Article View: comp.sys.ibm.pc.games
Article #66392Re: Play multiplayer wolfenstein rtcw Wild West free
From: Nonymous
Date: Wed, 28 Sep 2005 11:54
Date: Wed, 28 Sep 2005 11:54
29 lines
2366 bytes
2366 bytes
"Skybuck Flying" <nospam@hotmail.com> wrote in message news:dhdro0$pb4$1@news1.zwoll1.ov.home.nl... > *** WARNING *** > > This "game" is probably infected with a trojan or a backdoor or something > like that. > > During installation it had to download wolf 1.41 which might be infected. > > During the game it loads some kind of DLL. "Oh my god! A windows program that uses a DLL!!!" Are you an idiot? > Then it called "OpenProcess" on about everything in the tasklist which is > not normal at all. > Unless this might be punkbuster checking for some kind of cheats. But I > see > no reason why it would need to call OpenProcess etc... OpenProcess returns a Handle to the running process that's needed in order to call other Windows API calls which can be used to interrogate the process and find out who/what it is. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dllproc/base/process_and_thread_functions.asp http://msdn.microsoft.com/library/default.asp?url=/library/en-us/debug/base/readprocessmemory.asp
Technical Details
Message-ID:
<K-6dnd5rW8nDGafeRVn-sA@giganews.com>Path:
mbox-mo1.pugleaf.net!number1.nntp.dca.giganews.com!local01.nntp.dca.giganews.com!news.giganews.com.POSTED!not-for-mailReferences:
<431ed794$0$67258$157c6196@dreader2.cybercity.dk> <dhdro0$pb4$1@news1.zwoll1.ov.home.nl>Show Full Headers
Complete Article Headers
Path: mbox-mo1.pugleaf.net!number1.nntp.dca.giganews.com!local01.nntp.dca.giganews.com!news.giganews.com.POSTED!not-for-mail NNTP-Posting-Date: Wed, 28 Sep 2005 06:54:06 -0500 From: "Nonymous" <noham@nospam.com> Newsgroups: alt.games.wolfenstein, comp.sys.ibm.pc.games, comp.sys.ibm.pc.games.action, de.alt.games.half-life References: <431ed794$0$67258$157c6196@dreader2.cybercity.dk> <dhdro0$pb4$1@news1.zwoll1.ov.home.nl> Subject: Re: Play multiplayer wolfenstein rtcw Wild West free Date: Wed, 28 Sep 2005 07:54:00 -0400 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 X-RFC2646: Format=Flowed; Original Message-ID: <K-6dnd5rW8nDGafeRVn-sA@giganews.com> Lines: 31 X-Trace: sv3-WpTZJjqxOvxBery6tVSKLTBN+q+ndXgGihS7vfP0357uTsuckRIPKmhpGEd15Z8XBl8nuFAZbSRRUhN!emcPC1s7JTPYuc58M+aabd/8lrnjpmyLPTQOk2dFn9vKW/0x98q6y0V37Yt7xxY= X-Complaints-To: abuse@giganews.com X-DMCA-Notifications: http://www.giganews.com/info/dmca.html X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.32 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit