Staredit Network > Forums > SC1 UMS Mapmaking Assistance > Topic: Virus within the map generated by map unprotector?
Virus within the map generated by map unprotector?
Sep 16 2021, 8:56 am
By: NiceNowIHaveAName  

Sep 16 2021, 8:56 am NiceNowIHaveAName Post #1



A few weeks ago a friend of mine asked me if I can unlock this EUD map. After renaming it and trying to open it with several unprotectors I ended up getting https://www.mediafire.com/file/xd7nhxgkj591ttb/asd.scx/file
this[/url] file (since it's been a while since then, I think this map was generated by SMC 2.86, but it was still protected, I assume). I then tried to open it with ScmDraft2 and Chkdraft, but it wouldn't work.

Seeing that it's not working, I took a look at it using Ladik's MPQ Editor (LME), this time noticing a file called "File00000002.exe", as seen here:



, I said to myself "Well, that's strange! I have never seen an exe within a map!", so I hit "View File" in LME. In the first line I noticed "UpackByDwing", as seen here:



, which I assumed it was a packer, but after googling it, it came up more as being a packer used for viruses. Seeing this. I decided to submit "File00000002.exe" to virustotal, and the results came in as being a virus.

I was still curious if the map would still run in Starcraft, so I fired up the game in a sandbox, and a second later after the map started I got this error:



Is this indeed a virus or is just a false positive? Also, if it's not a virus, do packers usually show up as viruses to antiviruses? I'm asking this because I've read in the past that it was possible to get viruses into maps by means of EUD, for SC 1.16.1. I think I read about it here, on staredit. I'm also aware that SC:R runs EUD within a sandbox, and that certain type of EUDs were prohibited.



None.

Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[05:24 pm]
Vrael -- CUT IT OUT
[05:24 pm]
Vrael -- HEY STOP BEING NICE
[05:01 pm]
NudeRaider -- Ultraviolet
Ultraviolet shouted: actually I am mad after all, looks like you're gonna have to follow through
didn't I by posting the note?
[04:59 pm]
Ultraviolet -- actually I am mad after all, looks like you're gonna have to follow through
[04:59 pm]
Ultraviolet -- :lol:
[04:46 pm]
NudeRaider -- damn, and here I was prepared and got chatgpt to rephrase it a bunch of times for more people to join the bandwagon. :D https://anotepad.com/notes/7fk84xef
[04:33 pm]
Ultraviolet -- lol it's fine, I was just being sassy :P
[03:19 pm]
Vrael -- maybe my browser window didnt update or something funky
[03:19 pm]
Vrael -- lol sry UV, I must not have read that? I couldve sworn I was the next person to say something after CAFG but clearly based on timestamps I was 4 hours later
[03:18 pm]
Vrael -- :teach:
Please log in to shout.


Members Online: RIVE, Roy