Blizzhackers

Return of the Jedi

* Login   * Register    * FAQ    * Search

Join us on IRC: #bh@irc.synirc.net (or Mibbit Web IRC)


MuleFactory


It is currently Fri May 24, 2013 8:54 am


All times are UTC [ DST ]





Post new topic Reply to topic  [ 10 posts ] 
Author Message
 Post subject: [AU3] D2 Ai Beta
PostPosted: Tue Apr 14, 2009 4:30 am 
 
User
User

Joined: Tue Apr 14, 2009 4:20 am
The D2-Insanity Controversy
Recently i have posted a bot called D2-Insanity, (originally named d2 infinity but changed before.) Immediately before proper searching, asking to see the source, or anything, it was flagged as a trojan. After i was first banned, someone, posted a trojan with the name of D2-Insanity. You can tell they did because they jumped the bosses from being able to do Elderitch/Shenk/Pindle to Cows Countess and other non-autoitable things.
THIS IS NOT A TROJAN! I will PM the source to anyone who requests it, all of this is 100% Autoit! Besides the .wav :P. Please before i get re-banned. Let me explain everything. I renamed the bot hoping to get a clean slate from all this. Since my ip was posted, from my old board, i have been recieving Ddos's all day, please stop.


D2-AI, is a FULLY autoit bot, which currently only runs pindle. However, we expect for it to have support for Trav Pindle Shenk Elderitch and Chaos. But that requires the testers to do it :P

This is not a "trojan" or virus. You can scan it yourself @ Virustotal.com virusscan.jotti.org or novirusthanks.org

The offical support forums: www.D2Ai.org


This bot is still ridiculously in beta, we need testers to get a stable version out! So help us!


Supported Classes
-----------------
Hammerdin (in beta)
Light Sorc (Should use chain)
Fire Sorc
Blizzard Sorc

Very easy to setup
------------------
1) set d2 resolution @ 800x600
2) set d2 to default keys
3) Set windows xp display settings to 32 bit
4) Run Configuration.exe


To Mods: Can you please move this into Bots and Programs after you have reviewed and tested it :)

Downloads:
Mirror 1 (RS)
Mirror 2

MD5: e745c2a7efa8705c7c1cc99996187bd9

Source


Last edited by AutoMe on Tue Apr 14, 2009 4:56 am, edited 3 times in total.
Top
 Profile  
 Post subject:
PostPosted: Tue Apr 14, 2009 4:31 am 
 
User
User

Joined: Tue Apr 14, 2009 4:20 am
Virus Scan
-------
Scan taken on 14 Apr 2009 03:31:24 (GMT)
A-Squared    
Found nothing
AntiVir    
Found nothing
ArcaVir    
Found Heur.W32
Avast    
Found nothing
AVG Antivirus    
Found nothing
BitDefender    
Found nothing
ClamAV    
Found nothing
CPsecure    
Found nothing
Dr.Web    
Found nothing
F-Prot Antivirus    
Found nothing
F-Secure Anti-Virus    
Found nothing
Ikarus    
Found nothing
Kaspersky Anti-Virus    
Found nothing
NOD32    
Found nothing
Norman Virus Control    
Found nothing
Panda Antivirus    
Found nothing
Quick Heal    
Found nothing
Sophos Antivirus    
Found nothing
VirusBuster    
Found nothing
VBA32    
Found nothing


Heur.W32 Is a false positive
------------------------------------------------------------------------------------
If you have been using AutoIt for any length of time you will know that it is a great, and powerful scripting language. As with all powerful languages there comes a downside. Virus creation by those that are malicious.

AutoIt has no virii installed on your system, and if a script you have created has been marked as a virus, (and you're not malicious) then this is a false positive. They found a set of instructions in an AutoIt EXE out there somewhere, took the general signature of the file, and now all AutoIt EXE's are marked (or most of them). This can be due to several reasons.

1. AutoIt is packed with UPX. UPX is an open source software compression packer. It is used with many virii (to make them smaller).
2. Malicious scripter got the AutoIt script engine recognized as a virus.

And I am sure there are more ways your executable could be marked, but that covers the basics.

Now I am sure you are wanting to know what you can do to get back up and running without being recognized as a virus. You have to send in a report to the offending AV company alerting them to the false positive they have made. It never hurts to send in your source code along with a compiled exe, to help them realize their mistake.

You may have to wait up to 24 hours for them to release an update. The time it takes really depends on the offending AV company.

Anti-Virus Links


Last edited by AutoMe on Tue Apr 14, 2009 4:34 am, edited 1 time in total.
Top
 Profile  
 Post subject:
PostPosted: Tue Apr 14, 2009 4:37 am 
 
User
User

Joined: Tue Apr 14, 2009 4:20 am
The post where it says it can do cows, etc.

That legitimately was not me.

All my previous releases have shown to only have 1 AUTO it false positive.

This is not a trojan >< >< >< ><

Top
 Profile  
 Post subject:
PostPosted: Tue Apr 14, 2009 5:09 am 
 
Moderator
Moderator
User avatar

Joined: Mon Jan 30, 2006 2:29 pm
Location: Barrie, Ontario
After looking at this, it looks to be legit, it's just a basic clicker.

Edit: BTW, Autoit is ridiculously simple to decompile.

Top
 Profile  
 Post subject:
PostPosted: Tue Apr 14, 2009 6:02 am 
 
User
User

Joined: Tue Apr 14, 2009 4:20 am
Mc God wrote:
After looking at this, it looks to be legit, it's just a basic clicker.

Edit: BTW, Autoit is ridiculously simple to decompile.

I know its extremely basic with pixelsearch.

Its part of a project im doing to start to learn coding. Thank you for comfirming

Top
 Profile  
 Post subject:
PostPosted: Tue Apr 14, 2009 10:44 am 
 
User
User
User avatar

Joined: Tue Feb 24, 2009 5:43 pm
I haven't looked at this one, but the previous two were clearly fake bots.

Your fist bot actually claimed to do:

Cows
Andariel
Countess
Summoner
Duriel
Trav
Meph
Pindle
Elderitch
Shenk

All the files except the exe were bullshit copy and paste.

All the class scripts (Hammerdin,BlizzSorceress,FireSorceress,LightSorceress) were just this text copy pasted all over to make the file big enough:
FIreSoRC
OISB9u392u
vzk,mv39290290290b0909sxzBkj43w9v09vk32k,v,a.sv0932


The bosses,pickit and pathing files were just this text copy-pasted over and over:
Bossesvasfdbas
Bossesvasfdbas
Bossesvasfdbas
Bossesvasfdbas
Bossesvasfdbas
Bossesvasfdbas
Bossesvasfdbas
Bossesvasfdbas


You can download his first "bot" here:
http://www.mediafire.com/?ilnzyjy2mln
Was uploaded 03/29/2009


The second bot were even worse. All the files but the trojaned exe files were the same identical file. 24122 bytes of copy paste:
IU*T($*UBW$U*(SDIV
over and over again.

You can download his second "bot" here:
http://www.mediafire.com/?ufoczzq0ntt
Uploaded 04/04/2009.

Top
 Profile  
 Post subject:
PostPosted: Tue Apr 14, 2009 6:07 pm 
 
User
User

Joined: Tue Apr 14, 2009 4:20 am
IF u can re-read the first paragraph i posted.

If u look at the bot posted by Bionide (My legit one)

you can see its not even closely malicious. Nethir is this one.


Non of the one posted by ME have been malicous.

I did not post anything on "D2-Advertiser" or "Biotaste" or anything else than bionide.


Source code: http://www.mediafire.com/?inzjwmli0mj

Top
 Profile  
 Post subject:
PostPosted: Tue Apr 14, 2009 9:09 pm 
 
Site Dev Gold
Site Dev Gold
User avatar

Joined: Tue Mar 18, 2003 2:07 am
Since source has been posted, and the binary checked, it is approved. Note that only the downloads listed at the bottom of the first post are approved. We do not vouch for any further download sites, 'official' or otherwise.

_________________
Image

Top
 Profile  
 Post subject:
PostPosted: Mon Apr 20, 2009 2:21 am 
 
User
User

Joined: Tue Apr 14, 2009 4:20 am
UPDATE

RC BETA 8
-------------------

New Features
-------------
Speeded up waypoint selection
Fixed checkdeath gold bug
Added more support for laggy'er users
Fixed pindle quit bug
Added monster search at precast
Fixed iniwrite bugs
fixed configuration bugs
Redid configuration.exe
Added Timer to avoid realm down's
Fixed many other minor bugs
Slimmed Down Mod
---------------------------------------------
Homepage: D2AI.org
Download Link: http://www.d2ai.org/D2AIInstaller.exe



To Mods: Can you clear the posts and make the title: "[AU3] D2AI V0.8
Thanks.

Top
 Profile  
 Post subject:
PostPosted: Sat May 16, 2009 12:42 am 
 
User
User

Joined: Tue Apr 14, 2009 4:20 am
This hasnt been updated recently because RC Beta 8 wasnt even put on top.


Current Version: 1.2 next will be 1.3 this weekend.

_________________
Divided we stand, united we fall.
-------------------------------------
D2Ai.org - Maker of D2AI and its products

Top
 Profile  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 10 posts ] 

All times are UTC [ DST ]


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
cron