DcNightWing
Newbie
- Nov 17, 2022
- 52
- 33
- 172
- Thread starter CarbyneX
- Start date
in front of the hotel there'll be a blue guy, talk with him. If hes not there, then maybe he appears at night, so just wait
Da Great Comanda
Member
- Dec 17, 2018
- 232
- 111
- 197
Try adding the whole folder of the game into you anti virus exception list and also if the deleted item is quarantined, go to it and reinstate it before adding the folder or the specific deleted file to exception list
just wait until is a good version, this virus active and check your windowns and the trojan i dont know what it does but im sure is not good
kunkemka
Newbie
- May 3, 2020
- 35
- 6
- 91
Can anyone explain what is the red number next to health ? The one with the crossed eyes emoji, I assume it is what's causing me to lose my health but I have no idea how to make it go down since going to sleep doesn't do anything other than restore my hp
I can't play this even after updating the AV and after blocking on the firewall. I usually trust the judgement on the website when it comes to false positives, but virustotal even refers bitdefender, mcafee, avast and symantec, that's quite a combination. I deeply recommend to rethink the avaiability of this file here, long time my AV triggered like this. Even after blocking through firewall doesn't help to avoid it.
I wouldn't run this on my machine, but you guys do what you want.
It is, but isn't the first game that does it. What bothers me is having that along with triggers from several known AV machines like bitdefender, avast, symantec and mcaffee. It's way too many red flags, specially for an dll file and not an exe.
I wouldn't run this on my machine, but you guys do what you want.
It is yes.
Last edited:
The file is completely clean it's just a false positive and doesn't connect to the internet at all. It's getting tiring to read the same thing over and over just because you have a skill issue adding the file to defender exclusion, then you go to online av's and get overly scared by some red text that you don't even know what it means and why it happens.
What you mean by skill issue? I know I can avoid codice.dll being removed, I simply don't want due the reasons above. It's my own choice, not because I am not aware of which file is being removed. Please don't be rude just because I don't want it on my computer.
I believe I still have the right to do so, it isn't a random guy who will decide it neither I am obligating others to do the same. Your judgement is different, sure, but for me it isn't worth to let it stay on my machine.
Blocking an .exe is not enough.
A program may create its own .exe and execute it, thats the easiest bypass.
Best protection is whitelisting or using a VM.
EDT: Actually, whitelist can also be abused. If the.exe uses one of your whitelisted browsers
EDIT2: use a VM and block the VM with your firewall. IT'S A FALSE POSITIVE ? HOW COME THIS IS THE ONLY CRACKING TOOL THAT USES IT then waiting until the AV tools catch up with their dictionary should be fine.
A program may create its own .exe and execute it, thats the easiest bypass.
Best protection is whitelisting or using a VM.
EDT: Actually, whitelist can also be abused. If the.exe uses one of your whitelisted browsers
EDIT2: use a VM and block the VM with your firewall. IT'S A FALSE POSITIVE ? HOW COME THIS IS THE ONLY CRACKING TOOL THAT USES IT
then waiting until the AV tools catch up with their dictionary should be fine.
Last edited:
- Jun 6, 2023
- 936
- 7,750
- 591
Did ya'll test metered connection alongside with autorun activities and monitor process injection via tools like Process Hacker or Sysinternals Suite?
I did ran the tests— it's likely a custom-packed DLL triggering generic heuristics. That’s why Defender or others flag it — especially if it's obfuscated, unsigned, or packed with UPX variants.
Unless you’ve actually sandboxed it and monitored network activity, file writes, and registry changes, calling it a trojan is just guesswork. Virustotal detections ≠ proof of harm — they often flag game cracks, trainers, and mods due to behavioral similarities, not malicious intent.
Still, if you're uncomfortable, run it in a virtual machine or wait for a cleaned repack. But don't claim it's infected unless you've verified malicious behavior — not just AV paranoia.
I did ran the tests— it's likely a custom-packed DLL triggering generic heuristics. That’s why Defender or others flag it — especially if it's obfuscated, unsigned, or packed with UPX variants.
Unless you’ve actually sandboxed it and monitored network activity, file writes, and registry changes, calling it a trojan is just guesswork. Virustotal detections ≠ proof of harm — they often flag game cracks, trainers, and mods due to behavioral similarities, not malicious intent.
Still, if you're uncomfortable, run it in a virtual machine or wait for a cleaned repack. But don't claim it's infected unless you've verified malicious behavior — not just AV paranoia.
You know malicious behaviour can simply be delayed correct?
Again, I trusted several false positives on this website, just not this one. And clearly I'm not the only one. If so many red flags along with several people saying the same isn't enough (not only on this thread, but on the malware thread too) isn't enough then whatever.
It even may be safe, but it doesn't show full security. Even some Ren'Py games had that issue of not providing any triggers due the malicious code being hidden on the game's code. Without triggering heuristics.
I don't know why you're so mad for people being careful for their machine, after all it's encouraged on this website, but whatever.
You do what you want to your machine, the same way anyone does what they want to their machine.
Of course i can run a VM, use a process monitor and hope that it satisfies the virus environment.
But it's a hassle.
Maybe it doesn't get created, because the virus needs a C: drive, because the virus gets active after 1h or maybe some other limitation that i can't think of right now.
Fact is that most Games do not need a crack, but from all games that i downloaded, i only got this game as Virus warning.
(currently running AV scan).
Keep pushing this fiasco while you don't even know what you are talking about at all.
A false positive av scan is not a red flag, again you don't know even what these "anti-virus" do to actual flag a file, you don't know how my crack works and you don't know even know why the game needs a crack to begin with.
VMProtect is on top of my crack and just that makes the AV scans go crazy, but even without my code injection triggers them too and my Unity server emulator does too, even removing all of this just basics of memory tampering with PlayDRM is detected as a virus, by the nature of those anti-virus. You don't know this but a real virus can evade anti-virus easily if one wants to and a genuine file can be false positive.
You came in here claiming that there's malware and saying to everybody to stay away and when you get told you are wrong you claim we are attacking you and everybody is free to do whatever they want. Sure nobody cares what you wanna do but stop claiming false things, thank you.
There's another user here that is in the process of cracking PlayDRM games and they too have their game files flagged AFTER cracking them
See:
He explains greatly both why it gets flagged and also why cracks needs to be protected from PlayDRM folks, hence why i used VMProtect.
Was it worth spending days reversing Enigma Protector to provide this crack? no cause of people like you.
Last edited:
- Jun 6, 2023
- 936
- 7,750
- 591
- Jun 6, 2023
- 936
- 7,750
- 591