaks ch's phone home and h4x0r's one(s)...

Simple point : there are people more skilled than you..usually they are silent...piss them off and expect your ass to be handed to you in a gift basket...

[Joe Forster/STA]

TippeX, I can also use Google Translate, thank you very much, but that was not the point. On an English-only forum, people are supposed to write in English and not resort to others translating their posts in whatever language.

I think the threatening with court is kind of an answer to how Cheathappens (allegedly?!) hired a private detective to find out personal data about h4x0r, create a file on him and prepare for legal action. (Not that I'd agree with this at all, it's pathetic...)

The "DRM" bullshit never got out of hand: it was out of hand the very moment it was created. (Thank you for mentioning it because I wanted to add this paragraph.) And I'm not talking about this particular implementation but the very idea. A sane person would think that "Data Rights Management" is about protecting the rights of the users. Fucking wrong! It's not even protecting the rights of authors/developers, rather those of publishers: publishers who are the ones in power but who add nothing substantial to the value of the product, just pass it on from author A to user B, ripping off both, and significantly at that! Therefore, in a sane world, anything that is even remotely similar to DRM should be banned right at its inception. Now this applies to h4x0r's implementation but let's not forget: Cheathappens', too. The notion of DRM is a filthy lie so don't go even near it because it dirties you!

While I was shopping today, something came to my mind that is similar to what TippeX says above. This Cheathappens vs. h4x0r war is similar to the Cold War between the USA and the Soviet Union, with respect to the following: neither side can actually win it, only escalate it to the point where one side will financially collapse and, inherently, give up and kind of "lose". In case it wasn't apparent: I'm referring to Cheathappens as the USA and h4x0r as the Soviet Union in the example.

h4x0r, you don't have as much resources, followers, fans, agents, spies as Cheathappens does so, from a given moment of time, you'll start "losing" and never be able to overtake your opponent anymore. I believe that this moment has already passed so there's no point in competing with them. Don't follow them and don't do anything they do only because they do it, instead show that you can pioneer your own way that has nothing to do with them. I have no idea how respected you are in the trainer scene but getting rid of any kind of connection to Cheathappens would definitely help you.

I hope you'll take advice from someone who is about a decade older and more experienced in the same field as you are and who already saw - and even took part in! - such pointless flame wars. It's a complete waste of resources, nothing more!

By the way, yes, one of the first things I did with the F.E.A.R. 3 trainer was that I launched HTTP Analyzer in the background and also made my firewall alert all kinds of network activity: nothing suspicious happenned.

[tazzoun]

AFKGun: that hidden process you see running after the trainer is closed is what I was talking about in my first post. It scans for "cheathappens" and then does nice things to anything it finds. Tippex or Joe or anyone else could easily see this if they attach a debugger/scanner to it.

Like Joe said, obviously h4x0r's vendetta against cheathappens has caused him to do some things that the admins of this site should probably take a hard look at, especially if they are hosting and helping to spread these trainers. People like me can only throw up the warning signs but you guys must see it for yourself and take the necessary measures to protect your visitors.

[Joe Forster/STA]

Originally Posted by tazzoun

that hidden process you see running after the trainer is closed is what I was talking about in my first post. It scans for "cheathappens" and then does nice things to anything it finds.

A whole day is gone since you've opened this thread but you still haven't described anything concrete just keep reciting vague suggestions again and again. You're really trying my patience! Don't make me think that you're just another Cheathappens agent!

[TippeX]

Ok...'hidden process', how do you see it then? (i will investigate, but not without more info, my time and joes have been wasted before on similar "persuits"... ) rest assured that if this i found and proven to be malicious code against ch then i will be more than happy to provide analysis to ch to assist them in any prosecution as this activity IS viral and illegal in a lot of places and h4x0r will have sealed his own fate (if it is true)..

@Joe. .. Didnt realise the translate was via google..doh

[tazzoun]

I apologize Joe, I don't mean to piss you off in any way. Like I said previously, analyzing h4x0rs trainers is not a priority of mine (or my responsibility?). I was only stating an observation that I had made. You can believe it or dismiss it and it will be fine by me.

The intention of this thread was to determine what GCW plans to do about this new DRM and see what other users thought about it. I simply added the malware note as it was just something odd that I noticed while looking at the authorization process.

[Joe Forster/STA]

(On a side note, Empire - unlike us, hackers - has a real life, so don't expect him to drop in and reply every hour... well, not even every day...)

[cocodrilo]

understand English but do not write to express myself properly, the only reason to write in Spanish.

Fear is a trainer of 3 with a Trojan, is the same but down from another page. I myself have fallen. that's the big problem down other sites with junk and then say we are.

say that there are no resources, I remember that they have not done anything with the law in their hands. cheathappens encourage you to take legal action, that we laugh all day long.

I am the first that this situation is sickening.

legally you can clarify things in these directions:

http://www.delitosinformaticos.com/1...cias/denuncias

everything else is said in forums, they are just guesses. clarify legally vote and the game ends quickly.

with the law in their hands, in Spanish:

Por último, también está el artículo 12 de la Declaración Universal de Derechos
Humanos: “Nadie será objeto de injerencias arbitrarias en su vida privada, su familia, su domicilio o su correspondencia, ni de ataque a su honra o a su reputación.”

La doctrina del Tribunal Constitucional distingue respecto al derecho a la intimidad los siguientes puntos:
• El derecho fundamental a la intimidad reconocido por el art. 18.1 CE tiene por objeto garantizar al individuo un ámbito reservado de su vida, vinculado con el respeto de su dignidad como persona (art. 10.1 CE), frente a la acción y el conocimiento de los demás, sean éstos poderes públicos o simples particulares.
• El derecho a la intimidad atribuye a su titular el poder de resguardar ese ámbito reservado, no sólo personal sino también familiar (SSTC 231/1988, de 2 de diciembre, y 197/1991, de 17 de octubre), frente a la divulgación del mismo por terceros y una publicidad no deseada.

the only one who has committed and continues to commit criminal acts are the people of cheathappens publishing information (in your site) STOLEN AND STAFF. Come on guys, make a complaint because I have really wanted to meet you.


thanks.

I simply added the malware note as it was just something odd that I noticed while looking at the authorization process.

the authorization process is only a HTTP PROTOCOL POST, user and password + key. key is information in your profile, encripted with Rijndael and base64 to prevent lost data. ¿more?

[Joe Forster/STA]

@cocodrilo: I sent an E-mail to the address that you used to register on FileForums. (And, no, I don't read or write Spanish.)

I think cocodrilo is suggesting that there's a fake version of the trainer, that can be downloaded from fake sites acting as Sicheats, and this trainer does contain a trojan. Actually, I think I have two versions of the trainer, one downloaded from Sicheats, the other from GCW, and, no, they're not identical. Could the one on GCW be the fake with a trojan inside?! If so, Empire should check (even more) whether Sicheats' trainers have been really uploaded by Sicheats people or by someone else (possibly malicious fakes).

Originally Posted by tazzoun

I was only stating an observation that I had made.

You continue to amaze me. What observation? This: It actively scans memory and HD for anything with the word "cheathappens" and then attaches a viral signature to it so those files no longer function.? So what does it search for: executables or files in general or directory names or what? What is this "cheathappens": general text anywhere in the file, copyright block in executables or what? What happens: a stub added to executables and the entry point redirected, "cheathappens" replaced with "fuck you" or what? Can you send me actual example files?! Or is this something that you've read somewhere - probably, a Cheathappens-friendly site - and fell for it without any suspicion?

I feel as if taking part in the following conversation:
Citizen: (panting) Constable, sir, John killed Fred!
Constable: Now cool down. Have you seen Fred?
- Yes. He was lying on the sofa.
- And was he breathing?
- I don't know.
- Then he could've been just sleeping. Have you seen the weapon?
- Yes, it was a knife.
- And where was it?
- In the kitchen.
- Well, obviously, there are knives in the kitchen. Have you seen John?
- No.
- Now, seriously, have you actually seen John kill Fred?!
- Errr, no.
- Then what the fuck are you talking about?! Let me take your hand, I'll escort you to a mental asylum.

So what the hell am I supposed to think about what you wrote?!

[TippeX]

So if i downloaded the fear 3 trainer from sicheats (as joe did), it would not contain the trojan... Correct?