Found this interesting

[OncePhoenix]

Just thought I'd throw this out there.
More than likely a false positive as the file modifies your host and "Disguises???" as a different file (Skype using port 80).






still, to prevent anything could always just buy from a certain somebody and not be a pirating scumbag

[R1S3]

I tried saying this before, it's SCELLOW, he knows his shit gets released on mpgh, THE SITE THAT BANNED HIM, so obviously (hes the type of person to do this) hell pull some shit like this and infect his own programs so when they get released on mpgh we all get fucked. The orape v3 client released here last time had a negative in the virus scan and I said the same exact thing about how he probably did it on purpose.
Anyways, nothing we can do about it, its on his site, obviously itll get disapproved if released on here, 1) because its ruining krazyshanks program and 2) bc of this exact screenshot.

Just buy it from krazyshank, risk this one, or idk, I scanned it myself and I got 0 negatives, dont know what you did there to get 30 negatives..

[JustAnoobROTMG]

Lmao, bullshit .

If you carefully look at the results, it says "Confuser".
ConfuserEX is the .net protector used by kronks HIMSELF to protect Kronkboxer.

The scan above shows that Kronkboxer inside the archive was detected as "Protected with Confuser/Ex", not "virus".
This protector is also WIDELY used by malware authors and AV cant really analyse it so they just tag the file as BAD.
Basically you are saying krazyshank gives viruses

Also :

* The crack HAS to modify the host file to bypass Kronkboxer auth. Ever heard about "Server check?"
Virus does this for BAD purposes, but this is legit this time. You can modify the host to block ads too, and its not "virus".

* The crack source code is easily readable and not crypted or obfuscated , therefore i am waiting for anyone to prove there is malware code in it

* I coded it, i 've already said that on this forum. And yeah, i am known for infecting everyone with trapped clients /s...


TLDR : FALSE POSITIVE AS LONG AS YOU GET IT FROM THE *CENSORED* WEBSITE
(other people can spread real virus ofc)

If only you knew how to actually READ THE README

inb4 this thread/post vanishes

[OncePhoenix]

inb4 you read my post again and feel like an idiot for typing all that

[lkdjnfoskjednfblksjdfn]

Lmao, bullshit .

If you carefully look at the results, it says "Confuser".
ConfuserEX is the .net protector used by kronks HIMSELF to protect Kronkboxer.

The scan above shows that Kronkboxer inside the archive was detected as "Protected with Confuser/Ex", not "virus".
This protector is also WIDELY used by malware authors and AV cant really analyse it so they just tag the file as BAD.
Basically you are saying krazyshank gives viruses

Also :

* The crack HAS to modify the host file to bypass Kronkboxer auth. Ever heard about "Server check?"
Virus does this for BAD purposes, but this is legit this time. You can modify the host to block ads too, and its not "virus".

* The crack source code is easily readable and not crypted or obfuscated , therefore i am waiting for anyone to prove there is malware code in it

* I coded it, i 've already said that on this forum. And yeah, i am known for infecting everyone with trapped clients /s...


TLDR : FALSE POSITIVE AS LONG AS YOU GET IT FROM THE *CENSORED* WEBSITE
(other people can spread real virus ofc)

If only you knew how to actually READ THE README

inb4 this thread/post vanishes

i spy with my little eye 2 "confuse" one, but the other 28 nuh uh, gtfo.

[SlickEashy]

I looked into this. If you unrar it the only file that shows up with viruses on virustotal is kronkboxer.exe. I also scanned kmasutra.exe and it came up with nothing. If you compare the results of the kronkboxer.exe in the rar and the legit kronkboxer.exe, you will see they both show up with different viruses. This is probably because the cracked one has an older version packed with it or Scellow is trying to pull something.

If they did something, it is more than likely in kronkboxer.exe. A place where you wouldn't suspect it.

Also, I know nothing about malware and reverse engineering but this is what I was able to find and you can even do these tests yourself.

[~V~]

Kemu.exe and Kmasutra.exe itself are clean files i checked code as well but on the other hand kronkboxer.bin and kronkboxer.exe are both packed so i can't say anything for this files

Here are virus scans:

Kemu.exe : https://www.virustotal.com/en/file/b0fc3afe7c9333d7a9a85e630e5a3ff964393ae3a0e391944c 0e4d8b3190f82d/analysis/1453930942/
Kmasutra.exe : https://www.virustotal.com/en/file/8fd7a58dc03362cdc4fb120bcbc7600fe971bb38eb9966ffa9 1a349c2cbd8b32/analysis/1453931001/
KronkBoxer.bin(exe) : https://www.virustotal.com/en/file/74f3d84cbec17eb68df347386c6d01088c04e528a9768b7c31 e4717caededd68/analysis/1453931017/
KronkBoxer.exe : https://www.virustotal.com/en/file/8838cf81ad4d0db39961a87bde05ab3b6db495b2c2b7234c41 4f7de0c3f78a87/analysis/1453931047/

[gldrk]

Going to try and see if it works with the default KronkBoxer you get from the normal website.