PDA

View Full Version : Wargod - false detection keeps appearing



Medulyn
27-03-2024, 03:28 PM
Hello,

I was playing the other day on a server when admin asked me to run Wargod so I did and bam! Suddenly I got some cheat detection, although I have no idea where this is coming from.

I just run the scan again and this detection is still there. Where is this coming from?

RAPORT: <b>You have to register to ba able to see this link</b>
Antivirus: Avast
Additional information: I have not installed anything new in weeks (at least I am not aware of)
GAME MEMORY DUMP LINK: The software was blocked by Windows Defender which I can unblock I guess, but you mention in the tutorial that it can contain some sensitive informations? Could you please elaborate?

BR

Tiger
27-03-2024, 09:23 PM
Search for "CRYPT32.DLL.MUI" (md5: 2EF3C30280E998B3FD01C84144DF38E8) and upload it here.

Medulyn
01-04-2024, 07:20 PM
Hello,

here it is: <b>You have to register to ba able to see this link</b>

Tiger
03-04-2024, 10:04 PM
The file you uploaded has a different file hash then what I asked. Make sure it's from C:\Windows\SysWOW64.

Medulyn
07-04-2024, 11:23 AM
OK, I found the file in the folder you mentioned but this one does not have the "MUI" extension
<b>You have to register to ba able to see this link</b>

Medulyn
07-04-2024, 11:25 AM
I found the file in the folder you mentioned but this one does not have the "MUI" extension. There was no other file with this name though.
<b>You have to register to ba able to see this link</b>

Tiger
07-04-2024, 10:53 PM
You uploaded "CRYPT32.DLL" and not "CRYPT32.DLL.MUI"

Medulyn
13-04-2024, 02:51 PM
I just told you that the file with the "MUI" extension is not in the folder you mentioned. There was only one version of "CRYPT32.DLL.MUI" which I sent initially on 01-04-2024
.
Well, here it is again. It does have the "MUI" extension and it is the only "CRYPT32.DLL.MUI" I could find on my drives: <b>You have to register to ba able to see this link</b> I hope it finally works.

Tiger
14-04-2024, 11:51 AM
Has a different file hash: be5df1c8b33f8ccf1b5939065f1158d8 . Without the actual file I can't help you.