[aldostools]

BTW the current version is 2.0.24

More than 5 updates in 2 days

[Mistawes]

@aldostools : Is there a handy way to keep the .elf file of 3.60 NPDRM self files when using bruteforce.exe?

Changing the .bat to keep the eboot.elf was easy, but I can't see anything regarding other randomly named files (Black Ops : t5mp_ps3f.self + t5_ps3f.self for example). They're converted to .self's right away but I wanted to edit them via hex editor first to try work with DEX (using app_home).

Thanks for the great apps, they work so smoothly!

[Nicolas19]

For Create DEX Fix From Retail Update must Accept This Question?

[aldostools]

Originally Posted by Mistawes @aldostools : Is there a handy way to keep the .elf file of 3.60 NPDRM self files when using bruteforce.exe? Changing the .bat to keep the eboot.elf was easy, but I can't see anything regarding other randomly named files (Black Ops : t5mp_ps3f.self + t5_ps3f.self for example). They're converted to .self's right away but I wanted to edit them via hex editor first to try work with DEX (using app_home). Thanks for the great apps, they work so smoothly!

Download the PS3 Tools Collection, run PKG Content ID with administrative privileges, go to the folder with the SELF and press SHIFT+Enter on the SELF.

That will create the ELF.

Or use: scetool.exe -d yourfile.self yournewfile.elf

If the self is protected with klicense, use:

scetool.exe -l 00000000000000000000000000000000 -d yourfile.self yournewfile.elf

where 00000000000000000000000000000000 is the klicense found by BruteForce

If the self is from a game purchased from PSN, you will need to put also the .RAP file in the raps folder

[hemeny]

@hellsing9
@Pirate
@GregoryRasputin
@aldostools


eset detected "new_huer_pe" in "PKG ContentID 1.6.0.4"

http://go.eset.com/us/threat-center/...ary/newheurpe/

scanned with jotti:http://virusscan.jotti.org/en/scanre...c4848d89bcd5a6

-- here we go had to .rar instead of .zip it otherwise it wouldnt scan properly:virustotal scan.



might be a false positive, i'd take it up with eset if its such a big deal.

edit: scanned the tool package itself with eset, but eset scans the individual files inside the package and thats the one that was detected above.

[aldostools]

Originally Posted by hemeny might be a false positive, i'd take it up with eset if its such a big deal. edit: scanned the tool package itself with eset, but eset scans the individual files inside the package and thats the one that was detected above.

Please report back if the issue is real... I guess it is a false positive due I always apply UPX to all the executables, because UPX reduce the size of the files.

Many real virus also use UPX to obfuscate the anti-virus programs.

Also, it is common that anti-virus report new released programs like virus until they verify/hash the program.

[hellsing9]

Yeah same report on ESET but nothing on wrong with virustotal.
Didn't tried with http://www.novirusthanks.org/

If someone can post more results = Cool.

[hemeny]

Originally Posted by aldostools Please report back if the issue is real... I guess it is a false positive due I always apply UPX to all the executables, because UPX reduce the size of the files. Many real virus also use UPX to obfuscate the anti-virus programs. Also, it is common that anti-virus report new released programs like virus until they verify/hash the program.

havent run it. unjailbroken ps3 so just saving a bunch of ps3 related programs for the future. i did say it was possibly a false positive.

Originally Posted by hellsing9 Yeah same report on ESET but nothing on wrong with virustotal. Didn't tried with http://www.novirusthanks.org/ If someone can post more results = Cool.

virustotal was acting weird when i scanned the original zip file (only scanned with 1 antivirus called totaldefense or something) so i had to unzip and .RAR it for it to scan with all 39 and alot of them were detected.

mcafee saw it as artemis which again is just a designation for possibly unknown. im not accusing you like i said it probably is your obfuscater like you said.