(Link to AcmlmWiki) Offline: thank ||bass
Register | Login
Views: 13,040,846
Main | Memberlist | Active users | Calendar | Chat | Online users
Ranks | FAQ | ACS | Stats | Color Chart | Search | Photo album
05-11-24 11:42 AM
0 users currently in ROM Hacking.
Acmlm's Board - I3 Archive - ROM Hacking - Solution to YY-CHR/AVG problem found?
  
User name:
Password:
Reply:
 
Options: - -
Quik-Attach:
Preview for more options

Max size 1.00 MB, types: png, gif, jpg, txt, zip, rar, tar, gz, 7z, ace, mp3, ogg, mid, ips, bz2, lzh, psd

UserPost
Simon Belmont
Posts: 51/1773
Gee. Maybe you guys oughta make an .IPS patch for the newbie :'(
BMF54123
Posts: 301/876
Gotta agree with NetSplit, here. There's also the fact that program authors generally don't like modified versions of their programs to be distributed without their permission. Of course, someone could make an IPS patch, but then you'd never learn how to use a hex editor.

What I'm wondering is, why does that series of bytes trigger virus scanners, and why did YY use 0xCC for padding instead of 0xFF or 0x00?
NetSplit
Posts: 112/144
Why the hell are you even ROM hacking if you dont want to mess with hex editors? Don't want to make that incredibly simple change? Live with the problem, then. ROM hacking is all about using a hex editor.
The V
Posts: 69/100
Originally posted by sp
Hi,

open yy-chr.exe in a hex editor of your choice. Go to offset 0xCC1F and change the value - which should be 0xCC - to 0x00. AVG should not find a virus anymore after that. This change is completely safe because the byte is only used for proper alignment. It doesn't hold actual functionality.


For those of us who don't wanna mess with hex editors, why not just post a version of yy-chr in which the change has already been made. Maybe you could call it yy-chr: AVG compatible. You don't necessarily have to do that, but it's a suggestion.
HyperHacker
Posts: 1418/5072
Originally posted by asdf-kitten
Or better yet, don't use AVG at all. Use a better virus scanner that isn't a seemingly paranoid program. I personally use McAfee as my virus detector.

Oh dear God. McAfee is like the Chief Wiggum of antivirus. It's like "zOMG virus go kill it" and doesn't actually do anything. My old computer came with a free trial, which somehow installed itself.

And hey, the doom clock is at exactly 6000.
sp
Posts: 9/11
Hi,

open yy-chr.exe in a hex editor of your choice. Go to offset 0xCC1F and change the value - which should be 0xCC - to 0x00. AVG should not find a virus anymore after that. This change is completely safe because the byte is only used for proper alignment. It doesn't hold actual functionality.
Parasyte +
Posts: 20/53
Oh yes, McAffee is way better because it's completely bloated and rivals Norton for worst anti-virus software ever.
asdf
Posts: 1367/4077
Or better yet, don't use AVG at all. Use a better virus scanner that isn't a seemingly paranoid program. I personally use McAfee as my virus detector.
HyperHacker
Posts: 1401/5072
Games run fine with AVG for me. Maybe if it's scanning while you're playing, but that's easy enough to prevent.
Mega-Dog
Posts: 14/72
AVG can get anoying, I have to shut it down to play games otherwise my computer lags like shit.

Well do my solution. I have YY-Char on a puter without the net so I need no virus control lol!
Dragonsbrethren
Posts: 152/442
Here's the thread.

If you don't want to use the hacked program follow Kitsune Sniper's advice:


Easiest solution:

Uninstall AVG.
Install Antivir.

Fix0r!


I doubt there'll be a problem with the "fixed" version of the program but you never know.
Deleted User
Posts: 51/-7750
Actually, someone just made a hacked version of yy-chr now. You can find its link on the romhacking.net forums. I didnt test it yet tho.
DahrkDaiz
Posts: 117/403
it's what I use, only way I know how.
Deleted User
Posts: 50/-7750
From my searches noone posted a single working solution to this problem. Yeah, I guess it is a sucky way to deal with it, but it's the only solution I had found so far.
Sonicandfails
Posts: 155/917
I wouldnt doubt it! Am I gonna have to do it for you guys? I dont use YY-CHR, but I might as well seeing as you guys dont have common knowledge...
HyperHacker
Posts: 1389/5072
If that hasn't been tried several times already, I'm gonna cry.
Sonicandfails
Posts: 153/917
HAY GUIS! WHEYE NOT EMALE EH VEE GEE! Tell them its a false positive, and to remove it with the next update!
HyperHacker
Posts: 1388/5072
Just disable the resident shield entirely? I'm not sure a lot of people would want that...

I know it's possible for any extension to be treated as an executable. Photoshop executes .tmp files, and Kazaa Lite K++ (back when it didn't suck) executed some .kpp files. If you were to rename it to some un-scanned extension, and make a loader to launch it, it might get around this.
Dragonsbrethren
Posts: 150/442
This is good, hopefully it clears up everyone's problem.
Deleted User
Posts: 49/-7750
I found something that has finally allowed my YY-CHR to work after AVG wrongly deleted it as a virus and stuff. All I had to do was go to the avg control center. Then I just right click the AVG Resident shield and choose properties. Then you just have to uncheck that top box shown and YY-CHR can be used again. If anyone else finds this method successful let me know. Big thanks to Ugetab for helping me solve this problem.
Acmlm's Board - I3 Archive - ROM Hacking - Solution to YY-CHR/AVG problem found?


ABII

Acmlmboard 1.92.999, 9/17/2006
©2000-2006 Acmlm, Emuz, Blades, Xkeeper

Page rendered in 0.077 seconds; used 359.28 kB (max 422.36 kB)