COD 4 OldSchoolHack RC6 [Patch 1.4 Support]

jijip · 08-25-2009, 05:45 AM

Remember, the hack is not created by me, I'm just providing it to the gamerzplanet community.

PLease admin change title cod 4 into cod 5

Patch 1.4 Support

1) start Call of Duty 5 Multiplayer
2) start this hack
3) choose your version of CoD5 (works for Beta, 1.0, 1.1, 1.2 ger/int, 1.3 ger/int and 1.4 ger/int)
4) press the keys

Num1 = NameTags on/off
Num2 = Wallhack on/off
Num3 = Radarhack on/off
Num4 = NoRecoil + NoSpread on/off
Num5 = Dvar Unlocker on/off
Num6 = FastRank on/off (only version < 1.4)

**CampStaff** · 08-26-2009, 02:58 PM

Malicious TROJAN Detected

It connects to this Russian home IP

Code:

Aug 26, 2009 22:56:56            [Only registered and activated users can see links. ]     192.168.0.255:20000     tcp
Aug 26, 2009 22:57:20            [Only registered and activated users can see links. ]     192.168.0.255:10001     tcp
Aug 26, 2009 22:57:43            [Only registered and activated users can see links. ]     192.168.0.255:20000     tcp

Code:

# Submission details:

    * Submission received: 26 August 2009, 15:58:23
    * Processing time: 5 min 18 sec
    * Submitted sample:
          o File MD5: 0x83900DBE85CBFCF38890A18ACB88BA3D
          o File SHA-1: 0x39E4405179CD1B4FAFAFCE98563E6DB896458C7E
          o Alias:
                + Backdoor.Trojan [Symantec]
                + Backdoor.Win32.Shark.hes [Kaspersky Lab]
                + Generic BackDoor!bd [McAfee]
                + Mal/Generic-A [Sophos]
                + Trojan:Win32/Bumat!rts [Microsoft]
                + Backdoor.Win32.Shark [Ikarus]
                + Win-Trojan/Shark.335360 [AhnLab]

Quote:

[Only registered and activated users can see links. ]
a-squared 4.5.0.24 2009.07.24 Backdoor.Win32.Shark!IK
AhnLab-V3 5.0.0.2 2009.07.24 Win-Trojan/Shark.335360
AntiVir 7.9.0.228 2009.07.24 BDS/Shark.hes
Antiy-AVL 2.0.3.7 2009.07.24 Backdoor/Win32.Shark.gen
Authentium 5.1.2.4 2009.07.24 W32/Backdoor2.ESKA
Avast 4.8.1335.0 2009.07.24 Win32:Trojan-gen {Other}
AVG 8.5.0.387 2009.07.24 -
BitDefender 7.2 2009.07.24 Trojan.Generic.1630397
CAT-QuickHeal 10.00 2009.07.24 Backdoor.Shark.hgd
ClamAV 0.94.1 2009.07.24 -
Comodo 1749 2009.07.24 Backdoor.Win32.Shark.hes
DrWeb 5.0.0.12182 2009.07.24 -
eSafe 7.0.17.0 2009.07.23 -
eTrust-Vet 31.6.6637 2009.07.24 -
F-Prot 4.4.4.56 2009.07.23 W32/Backdoor2.ESKA
F-Secure 8.0.14470.0 2009.07.24 Backdoor.Win32.Shark.hes
Fortinet 3.120.0.0 2009.07.24 W32/Shark.HES!tr.bdr
GData 19 2009.07.24 Trojan.Generic.1630397
Ikarus T3.1.1.64.0 2009.07.24 Backdoor.Win32.Shark
Jiangmin 11.0.800 2009.07.24 Backdoor/Shark.atq
K7AntiVirus 7.10.800 2009.07.23 Backdoor.Win32.Shark.hes
Kaspersky 7.0.0.125 2009.07.24 Backdoor.Win32.Shark.hes
McAfee 5686 2009.07.23 Generic BackDoor!bd
McAfee+Artemis 5686 2009.07.23 Generic BackDoor!bd
McAfee-GW-Edition 6.8.5 2009.07.24 Heuristic.LooksLike.Heuristic.BehavesLike.Win32.Ba ckdoor.I
Microsoft 1.4903 2009.07.24 -
NOD32 4273 2009.07.24 probably a variant of Win32/Shark
Norman 6.01.09 2009.07.22 -
nProtect 2009.1.8.0 2009.07.24 Backdoor/W32.Shark.335360
Panda 10.0.0.14 2009.07.24 Trj/CI.A
PCTools 4.4.2.0 2009.07.23 -
Prevx 3.0 2009.07.24 -
Rising 21.39.42.00 2009.07.24 -
Sophos 4.44.0 2009.07.24 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.07.23 Backdoor.Win32.Shark.hes
Symantec 1.4.4.12 2009.07.24 Backdoor.Trojan
TheHacker 6.3.4.3.373 2009.07.24 Backdoor/Shark.hes
TrendMicro 8.950.0.1094 2009.07.24 -
VBA32 3.12.10.9 2009.07.24 Backdoor.Win32.Shark.hes
ViRobot 2009.7.24.1851 2009.07.24 -
VirusBuster 4.6.5.0 2009.07.23 Backdoor.Shark.CTZ
Additional information
File size: 335360 bytes
MD5 : 83900dbe85cbfcf38890a18acb88ba3d
SHA1 : 39e4405179cd1b4fafafce98563e6db896458c7e
SHA256: 5f109570a102011ad8a5821ba46ee2c0dc3fdb8ea24553eb3a 8707e0d9dadd0b
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xE6001
timedatestamp.....: 0x49F1A60F (Fri Apr 24 13:44:15 2009)
machinetype.......: 0x14C (Intel I386)

( 10 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x87000 0x34400 8.00 5ecc3020b6463af5bcd836c78684550f
.data 0x88000 0x11000 0x2C00 7.87 7b1d84202948d8a8e6c03516c7fad19e
.tls 0x99000 0x1000 0x200 0.00 bf619eac0cdf3f68d496ea9344137e8b
.rdata 0x9A000 0x1000 0x200 0.21 9d8060acdbb6ad00b6f90464f28212f1
.idata 0x9B000 0x3000 0xE00 7.40 bbbd0c42bf54f0b1722a1df17d0e3bc3
.edata 0x9E000 0x1000 0x200 2.36 446b286517517c6f15e33fb067a4c1c7
.rsrc 0x9F000 0x3F000 0x6400 7.84 15080741ebcd0fc40e06d5d3762c8882
.reloc 0xDE000 0x8000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
oshcod5 0xE6000 0x13000 0x13000 2.54 475f5a67cf1668ae3686a28573a701a5
.adata 0xF9000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

( 8 imports )

> advapi32.dll: RegCloseKey
> comctl32.dll: ImageList_Add
> gdi32.dll: BitBlt
> kernel32.dll: GetProcAddress, GetModuleHandleA, LoadLibraryA
> oleaut32.dll: -
> shell32.dll: Shell_NotifyIconA
> user32.dll: ActivateKeyboardLayout
> version.dll: GetFileVersionInfoA

( 1 exports )

> @@Main@Finalize, @@Main@Initialize, __GetExceptDLLinfo, ___CPPdebugHook, _oshcod5
TrID : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
VXD Driver (0.1%)
ssdeep: 6144:4VN+FMCC5SB1V13oq6V4CTYGQdzbhUP28:4VN+3C5SB1H S6AY/B+
PEiD : ASPack v2.12
packers (Kaspersky): ASPack
packers (F-Prot): Aspack
CWSandbox: [Only registered and activated users can see links. ]
RDS : NSRL Reference Data Set

jijip · 08-27-2009, 06:03 AM

Wtf I live in Belgium ... Btw I didnt make it so um, should I remove the file and get me another source?
Btw Can you tell me wich A-V tool or online service you use so I can scan my files in the future before uploading them.

**Lalalakid** · 08-29-2009, 11:12 AM

Viruses are a no-go.
Closed.