[Release] Assorted DirectX hooks.

choch85 · 8th August 2005, 21:34

I've received some pm's from people asking for one or two specific Direct 3D hacks.
Nothin' fancy, just straight forward, so I made a few yesterday during some free time. The result is a set of separate D3D hacks that the user can inject to suit their needs. Want nosky? inject the .dll at runtime then play the game. Same for Wallhack, Chams, etc.

Read the readme.txt for more info. You can use any loader you want to inject, but I've included a good stable one that you could use if you wish.

Undetected by PB as of 8/8/05

Made using Direct3D StarterKit v3.0.

Thanks to: Matthew L (Azorbix) ::: For creating the starter-kit.
Everyone who posted D3D-related tutorials at Game-Deception.

Screenshots:

http://img23.imageshack.us/img23/538...allhack7qd.jpg
http://img23.imageshack.us/img23/7510/nofog0id.jpg
http://img23.imageshack.us/img23/6643/nosky1pd.jpg
http://img23.imageshack.us/img23/158...allhack7kj.jpg
http://img23.imageshack.us/img23/639...ckchams8wp.gif
http://img23.imageshack.us/img23/1831/whitewalls0tw.gif

Use StealthInjector to inject: http://www.mpcdownloads.com/_mpc_d0w...jector_fix.rar

Pic of Setup
http://www.ihostphotos.com/show.php?id=77522

^^ Made by Sparten

caliber1942 · 8th August 2005, 21:44

nice work! perhaps some example code for each of these would make it complete! at any rate, nice work-

best,
cal

Hanny · 8th August 2005, 21:53

really nice stuff , waiting for the files now ^^

Thedominee · 8th August 2005, 21:54

hey nice man good work thnx

CaptainCox · 8th August 2005, 22:19

Under Review.

AntiVir Found BDS/Dragonbot.D.4
ArcaVir Found Trojan.Dragonbot.D
Avast Found Win32

ragonbot
AVG Antivirus Found BackDoor.Generic.XC
BitDefender Found Backdoor.Dragonbot.D
Dr.Web Found Trojan.DragonBot
F-Prot Antivirus Found W32/Singu.AZ@bd
Fortinet Found nothing
Kaspersky Anti-Virus Found Backdoor.Win32.Dragonbot.d
NOD32 Found Win32/DragonBot.D
UNA Found Backdoor.Dragonbot
VBA32 Found Backdoor.Win32.DragonBot.d
Status: INFECTED/MALWARE

Norton Classifies this as
http://securityresponse.symantec.com...oor.singu.html

This is for the INJECTOR ONLY!.

mantacore · 8th August 2005, 23:35

Quote:

Originally Posted by CaptainCox

Under Review.

AntiVir Found BDS/Dragonbot.D.4
ArcaVir Found Trojan.Dragonbot.D
Avast Found Win32

ragonbot
AVG Antivirus Found BackDoor.Generic.XC
BitDefender Found Backdoor.Dragonbot.D
Dr.Web Found Trojan.DragonBot
F-Prot Antivirus Found W32/Singu.AZ@bd
Fortinet Found nothing
Kaspersky Anti-Virus Found Backdoor.Win32.Dragonbot.d
NOD32 Found Win32/DragonBot.D
UNA Found Backdoor.Dragonbot
VBA32 Found Backdoor.Win32.DragonBot.d
Status: INFECTED/MALWARE

Norton Classifies this as
http://securityresponse.symantec.com...oor.singu.html

This is for the INJECTOR ONLY!.

I remember back when i think it was stealth injector came up as virus but was actually clean. This could be the same in this case. Somthing to do with the way it was coded.

CaptainCox · 8th August 2005, 23:41

In this case I cant eaven run it as Norton just kills it Directly. So there is something more then just code i think.

**scruie** · 8th August 2005, 23:55

Quote:

Originally Posted by CaptainCox

In this case I cant eaven run it as Norton just kills it Directly. So there is something more then just code i think.

kaspersky does the same thing for me with some injectors apart from mcmike's. also some ppl who have Zonealarm pro and upwards firewall might get a few more problems.

CaptainCox · 9th August 2005, 00:00

Checked with various ppl, seems to be a false positive, meaning all is ok.
Files Aproved but try it with another injector as the one choch85 uploaded is deleted....just not to couse confusion.

@scruie I had alot of various Injectrors but never one that was cought like this in any vir prog. I guess we learn somet new all the time.

choch85 · 9th August 2005, 00:03

That really scared the sh*t out of me. For one, I've been using this same injector for years, so I would have been infecting myself w/ a trojan

Good thing it's a false pos.

**scruie** · 9th August 2005, 04:34

@ choch85 yeah it's a false positive. i've only noticed a handful of AVs that pick it up as a trojan of some sort; kaspersky, AVG Free and now Norton.

as to the ZoneAlarm thing its on the Pro and above since the new versions have a 'kernal mode firewall'! more info here: http://www.zonelabs.com/store/conten.../whatsNew.jsp#

since the new version of ZA came out i've ben forced to reconfigure all hacks etc to work.

hacker244 · 9th August 2005, 11:11

how can i get the aimbot for nosky to work.

Sparten · 9th August 2005, 11:19

Quote:

Originally Posted by hacker244

how can i get the aimbot for nosky to work.

What aimbot, there is no aimbot in any of the listed dll's.

mantacore · 9th August 2005, 14:24

Quote:

Originally Posted by Sparten

What aimbot, there is no aimbot in any of the listed dll's.

LOL I think hes talking about what he read in the readme it says hes working on an aimbot.

givemeabreak · 9th August 2005, 19:56

When I inject wallhack.dll (or combined with chams):
I use L-mousebutton to move forward with infantry. However, the cursor is moving slowly downward as well! How can I stop this? It is not happening when using " W", my alternative move-forward button. My prime fire button is R-nouse. So what's up with the L-mouse button behaviour?

8th August 2005, 21:53	#3
Hanny Lord of Destiny Join Date: 16th Jun 2005 Posts: 53	really nice stuff , waiting for the files now ^^ __________________ http://www.sloganizer.net/en/style1,Hanny.png

9th August 2005, 00:03	#10
choch85 Angel of Darkness Join Date: 7th Oct 2004 Posts: 278	That really scared the sh*t out of me. For one, I've been using this same injector for years, so I would have been infecting myself w/ a trojan Good thing it's a false pos. __________________ "Nach dem Spiel ist vor dem Spiel." -S. Herberger

9th August 2005, 04:34	#11
scruie Global Moderator Power Overwhelming Join Date: 25th Nov 2004 Posts: 15,926	@ choch85 yeah it's a false positive. i've only noticed a handful of AVs that pick it up as a trojan of some sort; kaspersky, AVG Free and now Norton. as to the ZoneAlarm thing its on the Pro and above since the new versions have a 'kernal mode firewall'! more info here: http://www.zonelabs.com/store/conten.../whatsNew.jsp# since the new version of ZA came out i've ben forced to reconfigure all hacks etc to work. __________________

8th August 2005, 21:44	#2
caliber1942 I like em two at a time Platinum Dragon Join Date: 1st Feb 2004 Posts: 1,202	nice work! perhaps some example code for each of these would make it complete! at any rate, nice work- best, cal

8th August 2005, 21:54	#4
Thedominee Dark Mage Join Date: 16th Dec 2004 Posts: 25	hey nice man good work thnx

9th August 2005, 11:11	#12
hacker244 Mage Join Date: 22nd Jun 2003 Posts: 19	how can i get the aimbot for nosky to work.

9th August 2005, 19:56	#15
givemeabreak Dark Lord Join Date: 25th Nov 2004 Posts: 47	When I inject wallhack.dll (or combined with chams): I use L-mousebutton to move forward with infantry. However, the cursor is moving slowly downward as well! How can I stop this? It is not happening when using " W", my alternative move-forward button. My prime fire button is R-nouse. So what's up with the L-mouse button behaviour?