Staredit Network > Forums > SC1 UMS Mapmaking Assistance > Topic: Virus within the map generated by map unprotector?
Virus within the map generated by map unprotector?
Sep 16 2021, 8:56 am
By: NiceNowIHaveAName  

Sep 16 2021, 8:56 am NiceNowIHaveAName Post #1



A few weeks ago a friend of mine asked me if I can unlock this EUD map. After renaming it and trying to open it with several unprotectors I ended up getting https://www.mediafire.com/file/xd7nhxgkj591ttb/asd.scx/file
this[/url] file (since it's been a while since then, I think this map was generated by SMC 2.86, but it was still protected, I assume). I then tried to open it with ScmDraft2 and Chkdraft, but it wouldn't work.

Seeing that it's not working, I took a look at it using Ladik's MPQ Editor (LME), this time noticing a file called "File00000002.exe", as seen here:



, I said to myself "Well, that's strange! I have never seen an exe within a map!", so I hit "View File" in LME. In the first line I noticed "UpackByDwing", as seen here:



, which I assumed it was a packer, but after googling it, it came up more as being a packer used for viruses. Seeing this. I decided to submit "File00000002.exe" to virustotal, and the results came in as being a virus.

I was still curious if the map would still run in Starcraft, so I fired up the game in a sandbox, and a second later after the map started I got this error:



Is this indeed a virus or is just a false positive? Also, if it's not a virus, do packers usually show up as viruses to antiviruses? I'm asking this because I've read in the past that it was possible to get viruses into maps by means of EUD, for SC 1.16.1. I think I read about it here, on staredit. I'm also aware that SC:R runs EUD within a sandbox, and that certain type of EUDs were prohibited.



None.

Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[01:56 am]
Oh_Man -- cool bit of history, spellsword creator talking about the history of EUD ^
[09:24 pm]
Moose -- denis
[05:00 pm]
lil-Inferno -- benis
[10:41 am]
v9bettel -- Nice
[2024-4-19. : 1:39 am]
Ultraviolet -- no u elky skeleton guy, I'll use em better
[2024-4-18. : 10:50 pm]
Vrael -- Ultraviolet
Ultraviolet shouted: How about you all send me your minerals instead of washing them into the gambling void? I'm saving up for a new name color and/or glow
hey cut it out I'm getting all the minerals
[2024-4-18. : 10:11 pm]
Ultraviolet -- :P
[2024-4-18. : 10:11 pm]
Ultraviolet -- How about you all send me your minerals instead of washing them into the gambling void? I'm saving up for a new name color and/or glow
[2024-4-17. : 11:50 pm]
O)FaRTy1billion[MM] -- nice, now i have more than enough
Please log in to shout.


Members Online: jun3hong, Oh_Man