dual client malware found using AVAST

#11 Post by **benj1320** » 04 Dec 2010, 08:30

OK... so I manage to update my Sakray, Ragexe and Valexe Clients.....

and heres what I've got.

Scan test for BOTH Ragexe.exe and Valexe.exe

1. after the update, I scan it using Avira antivir.... the Packed version is clean.
2. then I started to Unpack it using StripperX 2.07, Unpacking is a success... then started to scan the clien.... the result is CLEAN

Scan Test for Sakexe ( because this client was used to make dual window and gameguard disabling work )

1. after updating .. I scanned it with my Avira Anivir .. the result is clean.
2. after scanning I manage to UNPACK it using the StripperX 2.07... again I scan it and now it detects the client as a TROJAN.

seems like it detects only those Old Version of Clients when unpacked....

I manage to unpack ragexe and valexe... the problem now is tracing the hexstrings for dual login... @_@ they change the hexstrings and also the blocks where they are found .....

th3_gam3r · #12 Post by **th3_gam3r** » 04 Dec 2010, 13:00

so is my bot safe?

kapengbarako · #13 Post by **kapengbarako** » 04 Dec 2010, 13:30

th3_gam3r wrote:so is my bot safe?

I believe the valexe and ragexe are the issue here which gives us capability to dual log and disable gameguard. bots are still safe as it was.

greaver · #14 Post by **greaver** » 05 Dec 2010, 06:29

so is it safe? it seems that magania virus/malware is a password stealing malware...

omengzki · #15 Post by **omengzki** » 05 Dec 2010, 19:09

ive encountered this issue the other day and found out the my avast antivirus del my valexe when it automatically scanned my comp.. but what i have done on this issue is... bcoz i have made a backup file on my valexe, i just copy paste it on my ragnarok folder and up until now, my hexed client is working and i have not encountered any issues since that day.. guys remb the post "use _sakray.exe and rename that file to valexe.exe?" thats what ive done back then and ive kept the file just for future use. i just want to share this to u guys coz maybe u can create an idea on this one...

on my end i can say that the only prob is that avast detects something that is not a prob.

btw.. i also have observed that using that old valexe, its possible to play online while botting but for the dual windows.. its not possible... oh my.... sigh..

speedfreak265 · #16 Post by **speedfreak265** » 06 Dec 2010, 03:17

hmm..? is it still safe to use unpacked sakexe client?

iceman1523 · #17 Post by **iceman1523** » 06 Dec 2010, 11:06

same problem here Avira detected it as a virus and delete it what are the updates for this king of problem

fn_semilla · #18 Post by **fn_semilla** » 07 Dec 2010, 08:45

where can i download the unpacker??

barcode0961 · #19 Post by **barcode0961** » 08 Dec 2010, 02:09

posible solutions:

1. rename the your RO folder where hexed client is found
2. report as false positive to avast
3. disable your antivirus when using hexed client
4. change your antivirus

Valkylie · #20 Post by **Valkylie** » 18 Dec 2010, 00:54

Guys... Hex thy own clien

OpenKore

dual client malware found using AVAST

Re: dual client malware found using AVAST

Re: dual client malware found using AVAST

Re: dual client malware found using AVAST

Re: dual client malware found using AVAST

Re: dual client malware found using AVAST

Re: dual client malware found using AVAST

Re: dual client malware found using AVAST

Re: dual client malware found using AVAST

Re: dual client malware found using AVAST

Re: dual client malware found using AVAST