Mh site

[Pretendo]

check plz http://www.maphax.cjb.net/ i scaned dident find ne thing but someone plz check

this one to http://d2maphack.0nyx.com/

 

[Dragnskull]

the first mh to come out wont be by a noname place/person.

if it doesnt have .com dont bother.

 

[Pretendo]

look at second one seems legit i dono but should i switch out the exe im scared i scaned nothing but once i got trojaned even tho i scaned it after i clicked it put a torjan on my computer but if u lookin in log file the date is june 24

JOHN-DESKTOP Realm startup at 2005-06-24 18:35:41.187

can someone else please scan

 

[Habya]

Well all the scans I did came up with the second one being clean however that is no guarantee. The biggest problem with scanners as usual is that they rely on signature files and until the AV/AT vendors have the file submitted to them chances if it's new it own't be detected unless the heuristic scan happens to catch it. Or if you're using something like Panda with TruePrevent which has behavioral analysis which can catch quite a bit of stuff. I've run it against PestPatrol and BOClean's memory scanners and both come up clean but even then that's no guarantee. If I was at home I'd run it on my other comp I have setup for specifically running files to see exactly what they do and how they interact with the system.

At this point unless you know how to take the thing apart and analyze it the only definitive answer you can get is by emailing it to the AV/AT vendors and letting their engineers analyze it.

Personally I'm just going to wait until a confirmed known good site I've downloaded from previously has it before I trust any other site that pops up saying they have a new maphack. It's too easy for virus/trojan writers or just even script kiddies to throw up a website and put a bunch of infected files claiming to be a new maphack and have tons of people running it.

 

[wasup999999]

For the top one, it is clearly a place full of viruses. (As allready said.)
For the second one, all it is, is a zip of old dlls and a non-working exe file. (The exe file made no attempt to connect to internet, it just said it was an invalid win32 program.)

 

[chocofilez]

Has anyone actually tried these though?

 

[dalk]

I tried to get it to work but kept saying this aplication is invailed for windows 32 i dont have windows 32 i have xp but if u guys can ]tell me what to do that would be great

 

[Forged]

win32 means 32 bit, not which os you have...

 

[dalk]

hehe so umm guess it dont work huh?

 

[Ntrik_]

onyx's name isnt speleld with number.

 

[Jerk_Head]

onyx's name isnt speleld with number.

??????? Are you on the wrong topic or something ???????

 

[shadowscourge]

Lol. No its the site. 0nyx.com

 

[Jerk_Head]

Oh. Thanks.

 

[Pauling]

how do i run second file?

 

[Atreyu108]

I did a scan and came up with this result. I aint touching this...

AntiVir Found TR/Spy.SCKeyL.z.1.C
ArcaVir Found Trojan.Spy.Sckeylog.X
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-Spy.Win32.SCKeyLog.x
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found Trojan-Spy.Win32.SCKeyLog.x

And As for the C3PO Decide for yourself, Heres the results of the scan...

Status: MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time and/or runtime packers were found, this is suspicious. Normally programs aren't packed and don't force the sandbox into lengthy emulation. Do realize no scanner issued any warning, the file can very well be harmless. Caution is advised, however.)

Packers detected: FSG
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found nothing

 

[Santans Army]

Wait till someone puts a mh on Bf. Wow people are so eager to get a mh. No wonder the drop mh wuz out first.

 

[Ne0nBu11et]

the c3po 1 is fake too. didn't even get a chance to d/l it and look

http://img.photobucket.com/albums/v635/Ne0nBu11et/lolfake.jpg

 

[Dragnskull]

leme fix my rule a bit...

if its not .com, dont bother.

if its got more than 2 .'s in its address, dont bother either.

www.****.**.com is bullshit just as badly as .uk.co

 

[chocofilez]

the c3po 1 is fake too. didn't even get a chance to d/l it and look

http://img.photobucket.com/albums/v635/Ne0nBu11et/lolfake.jpg

Lol. So these are both just computer killers?

 

[COTA-BlueBawlz]

Sounds like my cuz .... he gots nail 12 troj's ...... hes nufaced tho ... stuipd shizno fruit basket :!