Main Menu
Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - rnbby

#1
General / Re: V0.45 out?
July 27, 2011, 10:22:40 AM
Quote from: sYk0 on July 27, 2011, 03:31:08 AM
Almost done, added some last minute changes, it will be out later today. :)

Also would you guys be interested in a tool to make a spawn (multiplayer) edition of StarCraft II?
Basically, this will strip out all the campaign data (cinematics, audio, models, ect) from the game and only leave the multiplayer elements (assuming this is possible), should trim down the game by a couple GB, possibly making a portable edition of the game.

+interested here+

Could you make it read *cache* in current_dir? That would be super cool.
#2
General / Re: V0.45 out?
July 25, 2011, 05:26:51 PM
And I would have need a lot of time replacing thZW clients with english ones. haha!

This helps a lot of to introduce to new players.

moar p0wah!
#3
Quote from: sYk0 on July 23, 2011, 07:55:16 PM
Quote from: rnbby on July 23, 2011, 03:17:38 AM
Quote from: sYk0 on July 23, 2011, 02:44:21 AM
The reports of a virus are all "False Positives", Kaspersky Internet Security 2012 didn't pick up anything.

Q: Why would your Anti-Virus flag these files as "suspicious"?
A: Because the way that the LAN crack it written, it uses detours ("hooks") to intercept system API calls and redirects them to where needed.
Anti-virus programs don't like this because it could be potentially dangerous, that doesn't mean it is!

If you would like to find out more about API Hooking read these articles: http://en.wikipedia.org/wiki/Hooking and http://research.microsoft.com/sn/detours

Isn't your post a bit misleading?

Server.exe doesn't do hook or detours. Just FYI.

Lol, out of everything I said you pick up one thing... :)

I never specified which file(s) use detours, nor did I point out any specific file(s) that didn't, I was merely trying to give some "general" information as to why an anti-virus program would flag some files.

I you really want to nitpick, you could point out that none of the .txt, .ini, .manifest, .mpq, ect files use detours either.

My previous post may not be 100% correct but it is neither 100% incorrect, next time I shall specifically point out the suspicious files in question. ;)

For argument sake:
QuoteStarCraft II.exe
StarCraft II.dll
SC2.dll
SC2.exe
May all or may not be considered suspicious by your anti-virus product.

Yeah my bad. Not really trying to nitpick or anything.

It's just that the main issue is "server.exe in starfriend is flagged as TR/Kazy variant". :D

Neither of the other files you posted were flagged. That's why I hinted that it's misleading.
#4
Quote from: sYk0 on July 23, 2011, 02:44:21 AM
The reports of a virus are all "False Positives", Kaspersky Internet Security 2012 didn't pick up anything.

Q: Why would your Anti-Virus flag these files as "suspicious"?
A: Because the way that the LAN crack it written, it uses detours ("hooks") to intercept system API calls and redirects them to where needed.
Anti-virus programs don't like this because it could be potentially dangerous, that doesn't mean it is!

If you would like to find out more about API Hooking read these articles: http://en.wikipedia.org/wiki/Hooking and http://research.microsoft.com/sn/detours

Isn't your post a bit misleading?

Server.exe doesn't do hook or detours. Just FYI.