Age of Kings: Conquerors Combohack Trojans

[mookster]

Hi,

I'm not sure why I keep getting this "TR/Agent.53256.A" from the aoc combohack file...I googled for information on it but cant find any. Other notable scanners like kaspersky and panda did not find anything...

Basically it's a multiplayer hack that allows you to forcibly resign others, get extra resources etc...It's probably the script that seems malicious ...

I want to use the combohack only to drop people who continue to smurf into my online games with different names.

I've scanned the file with other programs:

A-Squared
Found nothing
AntiVir
Found TR/Agent.53256.A
ArcaVir
Found nothing
Avast
Found Win32:Trojan-gen {Other}
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found Trojan.Agent.53256.A
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Sophos Antivirus
Found Sus/Behav-200 (probable variant)
VirusBuster
Found nothing
VBA32
Found nothing

You can download the combohack here:

*** link removed ***

[Jack.Sparrow]

How certain are you that this thing works? Maybe, just maybe, it actually is a Trojan ...

[mookster]

http://es.geocities.com/fcevallos86/aoc/readme.pdf

gives some info

It's been widely used by thousands of people; the creator is also known by the online aoc gaming community. He was forced to create a patch to stop the combopack from working.
---------------------------------------------------------------------
The info is here:
http://groups.msn.com/xiGAMESAoEForu...D_Message=3358
1.0e is a third party patch, which has the good intention of preventing all known cheats from working. It's used mostly in Rated Death Match and Tournament games. 1.0c however is the most recent official release by Microsoft/Ensemble, and 1.0e is not supported by Microsoft/Ensemble.
Most who use and promote 1.0e are players who wish to avoid cheaters. There are no cheat programs known to work with 1.0e.

AoC site of Fair Play recommends the use of 1.0c (and does not recommend 1.0e) for two reasons:

* 1.0e includes the "CD Crack". This enables players to defeat Microsoft's copyright protection. A user of any CD Crack is not automatically a cheater, but out of principal we cannot recommend using something with a CD Crack.
1.0e's original developer was tOrMeNtIuM. tOrMeNtIuM is also the author of the most widely used "combo hack" (this is currently the source of most hacking that occurs in 1.0c games today). This makes it questionable (see background info).

Background Info
The first cheat programs (often called trainers or hacks) were single user. When some of these became useful in multi-user online AoC games, Microsoft/Ensemble released the 1.0c patch, which rendered them useless. 1.0C is the most recent official release and is required to play using the MS Gaming Zone.

Eventually cheat programs became available that work in mulit-user 1.0c games. The most predominant in use today are Map Hacks, and the Resource and Population Hack known as the "combo hack" developed by tOrMeNtIuM.

tOrMeNtIuM's combo hack was sold for $$. Later on someone hacked tOrMeNtIuM's serial number scheme (they hacked the hack) making it available for free. Use of this hack is very easily recognized in a recorded game.

tOrMeNtIuM was pressured to right his wrong. He created the 1.0d patch, which prevented use of his own combo hack. Later it was discovered that some map hack was still working with 1.0d.

ToI2n_m0d__ (a ToI2n Clan member) who had been instrumental in pressuring tOrMeNtIuM into "righting his wrong" then fixed 1.0d such that the map hack would not work with it. This was released by ToI2n_m0d__ as 1.0e. Some believe that ToI2n_m0d__ only put his name on it as a public relations move to try and combat the problem of tOrMeNtIuM's shady past hurting the creditability of 1.0e. True or not, most of 1.0e originates from tOrMeNtIuM's work. After tOrMeNtIuM righted his wrong by releasing 1.0d, ToI2n_m0d__ and tOrMeNtIuM had became friends.

Today, 1.0e appears to be used by about 10% of players, and it appears that no cheat programs are known to work with it. There are however people who are understandably suspicious that there must be a new tOrMeNtIuM combo hack that exists, but if it does its unknown if any group has it in use.

1.0e Summary
1.0e is an unofficial "crack" created mostly by a cheater (tOrMeNtIuM) who also created one of the most predominate cheat programs it protects against. 1.0e appears to be trustworthy and appears to stop all cheats from working, but includes the CD "crack" which circumvents Microsoft's copyright protection.
We do not recommend it's use, but respect most of those using it and promoting it since their intentions are good (i.e. clean fair play in AoC).

from: http://www.aocfairplay.tk/ (these folks also keep a list of known cheaters.)

[Jack.Sparrow]

If you're confident that it won't harm your system, feel free to use it. I wouldn't recommended it, but AV programs do occationally pick up viruses which aren't actually viruses.

Due to the nature of the 'hack' however, I'm not sure you'll be able to get much help here.

[mookster]

some info on 1.0e
http://aok.heavengames.com/cgi-bin/a...&f=3,37714,,10

Igzones is where most aoc ppl play, with ~1500 people average. 1.0e is the default patch the server uses for anticheat.

[mookster]

thanks jack

is there a way for me to find ppl to analyze the program's script?

[Jack.Sparrow]

Is your copy of the game legit or did you download it from somewhere?

RE: The script - the creators of the 'hack' would probably be the best people to contact.

[mookster]

I bought the game when it came out in 00'.