TUServerMU

MuOnline => Herramientas => Tema comenzado por: zodiacddos on May 04, 2021, 02:35:04 PM

Titulo: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: zodiacddos on May 04, 2021, 02:35:04 PM

(https://i.imgur.com/Mv3MQV9.png)


NEW LINK:
https://tuservermu.com.ve/index.php?topic=41862.msg225116#msg225116


(http://i.imgur.com/Z9MYwwl.png)


Credits: Me  boxing

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: ZabiinoOo on May 04, 2021, 04:05:24 PM

Mediafire this blocking this my friend:
(https://i.imgur.com/lDnWTPQ.png)

check, greetings!!

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: muinternational on May 04, 2021, 05:39:22 PM

Error en el link de mediafire :(

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: zodiacddos on May 05, 2021, 12:32:20 AM

Citar desde: muinternational on May 04, 2021, 05:39:22 PM

Error en el link de mediafire :(

Link update
(http://i.imgur.com/Z9MYwwl.png)

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: tdthanh95 on May 06, 2021, 02:42:14 PM

Can u share source

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: Azzlaer on May 10, 2021, 06:23:23 PM

Al subir este tipo de contenido deberias subir un analisis de VIRUSTOTAL para dejar tranquilo al usuario y al menos detallar como configura y que es lo que hace la aplicacion.
La voy a testear para verlo, igual no me confio mucho como antes xD

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: Ketamine on May 11, 2021, 01:49:59 AM

No recomiendo utilizar esto por los siguientes motivos:

1- Esto parchea a todo el Windows causando que el DEP sea excluido de todos los programas lo cual ps esto puede ocasionar graves fallas en muchos jugadores.
2- No hay código fuente explicando la solución, muchas alertas en VirusTotal, programar en consola no da buena vista y ps nadie adjuntaría un .exe así en los jugadores.
2- Así no se soluciona el problema de manera correcta ^^

La manera correcta de solucionarlo (y en donde he visto muchísimo este problema) lo cual es porque intentan ejecutar una página en RAM sin atributo ejecutable, es la siguiente:

Al hacer Hook en alguna función (ej: el Main para alguna interface) deben cambiar:

Code: [Select]

 VirtualProtect( (LPVOID) Offset, Size, PAGE_READWRITE, &Oldprotect );

Por:

Code: [Select]

 VirtualProtect( (LPVOID) Offset, Size, PAGE_EXECUTE_READWRITE, &Oldprotect );

(Esto conlleva a revisar todo el source de sus files y que verifiquen que el tributo ejecutable este correctamente aplicado) :D

@ZabiinoOo Propongo que haya una nueva regla obligatoria en el foro la cual es que todos los archivos de este tipo sean incluidos con un análisis de VirusTotal obligatoriamente y si el análisis supera un porcentaje específico entonces que el source sea adjuntado o que busque la forma de que el VirusTotal de menos alertas, y ps si continúa todo igual entonces que el post vaya a la papelera ya que la idea es mantener la comunidad segura :D

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: ZabiinoOo on May 11, 2021, 02:50:02 AM

Citar desde: Azzlaer on May 10, 2021, 06:23:23 PM

Al subir este tipo de contenido deberias subir un analisis de VIRUSTOTAL para dejar tranquilo al usuario y al menos detallar como configura y que es lo que hace la aplicacion.
La voy a testear para verlo, igual no me confio mucho como antes xD

Citar desde: Ketamine on May 11, 2021, 01:49:59 AM

No recomiendo utilizar esto por los siguientes motivos:

1- Esto parchea a todo el Windows causando que el DEP sea excluido de todos los programas lo cual ps esto puede ocasionar graves fallas en muchos jugadores.
2- No hay código fuente explicando la solución, muchas alertas en VirusTotal, programar en consola no da buena vista y ps nadie adjuntaría un .exe así en los jugadores.
2- Así no se soluciona el problema de manera correcta ^^

La manera correcta de solucionarlo (y en donde he visto muchísimo este problema) lo cual es porque intentan ejecutar una página en RAM sin atributo ejecutable, es la siguiente:

Al hacer Hook en alguna función (ej: el Main para alguna interface) deben cambiar:

Code: [Select]

 VirtualProtect( (LPVOID) Offset, Size, PAGE_READWRITE, &Oldprotect );

Por:

Code: [Select]

 VirtualProtect( (LPVOID) Offset, Size, PAGE_EXECUTE_READWRITE, &Oldprotect );

(Esto conlleva a revisar todo el source de sus files y que verifiquen que el tributo ejecutable este correctamente aplicado) :D

@ZabiinoOo Propongo que haya una nueva regla obligatoria en el foro la cual es que todos los archivos de este tipo sean incluidos con un análisis de VirusTotal obligatoriamente y si el análisis supera un porcentaje específico entonces que el source sea adjuntado o que busque la forma de que el VirusTotal de menos alertas, y ps si continúa todo igual entonces que el post vaya a la papelera ya que la idea es mantener la comunidad segura :D

Gracias a ambos por estar al tanto, en tanto @zodiacddos lea sus comentarios esperamos pueda dar una respuesta respecto a las dudas que se tengan sobre este programa y si se requiere un analisis desde virustotal esperamos pueda indexarlo al tema el usuario autor del tema, saludos!!

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: zodiacddos on May 12, 2021, 12:55:45 PM

Hello, ill upload a clean one. Thanks for reporting. Basically i just compress it to VMProtect for the purpose of i have been searching this kind of solution towards basic problem of  DEP issues. Though i have attached some kind of instruction on my previous clients how to fix that, still a lot of lazy ass players dont even bother reading basic fixes. Thats why i have creaded this cmd command triggers to which automatically disable DEP to all like @Ketamine  have mentioned. But it was working well on my players without problem. I dont agree with what you have said stating to cause my crashes since there were no report on my end. Regards

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: zodiacddos on May 12, 2021, 01:26:02 PM

(https://i.imgur.com/XCkUBYT.jpg)

VIRUS TOTAL:

BEFORE CONVERTION AND PACKING

https://www.virustotal.com/gui/file/c2ab6a50004ef075f48f9cdcbdc1f070269db27a57ec5414ec278ba850931d9c/detection

AFTER CONVERTED AND PACKED

https://www.virustotal.com/gui/file/da2538c32a0efa2a317a69bed735b8de8365ddb2fed8825ce7369685a7e9fe1a/detection

(http://i.imgur.com/Z9MYwwl.png)

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: mantios on May 12, 2021, 02:16:26 PM

Still detected many things

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: zodiacddos on May 13, 2021, 12:08:34 AM

Citar desde: mantios on May 12, 2021, 02:16:26 PM

Still detected many things

Im using freeware packer probably this may cause to multiple false detection.

This tool is only for those who are in need. Thanks.

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: Odisk on May 13, 2021, 02:05:50 AM

I have the following doubt why something as simple as this.

Code: [Select]

bcdedit.exe /set {current} nx AlwaysOff

Can a file weigh up to 5MB ? I have doubts that the file is packaged.

(https://fotos.subefotos.com/76b4d77107946318085684036dcf3982o.png)

I have not had time to unpack this file, but I will do it as soon as I have time.

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: zodiacddos on May 13, 2021, 02:16:48 AM

Citar desde: Odisk on May 13, 2021, 02:05:50 AM

I have the following doubt why something as simple as this.

Code: [Select]

bcdedit.exe /set {current} nx AlwaysOff

Can a file weigh up to 5MB ? I have doubts that the file is packaged.

(https://fotos.subefotos.com/76b4d77107946318085684036dcf3982o.png)

I have not had time to unpack this file, but I will do it as soon as I have time.

Im not quite sure why it came to a bigger size after being packed. You can test your self create a particular file and see results after being pack with VMProtect. the second repack here is packed with Enigma, to which had likely created 1mb+ as well from the original less than 400kb.

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: Ketamine on May 13, 2021, 03:07:47 AM

Citar desde: zodiacddos on May 13, 2021, 02:16:48 AM

Im not quite sure why it came to a bigger size after being packed. You can test your self create a particular file and see results after being pack with VMProtect. the second repack here is packed with Enigma, to which had likely created 1mb+ as well from the original less than 400kb.

Por qué empaquetas una solución así?

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: zodiacddos on May 13, 2021, 03:25:40 AM

Citar desde: Ketamine on May 13, 2021, 03:07:47 AM

Citar desde: zodiacddos on May 13, 2021, 02:16:48 AM

Im not quite sure why it came to a bigger size after being packed. You can test your self create a particular file and see results after being pack with VMProtect. the second repack here is packed with Enigma, to which had likely created 1mb+ as well from the original less than 400kb.

Por qué empaquetas una solución así?

es lo mismo,

¿Por qué empaqueta su ketamina con PECompact?

Well, as  i have qouted

"for the purpose of i have been searching this kind of solution towards basic problem of DEP issues."

it took me time.


If you cant provide better solution than mine, then this should be better  cool2

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: Ketamine on May 13, 2021, 03:33:49 AM

Citar desde: zodiacddos on May 13, 2021, 03:25:40 AM

es lo mismo,
¿Por qué empaqueta su ketamina con PECompact?

Porque sino descubrirían cómo funciona el antihack y podrian saltear sus protecciones  ^^ pero ...

Citar desde: zodiacddos on May 13, 2021, 03:25:40 AM

Well, as  i have qouted
"for the purpose of i have been searching this kind of solution towards basic problem of DEP issues."
it took me time.
If you can provide better solution than mine, then this should be better  cool2

No veo que tipo de protecciones podrian bypassear aqui simplemente excluyendo del DEP a todos los programas  sueno

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: Odisk on May 13, 2021, 04:09:31 AM

Citar desde: zodiacddos on May 13, 2021, 02:16:48 AM

Citar desde: Odisk on May 13, 2021, 02:05:50 AM

I have the following doubt why something as simple as this.

Code: [Select]

bcdedit.exe /set {current} nx AlwaysOff

Can a file weigh up to 5MB ? I have doubts that the file is packaged.

(https://fotos.subefotos.com/76b4d77107946318085684036dcf3982o.png)

I have not had time to unpack this file, but I will do it as soon as I have time.

Im not quite sure why it came to a bigger size after being packed. You can test your self create a particular file and see results after being pack with VMProtect. the second repack here is packed with Enigma, to which had likely created 1mb+ as well from the original less than 400kb.

It seems strange to me that you want to pack a windows formula when it can be done with a simple dep.bat, you may think that we are judging you but but the reality is that many people have taken advantage of it to steal personal information from users or perhaps bring down servers.

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: zodiacddos on May 13, 2021, 08:52:34 AM

Once again @Odisk  & @Ketamine  I'm just here to share what I think might be helpful to those WHO ARE in NEED, you can always have your own BETTER and BRIGHTER, solutions or ideas. I appreciate your opinion and sole points. But this is only I can share, nothing more, nothing less.


WE ARE ENTITLE TO POST WHAT WE THINK CAN BRING UP BETTER SOLUTIONS, but as some say, don't spoon-feed lazy ass pepZ.


Feel free to have your better solutions.

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: Ketamine on May 13, 2021, 02:07:40 PM

Citar desde: zodiacddos on May 13, 2021, 08:52:34 AM

Once again @Odisk  & @Ketamine  I'm just here to share what I think might be helpful to those WHO ARE in NEED, you can always have your own BETTER and BRIGHTER, solutions or ideas. I appreciate your opinion and sole points. But this is only I can share, nothing more, nothing less.


WE ARE ENTITLE TO POST WHAT WE THINK CAN BRING UP BETTER SOLUTIONS, but as some say, don't spoon-feed lazy ass pepZ.


Feel free to have your better solutions.

But im not talking about the solution in general, im talking about why pack it? :<

Titulo: Re: AUTO DEP.exe (Fix Auto Close For Client)
Posteado por: legacy101 on May 13, 2021, 06:01:04 PM

Not recommended to everyone. Like whats there to protect from this ? Where it can be easily done manually with alot of tutorials over the internet. That is virus free?

Why would you risk using this. This isn’t even the correct nor complete solution. :D