Log inRegister an accountBrowse CSDbHelp & documentationFacts & StatisticsThe forumsAvailable RSS-feeds on CSDbSupport CSDb Commodore 64 Scene Database
 Welcome to our latest new user Harvey ! (Registered 2024-11-25) You are not logged in - nap
CSDb User Forums


Forums > C64 Coding > Malicious Packer?
2023-08-17 01:35
ws

Registered: Apr 2012
Posts: 251
Malicious Packer?

I was interested in this entry Galaxy Cargo + Poker because i wanted to see if the badness of the raster routine had anything to do with PAL/NTSC timing. It turned out, that it is just very badly coded.

What puzzled me was, that the depacker was partially obfuscated by an EOR routine. I reverted that and started the program again, but for fun i also altered the chars in the SYS line to WS/G*P. Prog started and all of a sudden, my attached disk was empty, named "PREPARE TO DIE!". (I probably could have used Ians Unp64 V2.36, which gives a depacked largefile, but what i wanted was to have just an de-ofuscated original binary.) My mistake was to not examine the code any further.

This packer actually has a routine checking if the sysline was altered, and if so, the routine will format your currently inserted Disk or VOLUME to "PREPARE TO DIE!". Imagine if one had mounted a flashdrive or even an entire harddisk. Quite dangerous.

Does anybody know something about this >PWR< Packer(?) thing?

Are there any other examples of malicious C64 code like this, like screwing up your disk if things have been altered?
 
... 22 posts hidden. Click here to view all posts....
 
2024-01-19 13:05
hedning

Registered: Mar 2009
Posts: 4721
I don't know if this one was discussed before. The Bonanza Crew spread a lot of disks with some kind of protection against tampering with the disks. I had to reach out to Mason to add cleaned up versions of their releases four years ago, like Super Real Darwin + [seuck].

If you tamper with the disk in any way the disk will get erased. Here's the Darwin spread disk in it's evil original form: https://www.dropbox.com/scl/fi/swwzr8yaln7pxbn44ajiy/Bonanza.zi..
2024-01-19 15:31
chatGPZ

Registered: Dec 2001
Posts: 11354
A bunch of those people who sold cracks also put timebombs into their stuff...like you can run it 100 times, then it deletes itself
2024-01-19 15:37
Krill

Registered: Apr 2002
Posts: 2969
Quoting chatGPZ
A bunch of those people who sold cracks also put timebombs into their stuff...like you can run it 100 times, then it deletes itself
And today, it's the game producers themselves doing this. =)
2024-01-19 15:39
chatGPZ

Registered: Dec 2001
Posts: 11354
Not really. That'd be a disaster if anyone noticed it.
2024-01-19 19:12
Krill

Registered: Apr 2002
Posts: 2969
Quoting chatGPZ
Not really. That'd be a disaster if anyone noticed it.
I meant that they're selling games as a service with subscription fees. =)
2024-01-19 22:03
AlexC

Registered: Jan 2008
Posts: 298
Actually Sony has installed a rootkit on CD in the past and many if not all anti-cheating / DRM systems could be quite malicious from end-user perspective not to mention disliking being run under debugger which can be equivalent of running with AR enabled back in the 80's.
2024-01-19 23:13
chatGPZ

Registered: Dec 2001
Posts: 11354
Quote:
I meant that they're selling games as a service with subscription fees. =)

I know - but i am not falling for the bite. "Buying" a game never meant you have the right to play it until eternity under all circumstances.
2024-01-19 23:57
Fungus

Registered: Sep 2002
Posts: 680
When you buy something sold with a perpetual license, it is yours to play until the end of the universe. EULA are not legal contracts and I hope to hell someone challenges this in court because it's bullshit.

Also just avoid ubisoft and any other such company like Sony then. It's anti-consumer and shouldn't be legal.
2024-01-20 00:27
chatGPZ

Registered: Dec 2001
Posts: 11354
So you took the bite instead :) (And i can play my Sony and Ubisoft games as long as i want, really. Hooray for them!)
2024-01-20 01:00
Fungus

Registered: Sep 2002
Posts: 680
Until your internet goes down ;) Or they take your ability to play it away, like The Crew.
Previous - 1 | 2 | 3 | 4 - Next
RefreshSubscribe to this thread:

You need to be logged in to post in the forum.

Search the forum:
Search   for   in  
All times are CET.
Search CSDb
Advanced
Users Online
Barfly/Extend
Youth
Andy/AEG
Acidchild/Padua
Radiant
bodo^rab
TCE/Hokuto Force
Guests online: 100
Top Demos
1 Next Level  (9.7)
2 13:37  (9.7)
3 Coma Light 13  (9.7)
4 Edge of Disgrace  (9.6)
5 Mojo  (9.6)
6 The Demo Coder  (9.6)
7 Uncensored  (9.6)
8 Wonderland XIV  (9.6)
9 Comaland 100%  (9.6)
10 What Is The Matrix 2  (9.6)
Top onefile Demos
1 Layers  (9.6)
2 Party Elk 2  (9.6)
3 Cubic Dream  (9.6)
4 Copper Booze  (9.6)
5 Libertongo  (9.5)
6 Rainbow Connection  (9.5)
7 Onscreen 5k  (9.5)
8 Morph  (9.5)
9 Dawnfall V1.1  (9.5)
10 It's More Fun to Com..  (9.5)
Top Groups
1 Performers  (9.3)
2 Booze Design  (9.3)
3 Oxyron  (9.3)
4 Nostalgia  (9.3)
5 Censor Design  (9.3)
Top Fullscreen Graphicians
1 Joe  (9.7)
2 Veto  (9.6)
3 Facet  (9.6)
4 The Sarge  (9.6)
5 Carrion  (9.5)

Home - Disclaimer
Copyright © No Name 2001-2024
Page generated in: 0.076 sec.