Main Menu

Report Bugs

Started by Myst, December 30, 2007, 07:26:38 AM

Previous topic - Next topic

Myst

Any problems or bugs you have post about them here.

portsniper

not saying there is a virus or anything just wanted to let you know that http://www.virustotal.com gave me this report apon scanning

eSafe 7.0.15.0 2008.01.03 Suspicious Archive Structure

this is saying that the antivirus eSafe is identifying the EZCC propduct as suspicous

sorry i just don't trust websites i don't know no disrespect myst

Myst

#2
No problem, I won't delete your post or anything. I'm not trying to hide anything :P

I don't know why it would detect it as a suspicious program.  It works/runs the way all normal bots would run. 
The only thing I'd suggest is downloading it from here, i.e a twistednet.org server.  Or other trusted sites.

The only possible theory I could think of for why it would pick it up as suspicious is that, if you scanned it with other files unknowingly or that it picked up BNCSutil.dll as suspicious.   Which is a well known and safe .dll.

In fact if you just scan the EZCC.exe it would come out clean. 

QuoteFile EZCC.exe received on 01.05.2008 01:58:59 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 0/32 (0%)
Loading server information...
Your file is queued in position: 4.
Estimated start time is between 47 and 68 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Compact
Print results Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:    
   
Antivirus    Version    Last Update    Result
AhnLab-V3   2008.1.5.11   2008.01.05   -
AntiVir   7.6.0.46   2008.01.04   -
Authentium   4.93.8   2008.01.04   -
Avast   4.7.1098.0   2008.01.04   -
AVG   7.5.0.516   2008.01.04   -
BitDefender   7.2   2008.01.05   -
CAT-QuickHeal   9.00   2008.01.04   -
ClamAV   0.91.2   2008.01.05   -
DrWeb   4.44.0.09170   2008.01.04   -
eSafe   7.0.15.0   2008.01.03   -
eTrust-Vet   31.3.5432   2008.01.04   -
Ewido   4.0   2008.01.04   -
FileAdvisor   1   2008.01.05   -
Fortinet   3.14.0.0   2008.01.04   -
F-Prot   4.4.2.54   2008.01.04   -
F-Secure   6.70.13030.0   2008.01.04   -
Ikarus   T3.1.1.15   2008.01.05   -
Kaspersky   7.0.0.125   2008.01.05   -
McAfee   5200   2008.01.04   -
Microsoft   1.3109   2008.01.05   -
NOD32v2   2766   2008.01.04   -
Norman   5.80.02   2008.01.04   -
Panda   9.0.0.4   2008.01.04   -
Prevx1   V2   2008.01.05   -
Rising   20.25.42.00   2008.01.04   -
Sophos   4.24.0   2008.01.04   -
Sunbelt   2.2.907.0   2008.01.05   -
Symantec   10   2008.01.05   -
TheHacker   6.2.9.180   2008.01.04   -
VBA32   3.12.2.5   2008.01.02   -
VirusBuster   4.3.26:9   2008.01.04   -
Webwasher-Gateway   6.6.2   2008.01.04   -
Additional information
File size: 180224 bytes
MD5: da6c6720a2185e1bb35c2ab4763c1565
SHA1: 398ad9e2e48e728212decc98d5f39b916141235b
PEiD: -

So nothing to worry about :)
But thanks for the post anyways, I applaud you for actually scanning programs before you use them.

portsniper

  [Bot 3] Initial Proxy Connection Established
  Error: Connection is aborted due to timeout or other failure.  Source = C:\Windows\system32\mswinsck.ocx

Currently Running Windows Vista SP2

I Have Mswinsck.ocx registered

Myst

did Bot 1 and 2 connect to a proxy? and if it did, did they connect successfully?
Initial Proxy connection Established means that you 127.0.0.1 and proxy server connected fine, after that it checks to see if bnet will accept the connection also. 
The only reason I could think that it would error is that if you made a error in the battle.net server you're connecting to. i.e a spelling error of somesort or something. recheck your config

Quote[Global Settings]
Server=useast.Battle.net
Home=Op Myst

edit: or the proxy timedout

Myst

Upon further investigation I scanned the whole zip file with all the files in it and it still came out clean.  So no file is bad at all.
So, either you downloaded it from another unknown source or you did what I said in my first part of the theory.
Hopefully this satisfies everyone.  If not packet log it, and if someone doesn't  know about that, then just use another product to get what this product offers.

QuoteFile EZCC.zip received on 01.05.2008 02:32:51 (CET)
Current status: finished
Result: 0/32 (0.00%)
Compact Compact
Print results Print results
Antivirus    Version    Last Update    Result
AhnLab-V3    2008.1.5.11    2008.01.05    -
AntiVir    7.6.0.46    2008.01.04    -
Authentium    4.93.8    2008.01.04    -
Avast    4.7.1098.0    2008.01.04    -
AVG    7.5.0.516    2008.01.04    -
BitDefender    7.2    2008.01.05    -
CAT-QuickHeal    9.00    2008.01.04    -
ClamAV    0.91.2    2008.01.05    -
DrWeb    4.44.0.09170    2008.01.04    -
eSafe    7.0.15.0    2008.01.03    -
eTrust-Vet    31.3.5432    2008.01.04    -
Ewido    4.0    2008.01.04    -
FileAdvisor    1    2008.01.05    -
Fortinet    3.14.0.0    2008.01.04    -
F-Prot    4.4.2.54    2008.01.04    -
F-Secure    6.70.13030.0    2008.01.04    -
Ikarus    T3.1.1.15    2008.01.05    -
Kaspersky    7.0.0.125    2008.01.05    -
McAfee    5200    2008.01.04    -
Microsoft    1.3109    2008.01.05    -
NOD32v2    2766    2008.01.04    -
Norman    5.80.02    2008.01.04    -
Panda    9.0.0.4    2008.01.04    -
Prevx1    V2    2008.01.05    -
Rising    20.25.42.00    2008.01.04    -
Sophos    4.24.0    2008.01.04    -
Sunbelt    2.2.907.0    2008.01.05    -
Symantec    10    2008.01.05    -
TheHacker    6.2.9.180    2008.01.04    -
VBA32    3.12.2.5    2008.01.02    -
VirusBuster    4.3.26:9    2008.01.04    -
Webwasher-Gateway    6.6.2    2008.01.04    -
Additional information
File size: 203868 bytes
MD5: 5ebe2d43ad313b4957f9dd421027f612
SHA1: 28630613147436534ec9286a5da68f33b8d3f949
PEiD: -

portsniper

is there a chance i could get the actual coding to change the timeout to a higher number i don't have the greatest proxies?

like is it possible to set it as a different time like

SetProxyTimeout=50

Myst

There is no timeout code in the program.  Uses whatever mswinsck defaults are. 

Myst

I suggest using http://www.torproject.org/  for proxies.  Fast and easy access to a proxy connection.  That's what I use.

EnDz

  Server = west.Battle.net
  [Bot 1] Connecting...
  Error: Authoritative answer: Host not found.  Source = C:\WINDOWS\system32\mswinsck.ocx

and then it just doesn't connect....

Myst

"west.battle.net" is not a valid server, use "uswest.battle.net"

Awu

ok so i put in my info into clan script, then i click connect, says connected and says old game. then i click the check channel, first i type in ECC, the clan title, then the full clan name. After, it says it has d/c. Then i try this a few more times then sometimes it says error because of c/windows/sys32...

can you help?

Myst

You weren't fully connected since you got rejected since your hash files were out of date.  Use up to date War3 Hash Files. 
War3 Hashs

Awu

I get this now: 
Clan Chief = DavidZhou
  Server = useast.Battle.net
  [Bot 1] Connecting...
  [Bot 1] Connected
  [Bot 1] Logging On..
  [Bot 1] Logged On.
  [Bot 2] Connecting...
  [Bot 2] Connected
  [Bot 2] Logging On..
  [Bot 2] Logged On.
  [Bot 3] Connecting...
  [Bot 3] Connected
  [Bot 3] Logging On..
  [Bot 3] Logged On.
  [Bot 4] Connecting...
  [Bot 4] Connected
  [Bot 4] Logging On..
  [Bot 4] Logged On.
  [Bot 5] Connecting...
  [Bot 1] Disconnected
  [Bot 5] Connected
  [Bot 4] Disconnected
  Error: Connection is aborted due to timeout or other failure.  Source = C:\WINDOWS\system32\mswinsck.ocx
Bot 1 and 4 disconnected

now i tried to find proxies using Tor, but where do i go for the ports?
I am i at the Tor Network Map, i click on a random relay, copy their IP but where's the port?

Myst

Well obvisly you were disconnected because you went over your IP limit for connections.  But you do have some understanding since you know you have to use proxies; so thats less for me to explain ;)

Now for Tor.  Just run tor and the proxy to connect to it is 127.0.0.1:9050

For info on what Tor is : http://www.torproject.org/overview.html.en