(Not a bash thread) h4x0r trainers dropping dll's

[EMPiRE]

@ Dabhand: Your post does NOT suggest that you are relying this "info" thus makes this even more untrustful...

As for suggesting it could possibly be malware, be very careful doing this as even idiots like this popsoda guy thinks it is... who the f*ck is this guy, if he says one more thing here he is gone

But think of it, if h4x0r wanted to spread malware why have EVERTHING pointing at yourself (filename, file details, etc), it is plain ridiculous even thinking this

If I look logical at this I think he made a mistake creating them on disk instead of memory (or wherever he wanted them to be created), I can not think of anything else right now

If you really wanted to know why his dll are appearing in the C: root why not just ask him plain and simple without attacking/bashing him, you know what kind of answer you will get back if you do... obviously

[DABhand]

This thread was just a heads up nothing more, no point in bashing h4x0r cause he hasn't a clue either way.

Here is the thing...

Even if I asked what does it do, do you trust his word 100%? He already lied about stealing options from not just CH but others too. So sorry if I dont take his word.

And then if his dll was to help with trainer running, why drop 4 or more at a time. And why the need to +h them. And why in the root directory of the system drive.

I never said they were malicious, I have heard from others and from Psych's initial post that others had problems. He posted a clean up batch file, and I did the same here.

And as for your logical look, > disk instead of memory, that would be a good chance of being correct if all dll's didnt go into specific directorys. One on the desktop, upto 3 on the root, and 1 in the system32 folder. For me thats not a mistake that was set deliberately to drop them there.

Again I didnt accuse of him of malware attempts etc, I said potentially and was giving a heads up to people who use his trainers. Maybe they can go ask, and if they did they would probably get banned anyway on his forum, except for the bum chums who would worship and kiss his ass even if he stole money from them (not saying he does, was an example).

I dont have to run his trainers to see the info collected from different sources is not a coincidence or a mistake in compiling his trainers.

[Joe Forster/STA]

Oh, my god, people! Take a step back and look at yourself: like stupid users reporting Q: "your software doesn't work"; A: "okay but what do you mean?"; Q: "I mean it doesn't work"; A: "can you give a specific example?"; Q: "I already told you it doesn't work" etc. ad infinitum.

Anyone give one example for this supposed malware-ridden trainer (or other software) by h4x0r? (Hint: Give us a working URL on GCW.) Until then, this is just bashing. (A screen capture taken for a proof? Ridiculous.) This thread is left open for the only reason that, perhaps, some useful information will arrive, after a dozen useless posts.

[DABhand]

My God.. I said its POTENTIALLY malware as reported by others.

I didnt say I think its malware, although it is suspicious.

English, its great when you know it.

As for the pic it was to sure it does drop the dll's. It wasnt to prove it was Malware, so stop twisting words Joe. Actually read what is being said. Which sadly nobody seems to have the fortitude to do in this thread.

[Caliber]

people who run his trainers are also reporting on our site that these files are left in place. more troubling is that several of our trainers do not work when some of these files are left in place. i did not reverse them nor did i mess with them too much as i have no idea what kind of crap these trainers are dropping or where they are dropping it.

1) i can confirm that our bioshock trainer (and several other ones) does not function any more (keys dont work) if his files are present/located. once removed and rebooted the trainer functions again.

2) i am not going to 'post files or proof or screenshots' or anything because i been there and done that and nothing gets done so why waste my time-

3) thank you dabhand and psych for making this tool for removing that crap from people's harddrives. i realize you have ties here and this causes friction for you. at least you are trying to help people-

best,
Cal

[Joe Forster/STA]

Yet another suspicion that may be right but I cannot check it (in Sandboxie) as I don't have the necessary files. Care to send me (one of) your trainer(s) in an E-mail attachment, along with a URL to (one of) h4x0r's trainer(s)?

By the way, a lot of trainers/cracks/patches/keygens unpack bassmod.dll and other similar ones to the Windows system directory and leave it there, too. It annoys me but most people don't mind; it's not malware, though...

[...] As for comparing reports about malware with reports about code ripping, you can't be serious. Do you understand the difference between the difficulty of proving this one and that one?

[voidster]

Thought id chime in with my point of view. The last screenshot was of my machine. I started having problems with CH trainers not properly working when ME2 came out. The trainer would auth and activate yet my numkeys failed. I thought it was just a failure on my part with win 7, my firewall/AV combo. Then Bioshock 2 came out and, i had the same problem, with a completely different trainer. After going through the whole common sense checks of keyboard check, numlock check i posted in CH's forums. PW assisted me and suggested i post a file list of my C drive.

I made a few screenshots, but the final one i had to unhide system files and discovered the h4x0r dll. I deleted the file and my CH trainers immediately began working again without a reboot.

My firewall never sent out a warning of data being sent one way or the other, but im not sure what the dll itself does. It does seem to interfere with CH trainers functions however. Thanks to this thread i also found the scs.dll and deleted that one.

I do not understand why this h4x0r person coded a trainer that needed to drop multiple dlls onto my drive. I checked h4x0r site out at the end of december thinking it would be an alternative. Due to this dll issue, Ill never return to it.

[h4x0r #]

Originally Posted by voidster

Thought id chime in with my point of view. The last screenshot was of my machine. I started having problems with CH trainers not properly working when ME2 came out. The trainer would auth and activate yet my numkeys failed. I thought it was just a failure on my part with win 7, my firewall/AV combo. Then Bioshock 2 came out and, i had the same problem, with a completely different trainer. After going through the whole common sense checks of keyboard check, numlock check i posted in CH's forums. PW assisted me and suggested i post a file list of my C drive.

I made a few screenshots, but the final one i had to unhide system files and discovered the h4x0r dll. I deleted the file and my CH trainers immediately began working again without a reboot.

My firewall never sent out a warning of data being sent one way or the other, but im not sure what the dll itself does. It does seem to interfere with CH trainers functions however. Thanks to this thread i also found the scs.dll and deleted that one.

I do not understand why this h4x0r person coded a trainer that needed to drop multiple dlls onto my drive. I checked h4x0r site out at the end of december thinking it would be an alternative. Due to this dll issue, Ill never return to it.

I made a few screenshots, but the final one i had to unhide system files and discovered the h4x0r dll. I deleted the file and my CH trainers immediately began working again without a reboot.

FALSE

I do not understand why this h4x0r person coded a trainer that needed to drop multiple dlls onto my drive. I checked h4x0r site out at the end of december thinking it would be an alternative. Due to this dll issue, Ill never return to it.

better, but neither you nor anyone else so you take away a load off, the trainers of all drop a dll CH but of course as you are a smoothie like the rest that supports this cause I'm always to blame, pity you, writes user you have on my site so you ban. thanks

[Caliber]

Originally Posted by Joe Forster/STA

Yet another suspicion that may be right but I cannot check it (in Sandboxie) as I don't have the necessary files. Care to send me (one of) your trainer(s) in an E-mail attachment, along with a URL to (one of) h4x0r's trainer(s)?

By the way, a lot of trainers/cracks/patches/keygens unpack bassmod.dll and other similar ones to the Windows system directory and leave it there, too. It annoys me but most people don't mind; it's not malware, though...

[...] As for comparing reports about malware with reports about code ripping, you can't be serious. Do you understand the difference between the difficulty of proving this one and that one?

joe, we've given up trying. i don't want to waste the energy nor the effort to go about all of that again. even if we had a video of him doing this where he is commenting out loud how he attaches ollydbg to trainers and notes the .exe changes and then uses that info for his code points to make his options, where he is commenting on how he is dropping .dll's onto people's machines into places they should not go (windows, c: drive, etc.) and that he is killing OTHER people's trainers this way, and where he is laughing at GCW face because he is doing all of this and making you look like you do to the rest of us who do this work legitimately... yes even if we had a video you'd say it was false. that's how i feel about it.

over and over this guy lies to you, and he actually HAS lied to you and i have never once told you anything that wasn't untrue. you even now bad-mouth long-time helpers of GCW like dabhand who has helped countless users (and mods) here. maybe there will be a place soon people can post thier game modification work and download game modification files safely. a place that moderates this stuff away and rebukes people like hax0r.

now i don't want to escalate this nor get caught up in this and get 'banned' for my reporting a LEGITIMATE finding. i didn't come in here first, nor did i ask anyone to report this stuff. the fact that there is a tool that had to be created to remove these files SHOULD bring you pause, but it doesn't-

[Joe Forster/STA]

Originally Posted by Caliber

joe, we've given up trying. i don't want to waste the energy nor the effort to go about all of that again.

I asked you to send me one executable and one URL in an E-mail. If that's too much of an effort for you, I won't make an effort to help you with your still ongoing war with/against h4x0r either. I have to say that the rest of your paragraph is complete bullshit, although, as a human and not as a moderator, I understand your frustration.

Originally Posted by Caliber

over and over this guy lies to you, and he actually HAS lied to you and i have never once told you anything that wasn't untrue.

So what do you expect me (= GCW staff) to do? Delete all of h4x0r's trainers because he's a liar or because some of them may contain some kind of, intentional or not, malware? This whole thread is still about some vague ideas but nothing specific, except that single infected trainer that was cleaned. Nota bene: cleaned, so it didn't contain some custom malware against some custom targets - like what this thread is about -, "only" a widely-spread virus. Whatever specific was reported was acted upon.

Originally Posted by Caliber

you even now bad-mouth long-time helpers of GCW like dabhand who has helped countless users (and mods) here.

Oh, I see where this is going to: you're trying to discredit me as a moderator, right?

I know that you two know each other and, therefore, are obviously on the same side but I can't bother: this still won't make me partial either towards or against you. Also, if you had read my objective reasons, you would know exactly why I don't like him. However, there have been several cases in the last few years when he should've been banned - most importantly accusations against other forum members that turned out to be unjustified - and I've actually been partial towards him by letting him get away as he's undoubtedly such a useful member of this forum. See a counter-example, senseman, who was caught warezing and whose ban was requested by several persons until I gave up trying to help him and did ban him, after all.

See, I have nothing to hide...

Originally Posted by Caliber

now i don't want to escalate this nor get caught up in this and get 'banned' for my reporting a LEGITIMATE finding. i didn't come in here first, nor did i ask anyone to report this stuff.

Then why did you write this post at all, what were you trying to achieve?

[DABhand]

Banned for what? Im not moderating anything, but you think I am, I am just following the rules and pointing out people who misuse/break them to help the forum be clear of it.

Im not the one who leaves people who are obviously breaking them for days and nothing is done.

I was someone who sat and made sure people didnt click on links by posting about them, so no users would end up being infected etc.

Your the one with the problem Joe not me, and has been since your "Hungarian law" post. Just because I did not agree with what you said, and I debated back, I have noticed that attitude towards me since then.

Then this thread, AT NO TIME did I say his dll's were spreading malware, I said POTENTIAL.. need a dictionary definition for that? And offered a batch file made by Psych to help remove them. Better safe than sorry. But no I must have been attacking h4x0r, no benefit of the doubt. What a joke.

I left once, I shouldnt have come back, I obviously wasted my time here. Bring back the good old mods, ones who do follow the rules set and act accordingly. And ones who dont just delete posts because of the hell of it. And dont deny it some of the posts you deleted from me were nothing bad.

So you can go ahead and let empire delete my account, enjoy your time with h4x0r and people like him, cause its obvious that FF/GCW has become quantity over quality these days, and of course the old code has been thrown out the window when it comes to rippers/thieves.

Here is a reason to ban me...


YOU ARE A FUCKTARD JOE.

[DABhand]

Incase that didnt make a difference.


JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD JOE IS A FUCKTARD

[DABhand]

oh look it fit nicely too.

[Joe Forster/STA]

Originally Posted by DABhand

Banned for what? Im not moderating anything, but you think I am, I am just following the rules and pointing out people who misuse/break them to help the forum be clear of it.

I asked you multiple times (!) to report those posts and not reply to them at all but you still keep doing it...

Originally Posted by DABhand

Im not the one who leaves people who are obviously breaking them for days and nothing is done.

And I'm the one who, feeling the reponsibility for his actions and having made bad mistakes in the past, is cautious about what he's doing. As for the meaning of the word "obvious", we've already discussed it in PM.

Originally Posted by DABhand

I was someone who sat and made sure people didnt click on links by posting about them, so no users would end up being infected etc.

That is absolutely good and, please, keep doing it!

Originally Posted by DABhand

Your the one with the problem Joe not me, and has been since your "Hungarian law" post. Just because I did not agree with what you said, and I debated back, I have noticed that attitude towards me since then.

Not at all, I don't give a shit about your lack of knowledge about laws: it's only funny to me, not annoying anymore... It's rather your attitude towards some forum members. Some you help, some you attack. Some whom you attack deserve it, some don't. Those who don't are rightfully complaining about your behavior. I asked you multiple times (!) to not accuse people in public, rather report suspicious posts. For some time, you did as I asked but later have started doing it again...

And I still haven't banned you although many times it were only TippeX and Empire who made me refrain from doing so...

Originally Posted by DABhand

Then this thread, AT NO TIME did I say his dll's were spreading malware, I said POTENTIAL..

And I'm potentially gay. Actually, I think I'm not but who knows...

I ask you, too: what are you trying to achieve? I'm sure you know - or, at least, think to know - the answer but I don't. Do judges in your country sentence someone guilty based on indirect proofs only, even contributed by their friends? You people lack the objectivity which I'm not surprised at at all.

Originally Posted by DABhand

need a dictionary definition for that?

Making fun of the language knowledge of someone is a most blatant "argument". Especially when that language is actually your own mother tongue. (Do you know other languages?)

Originally Posted by DABhand

But no I must have been attacking h4x0r, no benefit of the doubt. What a joke.

Have I said that you attacked h4x0r in particular? Nope. You have attacked countless other forum members in other posts in the past...

Originally Posted by DABhand

I left once, I shouldnt have come back, I obviously wasted my time here. Bring back the good old mods, ones who do follow the rules set and act accordingly.

Yeah, I've also felt this "either him or me" attitude many times and I wouldn't like to see you running this board as a moderator either.

Originally Posted by DABhand

And ones who dont just delete posts because of the hell of it. And dont deny it some of the posts you deleted from me were nothing bad.

If I ever deleted anyone's post without reason then it was a mistake. As far as I remember, I always had a reason to delete your posts; mostly because they were inappropriate for that discussion.

Originally Posted by DABhand

So you can go ahead and let empire delete my account, enjoy your time with h4x0r and people like him

Such pathetic whining won't get you anywhere so I suggest that you stop it as it's bad for your image.

Originally Posted by DABhand

cause its obvious that FF/GCW has become quantity over quality these days

You could've hardly said something so stupid. The traffic of FileForums went down significantly over the past few years. I don't know the exact reasons but one if them is definitely the stricter forum rules. (Perhaps, my behavior, too, but that cannot be proven or denied retroactively either.)

Originally Posted by DABhand

Here is a reason to ban me...

YOU ARE A FUCKTARD JOE.

(yawn) You see, I'm still impartial and this is not a good reason to even delete your post, let alone ban you. It's rather useful to keep such posts as mementos.

[...] But don't overdo it: such an "argument" is also bad for your image.

[Joe Forster/STA]

Okay, I think everyone had their say. Thread closed; report specific cases in the GameCopyWorld forum.