Um, what's this about?

Gonkers · Post by **Gonkers** » Sat Aug 14, 2004 11:52 pm

Application Hijacking has been detected
The application: C:\Documents and Settings\******\My Documents\Macroquest2\Release\MacroQuest2.exe try to launch another application: C:\Program Files\Mozilla Firefox\firefox.exe to go to remote host macroquest2.com

this happened twice, I would like a reason why my firewall caught this.

Sparr · Post by **Sparr** » Sun Aug 15, 2004 12:00 am

are you using '/docrack update'? or that link search plugin? search all your directories for 'macroquest2.com' and you should find what is doing it.

Amadeus · Post by **Amadeus** » Sun Aug 15, 2004 1:54 am

This is why we release OPEN SOURCE ...so you can go through and see that no one is hacking your computer with MQ2. Now, if you run custom plugins and shit....then you're a dumb ass for posting here.

Trust me, MQ2 is a software package created for and created by hackers. If there was anything "shady" about it, one of the couple dozen hackers (that are not MQ2 devs) would have let the world know.

MQ2 out-of-the-box does not do anything like this ...as you should well know by going through the source yourself.

End of discussion.

magictiger · Post by **magictiger** » Sun Aug 15, 2004 3:01 am

As much as I hate to bring this up... we don't have the source for macroquest2.exe
It's a little hard to expect us to go through the source :)
Yes, I know, it's just a way to make the .dlls play, but still.

Nothing but respect for the MQ2 devs, and I'm NOT asking for you guys to open the source for the .exe
Just saying that we can't really go through the source for the .exe itself.

cronic · Post by **cronic** » Sun Aug 15, 2004 3:15 am

Tuh, you just double clicked on the MQ icon in the tray by accident. Don't deny it.

Amadeus · Post by **Amadeus** » Sun Aug 15, 2004 3:21 am

As much as I hate to bring this up... we don't have the source for macroquest2.exe
It's a little hard to expect us to go through the source :)
Yes, I know, it's just a way to make the .dlls play, but still.

This executable is easily disassembled using a variety of tools that are available out there. Again, trust me, if there were something in the injector that was bad...someone would have posted with proof by now. Moreover, the original injector source IS available on sourceforge cvs, so disassembling the current one would be cake.

I'll end the discussion with this: if you don't know what the fuck you're talking about, don't come here. (referring to the original poster) ....this 'boy who cried wolf' junk irritates me and causes me to have to spend precious time here responding to bullshit.