NEW LINK:
https://tuservermu.com.ve/index.php?topic=41862.msg225116#msg225116





Credits: Me 

Mediafire this blocking this my friend:


check, greetings!!

Error en el link de mediafire :(

Error en el link de mediafire :(

Link update

Can u share source

Al subir este tipo de contenido deberias subir un analisis de VIRUSTOTAL para dejar tranquilo al usuario y al menos detallar como configura y que es lo que hace la aplicacion.
La voy a testear para verlo, igual no me confio mucho como antes xD

No recomiendo utilizar esto por los siguientes motivos:

1- Esto parchea a todo el Windows causando que el DEP sea excluido de todos los programas lo cual ps esto puede ocasionar graves fallas en muchos jugadores.
2- No hay código fuente explicando la solución, muchas alertas en VirusTotal, programar en consola no da buena vista y ps nadie adjuntaría un .exe así en los jugadores.
2- Así no se soluciona el problema de manera correcta ^^

La manera correcta de solucionarlo (y en donde he visto muchísimo este problema) lo cual es porque intentan ejecutar una página en RAM sin atributo ejecutable, es la siguiente:

Al hacer Hook en alguna función (ej: el Main para alguna interface) deben cambiar:

Code: [Select]

 VirtualProtect( (LPVOID) Offset, Size, PAGE_READWRITE, &Oldprotect );

Por:

Code: [Select]

 VirtualProtect( (LPVOID) Offset, Size, PAGE_EXECUTE_READWRITE, &Oldprotect );

(Esto conlleva a revisar todo el source de sus files y que verifiquen que el tributo ejecutable este correctamente aplicado) :D

@ZabiinoOo Propongo que haya una nueva regla obligatoria en el foro la cual es que todos los archivos de este tipo sean incluidos con un análisis de VirusTotal obligatoriamente y si el análisis supera un porcentaje específico entonces que el source sea adjuntado o que busque la forma de que el VirusTotal de menos alertas, y ps si continúa todo igual entonces que el post vaya a la papelera ya que la idea es mantener la comunidad segura :D

Al subir este tipo de contenido deberias subir un analisis de VIRUSTOTAL para dejar tranquilo al usuario y al menos detallar como configura y que es lo que hace la aplicacion.
La voy a testear para verlo, igual no me confio mucho como antes xD

No recomiendo utilizar esto por los siguientes motivos:

1- Esto parchea a todo el Windows causando que el DEP sea excluido de todos los programas lo cual ps esto puede ocasionar graves fallas en muchos jugadores.
2- No hay código fuente explicando la solución, muchas alertas en VirusTotal, programar en consola no da buena vista y ps nadie adjuntaría un .exe así en los jugadores.
2- Así no se soluciona el problema de manera correcta ^^

La manera correcta de solucionarlo (y en donde he visto muchísimo este problema) lo cual es porque intentan ejecutar una página en RAM sin atributo ejecutable, es la siguiente:

Al hacer Hook en alguna función (ej: el Main para alguna interface) deben cambiar:

Code: [Select]

 VirtualProtect( (LPVOID) Offset, Size, PAGE_READWRITE, &Oldprotect );

Por:

Code: [Select]

 VirtualProtect( (LPVOID) Offset, Size, PAGE_EXECUTE_READWRITE, &Oldprotect );

(Esto conlleva a revisar todo el source de sus files y que verifiquen que el tributo ejecutable este correctamente aplicado) :D

@ZabiinoOo Propongo que haya una nueva regla obligatoria en el foro la cual es que todos los archivos de este tipo sean incluidos con un análisis de VirusTotal obligatoriamente y si el análisis supera un porcentaje específico entonces que el source sea adjuntado o que busque la forma de que el VirusTotal de menos alertas, y ps si continúa todo igual entonces que el post vaya a la papelera ya que la idea es mantener la comunidad segura :D

Gracias a ambos por estar al tanto, en tanto @zodiacddos lea sus comentarios esperamos pueda dar una respuesta respecto a las dudas que se tengan sobre este programa y si se requiere un analisis desde virustotal esperamos pueda indexarlo al tema el usuario autor del tema, saludos!!

Hello, ill upload a clean one. Thanks for reporting. Basically i just compress it to VMProtect for the purpose of i have been searching this kind of solution towards basic problem of  DEP issues. Though i have attached some kind of instruction on my previous clients how to fix that, still a lot of lazy ass players dont even bother reading basic fixes. Thats why i have creaded this cmd command triggers to which automatically disable DEP to all like @Ketamine  have mentioned. But it was working well on my players without problem. I dont agree with what you have said stating to cause my crashes since there were no report on my end. Regards

VIRUS TOTAL:

BEFORE CONVERTION AND PACKING

https://www.virustotal.com/gui/file/c2ab6a50004ef075f48f9cdcbdc1f070269db27a57ec5414ec278ba850931d9c/detection

AFTER CONVERTED AND PACKED

https://www.virustotal.com/gui/file/da2538c32a0efa2a317a69bed735b8de8365ddb2fed8825ce7369685a7e9fe1a/detection

Still detected many things

Still detected many things

Im using freeware packer probably this may cause to multiple false detection.

This tool is only for those who are in need. Thanks.

I have the following doubt why something as simple as this.

Code: [Select]

bcdedit.exe /set {current} nx AlwaysOff

Can a file weigh up to 5MB ? I have doubts that the file is packaged.



I have not had time to unpack this file, but I will do it as soon as I have time.

I have the following doubt why something as simple as this.

Code: [Select]

bcdedit.exe /set {current} nx AlwaysOff

Can a file weigh up to 5MB ? I have doubts that the file is packaged.



I have not had time to unpack this file, but I will do it as soon as I have time.

Im not quite sure why it came to a bigger size after being packed. You can test your self create a particular file and see results after being pack with VMProtect. the second repack here is packed with Enigma, to which had likely created 1mb+ as well from the original less than 400kb.

Im not quite sure why it came to a bigger size after being packed. You can test your self create a particular file and see results after being pack with VMProtect. the second repack here is packed with Enigma, to which had likely created 1mb+ as well from the original less than 400kb.

Por qué empaquetas una solución así?

Im not quite sure why it came to a bigger size after being packed. You can test your self create a particular file and see results after being pack with VMProtect. the second repack here is packed with Enigma, to which had likely created 1mb+ as well from the original less than 400kb.

Por qué empaquetas una solución así?

es lo mismo,

¿Por qué empaqueta su ketamina con PECompact?

Well, as  i have qouted

"for the purpose of i have been searching this kind of solution towards basic problem of DEP issues."

it took me time.


If you cant provide better solution than mine, then this should be better 

es lo mismo,
¿Por qué empaqueta su ketamina con PECompact?

Porque sino descubrirían cómo funciona el antihack y podrian saltear sus protecciones  ^^ pero ...

Well, as  i have qouted
"for the purpose of i have been searching this kind of solution towards basic problem of DEP issues."
it took me time.
If you can provide better solution than mine, then this should be better 

No veo que tipo de protecciones podrian bypassear aqui simplemente excluyendo del DEP a todos los programas 

I have the following doubt why something as simple as this.

Code: [Select]

bcdedit.exe /set {current} nx AlwaysOff

Can a file weigh up to 5MB ? I have doubts that the file is packaged.



I have not had time to unpack this file, but I will do it as soon as I have time.

Im not quite sure why it came to a bigger size after being packed. You can test your self create a particular file and see results after being pack with VMProtect. the second repack here is packed with Enigma, to which had likely created 1mb+ as well from the original less than 400kb.

It seems strange to me that you want to pack a windows formula when it can be done with a simple dep.bat, you may think that we are judging you but but the reality is that many people have taken advantage of it to steal personal information from users or perhaps bring down servers.

Once again @Odisk  & @Ketamine  I'm just here to share what I think might be helpful to those WHO ARE in NEED, you can always have your own BETTER and BRIGHTER, solutions or ideas. I appreciate your opinion and sole points. But this is only I can share, nothing more, nothing less.


WE ARE ENTITLE TO POST WHAT WE THINK CAN BRING UP BETTER SOLUTIONS, but as some say, don't spoon-feed lazy ass pepZ.


Feel free to have your better solutions.

Once again @Odisk  & @Ketamine  I'm just here to share what I think might be helpful to those WHO ARE in NEED, you can always have your own BETTER and BRIGHTER, solutions or ideas. I appreciate your opinion and sole points. But this is only I can share, nothing more, nothing less.


WE ARE ENTITLE TO POST WHAT WE THINK CAN BRING UP BETTER SOLUTIONS, but as some say, don't spoon-feed lazy ass pepZ.


Feel free to have your better solutions.

But im not talking about the solution in general, im talking about why pack it? :<