View previous topic :: View next topic |
Author |
Message |
Black Jin How do I cheat?
Reputation: 0
Joined: 29 Jun 2017 Posts: 1
|
Posted: Thu Jun 29, 2017 8:15 am Post subject: Installer tries to run adware, even after disabling offers |
|
|
Okay so, I understand that Cheat Engine itself isn't infected or compromised but the installer from cheatengine . org is being quite suspicious. When installing Cheat Engine, it appears that different executable files are dropped into AppData/Local/Temp, which then they are executed and start trying to edit the Windows registry. These files are created at the end of the CE installation, regardless of whether you opt out from the offers or not. I ran the installation twice to see, and two separate, different programs were executed after creation.
So I decided to check these two programs on Virus Total, and it appears both are detected as adware and other such things.
If I opt out of these offers, why is it that adware is still dropped and then executed?
Description: |
Virus Total Scan for Program #2 |
|
Filesize: |
45.81 KB |
Viewed: |
10713 Time(s) |

|
Description: |
Virus Total Scan for Program #1 |
|
Filesize: |
45.16 KB |
Viewed: |
10713 Time(s) |

|
|
|
Back to top |
|
 |
atom0s Moderator
Reputation: 140
Joined: 25 Jan 2006 Posts: 7376 Location: 127.0.0.1
|
Posted: Thu Jun 29, 2017 9:12 pm Post subject: |
|
|
This is very common for anti-virus' to flag legit software as potential problems due to them being used for malicious purposes more than not. Cheat Engine uses an ad based installer to help generate some income for Dark Byte for the free work he puts into Cheat Engine.
Because of it, the installer is being flagged as a more or less 'false-positive' as you can see by the listings of what it's named. "DealFly" is a generic name given to the installer engine because it shows ads. The installer is not infected and ads are screened by the developers of the installer. Do some issues slip through the cracks every now and then? Sure, nothing is perfect. But you have nothing to worry about as long as you take your time while installing and opt. out of everything.
If you still don't want to run the installer or don't trust it, the Downloads paage of CE offers a packaged version without the installer.
_________________
- Retired. |
|
Back to top |
|
 |
pimpmyname Newbie cheater
Reputation: 0
Joined: 16 May 2012 Posts: 20
|
Posted: Mon Oct 09, 2017 2:35 pm Post subject: |
|
|
Its because of the opt out install stuff... But its the way you guys make money so its fair enough.
But a lot of AVs will pick it up as unwanted software.
_________________
I only seduce widows sons... so dont worry :3 |
|
Back to top |
|
 |
StrikerFX How do I cheat?
Reputation: 0
Joined: 01 Jul 2016 Posts: 3
|
Posted: Sat Dec 16, 2017 5:17 am Post subject: |
|
|
I was downloading the program on the site, but had the following warning: November 13 2017: Can not run Cheat Engine. From what I understand, the cheat engine has a virus, is that it? Has it already been resolved or not? I intend to use the portable version until it is infected too?
|
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 351
Joined: 09 May 2003 Posts: 20408 Location: The netherlands
|
Posted: Sat Dec 16, 2017 5:36 am Post subject: |
|
|
check your anti virus. ce is a 'hacktool / cheat engine" which is exactly what you want, but your AV might not know that
also, what is the exact error you get ?
if it's the error that cheatengine-x86_64.exe is missing after doubleclicking it then use the windows repair tool posted on the website
_________________
Do not ask me about online cheats. I don't know any and wont help finding them. |
|
Back to top |
|
 |
sch7777 Newbie cheater
Reputation: 0
Joined: 04 Mar 2011 Posts: 21
|
Posted: Mon Apr 02, 2018 8:29 pm Post subject: WTF |
|
|
I'm no genius
Malwarebytes is saying this
(PUP.Optional.GameHack)
potentially unwanted programs
is some kind of a threat.
WTF Dark Byte is
STANDALONEPHASE1.DAT
really necessary to
the operation of
cheat engine and
what is STANDALONEPHASE1.DAT
real purpose to the
cheat engine?
I've never upgraded Cheat Engine from 6.3
Well I started watching some YouTube videos on cheat engine and seen CE v6.7 Thought I would try it out. So downloaded it and scanned it with Malwarebytes. Bam got Malwarebytes all in an up roar over it. Yea, yea i've read all about how Malwarebytes is picking up false virus's. How all this is a bunch of BS. So I would like to know is (STANDALONEPHASE1.DAT) really necessary to be in the cheat engine folder? Will cheat engine function without them? WTH is Tiny.dat file as well????
Thanks for any help or info
|
|
Back to top |
|
 |
TheyCallMeTim13 Wiki Contributor
Reputation: 13
Joined: 24 Feb 2017 Posts: 391 Location: Right Here Buddy.
|
Posted: Mon Apr 02, 2018 8:38 pm Post subject: Re: WTF |
|
|
sch7777 wrote: | I'm no genius
Malwarebytes is saying this
(PUP.Optional.GameHack)
potentially unwanted programs
is some kind of a threat.
WTF Dark Byte is
STANDALONEPHASE1.DAT
really necessary to
the operation of
cheat engine and
what is STANDALONEPHASE1.DAT
real purpose to the
cheat engine?
I've never upgraded Cheat Engine from 6.3
Well I started watching some YouTube videos on cheat engine and seen CE v6.7 Thought I would try it out. So downloaded it and scanned it with Malwarebytes. Bam got Malwarebytes all in an up roar over it. Yea, yea i've read all about how Malwarebytes is picking up false virus's. How all this is a bunch of BS. So I would like to know is (STANDALONEPHASE1.DAT) really necessary to be in the cheat engine folder? Will cheat engine function without them? WTH is Tiny.dat file as well????
Thanks for any help or info |
This might help explain what they do.
http://www.cheatengine.org/forum/viewtopic.php?t=571857
And "PUP.Optional.GameHack" sound about right for a hack tool, so if you didn't want a "GameHack" tool then it's correct about the unwanted part else it's just making false assumptions. And the day AVs like memory editors will be the day pigs fly with rainbows as their propulsion.
EDIT:
Logically look at it like this, CE is open source and has a community of people who reverse software for fun; so it seems to me like this would be the worst place to try and hide a virus.
_________________
A: What manner of man are you that can summon up fire without flint or tinder?
T: I... am an enchanter. |
|
Back to top |
|
 |
Dark Byte Site Admin
Reputation: 351
Joined: 09 May 2003 Posts: 20408 Location: The netherlands
|
Posted: Tue Apr 03, 2018 12:08 am Post subject: |
|
|
a PUP is not a virus or malware, it's a "Potentially unwanted program"
malwarebytes assumes most people want to play games as they are designed, and therefore don't want to use mods.
_________________
Do not ask me about online cheats. I don't know any and wont help finding them. |
|
Back to top |
|
 |
sch7777 Newbie cheater
Reputation: 0
Joined: 04 Mar 2011 Posts: 21
|
Posted: Tue Apr 03, 2018 1:20 am Post subject: |
|
|
Thanks Dark Byte
I'll Set malwarebytes to ignore the files
Also thanks TheyCallMeTim13
I did read the post yesterday.
|
|
Back to top |
|
 |
|