Címlap Cheats Game hacking articles Trainers and anti-vir softwares

Trainers and anti-vir softwares

I know that some anti-virus programs are picking up the trainers as viruses. I have written it down a few times already but no one ever reads the comments, so here is an article about it.

First of all, what is a trainer? A program which is hacking into another program to modify it's codes. If You think about this with pure logic, You already understand that trainers can be considered to be "potentially unsafe" programs as they are hacking into another program. They are using code injection to modify the game code and achieve the desired effect which is in this case, some cheat.
Most viruses are basically doing the same. Hacking into another program, sometimes with code injection and modify it.

Trainers and viruses are therefore using similar methods, but the reason or goal is different of course. Your anti-virus software however does not bother to check what is the purpose of the hacking, they can't check that You are just cheating in some game with a trainer or some virus is hacking into Your programs without Your knowledge. This is why some anti-vir is picking them up as a Trojan.

The second usual report is that the trainer is a keylogger. In fact, trainers are using APIs to check if a key is pressed and as they have to do this while You are in the game and not just in the trainer, they are using APIs to check keypresses system-wide. Otherwise the trainer would not know if You press a key to activate a cheat, while You are in the game.

I hope this makes clear why are trainers sometimes mistaken to be a keylogger. They check if You press a key, but they don't store the results and send over to some hacker, like a real keylogger would do. They don't even connect to the internet. You can even monitor this with the appropriate program.

The 3rd usual report is that the trainer is a Hacktool. Do I need to say more? Yes, the trainer is a hacktool. You hack into the game with it. It is just obvious if it is picked up as a hacktool by an AV.

And finally, my trainers are made with Cheat Engine. They contain large parts from the original Cheat Engine program. And as You may or may not know, Cheat Engine itself is detected as a virus by some anti-virus softwares. As Cheat Engine is flagged as a virus, the trainer which has been made with it is also flagged as a virus.
Cheat Engine is used by hundreds of thousands if not millions of people for every kind of reverse-engineering purposes. It has many advanced tools which can be used to change another program, therefore it is flagged as "dangerous" by AV companies.
Moreover, game publishers probably also try to get rid of cheaters, therefore they convince AV companies to flag it as a virus and scare people away from using it. For more info on Cheat Engine virus reports, check this forum topic:

http://forum.cheatengine.org/viewtopic.php?t=24363

 

Now You know why are trainers (every trainer, not just my trainers) are blocked/flagged/deleted by some anti-vir softwares. Other trainer makers would probably just send You to hell if You would ask them why, as they are sick of hearing this bullshit all the time.

I am however a very patient guy so I have written this article and everyone can see how things are working.

On a side note, let me tell You that these trainers are newly generated files and they have been never used on any computers before. Not even on my computers. I use copies to test my trainers but I never run the original file so even if there would be a virus on my comp, it wouldn't get into the file. And yes, as You see I am fuckin paranoid and careful so You can be sure that I have taken every neccessary step to avoid infection both in my trainers and on my computers.
Also, the source code for the cheats are usually (which means always so far) available on the Cheat Engine forum if You search for it, so You don't even need to use my trainer if You know how to use Cheat Engine.

If You have read this article and understood it, probably You will not feel it neccessary to post another "it's a virus" comment somewhere on the site. If You still feel that my trainers has some virus that doesn't fit into these descriptions, send a full virus report with Your AV software's name so I can check it in details.

You can send an e-mail to:
Ezt a címet a spamrobotok ellen védjük. Engedélyezze a Javascript használatát, hogy megtekinthesse.

You don't need to send a virus report which contains:
Dropper.Agent.ABYJ
Win32:Malware-gen
Trojan.Dropper-26973
Trojan-Dropper.Agent!IK
Riskware
Heuristic.BehavesLike.Win32.Suspicious.H
a variant of Win32/HackTool.CheatEngine.AB
W32/Obfuscated.I
Medium Risk Malware
Trojan.Win32.Delf.abt (fs)
HackTool.CheatEngine!/Rvf5d7ZQPYtrojan

or similar names. It is full of gen, generic, suspicious, riskware. In human language, they mean "I don't know what the fuck is this file but I don't like it". This still doesn't mean it is a virus. It is just suspicious. Which is a big difference.

If You send a virus report, make sure to check on the virus name and verify that it is really a virus and not just some heuristic scanner bullshit like the ones above.

You can also leave a comment for this article below.

Peace!
Geri

Share/Save/Bookmark
 

Hozzászólások  

 
#1 ruiodi 2011-01-19 11:11
hey but my works thanks very much :lol:
Idézet
 
 
#2 worm 2011-01-19 15:34
u nowim on avast and it shows me worm virus
Idézet
 
 
#3 Geri 2011-01-19 16:19
Idézet - worm:
u nowim on avast and it shows me worm virus


As I have mentioned, if You don't trust the author, don't use the program. Your choice.
Idézet
 
 
#4 thepinyox 2011-02-15 21:47
is there any chance your blog use english?i want to read your blog further since i'm currently learning how to use cheat engine :-)

best regard :D
Idézet
 
 
#5 Geri 2011-02-16 11:07
Idézet - thepinyox:
is there any chance your blog use english?i want to read your blog further since i'm currently learning how to use cheat engine :-)

best regard :D


Hi!

No, because the blog is not my blog. I am Geri and I am a different person than Zoli. I am the admin/creator of the site but I run the Cheat section only. So whatever You see outside of the Cheat section is not my stuff. And everything in the cheat section is in English.

All tutorials about Cheat Engine is in this "Game hacking articles" section.

http://www.szemelyesintegracio.hu/cheats/41-game-hacking-articles

Peace!
Idézet
 
 
#6 billy 2011-03-01 15:26
man ok i trust the author, but how the fuck i can teach my AV to skip it and consider it safe? im using windows7 with norton 2010
Idézet
 
 
#7 Geri 2011-03-01 17:25
Idézet - billy:
man ok i trust the author, but how the fuck i can teach my AV to skip it and consider it safe? im using windows7 with norton 2010


You can disable the automatic protection. The firewall can remain turned on as the trainer doesn't need internet connection at all and all incoming unauthorized package will still be blocked by the firewall.

Or if the AV has this option, you can put the file on the exception list or copy it into a folder where trusted files are stored.
Idézet
 
 
#8 billy 2011-03-03 20:17
thanks man, i fucked every single chicken in all levels :lol:
Idézet
 
 
#9 radupatriche 2011-03-05 15:53
Oh lol I am an idiot. Why didn't I learn to read in school? :)
Idézet
 
 
#10 lolwut 2011-03-21 02:58
I am just another idiot.
Idézet
 

Szóljon hozzá!


Biztonsági kód
Frissítés