PDA

View Full Version : NOT A FALSE POSITIVE KNR Cheat ?



xitee
11-02-2023, 01:58 AM
Hello, I did a scan today after a long time and it showed me that the Demoplayer.dll is a cheat? Why should the demolayer be a cheat? I tried an old demoplayer from the ESL to check demos from other players.
Why is this recognised as a cheat?
<b>You have to register to ba able to see this link</b>

--------------- Added after 4 minutes ---------------

btw that demoplayer dont work for me

Tiger
11-02-2023, 09:17 AM
Please upload me your DemoPlayer.dll and Kazakh.bat

xitee
11-02-2023, 02:07 PM
Kazakh.bat <b>You have to register to ba able to see this link</b>
demoplayer.dll <b>You have to register to ba able to see this link</b>

Tiger
11-02-2023, 04:39 PM
Demoplayer.dll doesn't work for you to load it, as usual, because it's an invalid DLL. It has multiple objects embedded in the file, all of them are invalid by default if you try to extract them. With some tweaks maybe you will be able to execute this file after you manually load it in the memory or maybe there's a special loader for this kind of files to prevent them from being detected in memory. It contains Leis.

The batch file is clean.

PS: When you read/heard that a file it's from someone known, avoid it... usually it's invalid or it's a cheat...

xitee
11-02-2023, 05:07 PM
ok thanks, i did delete this fancy demoplayer.dll file and reinstalled counter strike after that i got a clean Scan. So do you delete my unknown detection ?

Tiger
12-02-2023, 12:01 AM
Nope, it's not a false-positive.