WarCock Public with Aimbot!, Version 5.0

[jobless]

Features (Basic):

- No Fall Damage
- Superjump (ctrl)
- No Recoil
- No Spread
- Stamina
- SpeedHack (hold Menu/Alt)

Features (Spezial):

- Aimbot:
Press Numpad2 once to activate, then press the "Left Mouse Button" :S to aim at the nearest enemy
Press Numpad2 again to disable it

- Telekill:
Press Numpad2 once to activate, then press the "Right Mouse Button" :S and you will be teleported to an enemy
Press Numpad2 again to disable it

-- TIPP:
- Press Numpad2 once, then hold the left and the right mouse button -> ownage

How To Use:

- Unpack ALL Files
- Run the bypass
- Open The .exe
- Start WarRock
- Join Any Room and have fun

Crediz:

- (ZeaS)
- Gordon
- NeoIII
- Hans211

[7igerr]

nice virus

[y0l0pz]

how to unpack the warrock files??

[K33NZY]

This works ????????

[dudeedud4]

its a virus. its over 100KB thats alot for a cheat so its a virus.

EDIT: looks like a trojan to me heres the virus total. http://www.virustotal.com/analisis/f...e89-1243236186

[moris1]

how to unpack the warrock files??

use winrar

[seeallok]

virus do not downlod this

[ameed2009]

virus or no pls till me

[Jolinar]

KERNEL32.CloseHandle
KERNEL32.CreateThread
KERNEL32.DeleteCriticalSection
KERNEL32.EnterCriticalSection
KERNEL32.ExitProcess
KERNEL32.FlushFileBuffers
KERNEL32.FreeEnvironmentStringsA
KERNEL32.FreeEnvironmentStringsW
KERNEL32.GetACP
KERNEL32.GetCommandLineA
KERNEL32.GetCPInfo
KERNEL32.GetCurrentProcess
KERNEL32.GetCurrentProcessId
KERNEL32.GetCurrentThreadId
KERNEL32.GetEnvironmentStrings
KERNEL32.GetEnvironmentStringsW
KERNEL32.GetFileType
KERNEL32.GetLastError
KERNEL32.GetLocaleInfoA
KERNEL32.GetModuleFileNameA
KERNEL32.GetModuleHandleA
KERNEL32.GetOEMCP
KERNEL32.GetProcAddress
KERNEL32.GetStartupInfoA
KERNEL32.GetStdHandle
KERNEL32.GetStringTypeA
KERNEL32.GetStringTypeW
KERNEL32.GetSystemInfo
KERNEL32.GetSystemTimeAsFileTime
KERNEL32.GetTickCount
KERNEL32.GetVersionExA
KERNEL32.HeapAlloc
KERNEL32.HeapCreate
KERNEL32.HeapDestroy
KERNEL32.HeapFree
KERNEL32.HeapReAlloc
KERNEL32.HeapSize
KERNEL32.InitializeCriticalSection
KERNEL32.InterlockedExchange
KERNEL32.IsBadReadPtr
KERNEL32.LCMapStringA
KERNEL32.LCMapStringW
KERNEL32.LeaveCriticalSection
KERNEL32.LoadLibraryA
KERNEL32.MultiByteToWideChar
KERNEL32.QueryPerformanceCounter
KERNEL32.RtlUnwind
KERNEL32.SetFilePointer
KERNEL32.SetHandleCount
KERNEL32.SetLastError
KERNEL32.SetStdHandle
KERNEL32.Sleep
KERNEL32.TerminateProcess
KERNEL32.TlsAlloc
KERNEL32.UnhandledExceptionFilter
KERNEL32.VirtualAlloc
KERNEL32.VirtualFree
KERNEL32.VirtualProtect
KERNEL32.VirtualQuery
KERNEL32.WideCharToMultiByte
KERNEL32.WriteFile
SHELL32.ShellExecuteA
USER32.GetAsyncKeyState
USER32.MessageBoxA
WININET.InternetCloseHandle
WININET.InternetOpenA
WININET.InternetOpenUrlA
WININET.InternetReadFile

:/
Well, ZeaS did a good job, anyways, I would recommend you not to download this.

I am yet looking for an obvious proof that it is malware, but the above imports are critical.

[Serverman]

The bypass:
Anubis - Analysis Report
Seems totally clean.
The hack:

- Ikarus Virus Scanner

Trojan-Dropper (Sig-Id:27075255)

Other than that, Anubis could not find any bad code...
(report: Anubis - Analysis Report )
Seems like this is either higly undetected (even by anubis), or its clean...