Proof of a music “Hook” by Wargaming so check the CEF folder

Published by BobC on

BLACKWOT Forums Sales, Feedback and Information Peer to Peer Technical Support Proof of a music “Hook” by Wargaming so check the CEF folder

Viewing 15 posts - 1 through 15 (of 47 total)
  • Author
    Posts
  • #114588
    BobC
    Member

    Guys, I have always whined and argued that someone was hacking into the music I was listening to as I played World Of Tanks and sadly as the ONLY pack I used was associated with this forum ( opposed to the other one before here but the guys know what I mean) I blamed you. (Sorry Soulza)

    How wrong was I, even when you defended your innocence I still thought it was you.

    So without further ado I am to prove that the culprit was never Bwot but Wargaming itself:

    My scenario was that I believed someone was “hooking” into what ever I was listening to and the game then adjusted accordingly. Often as I would withdraw from a target the sounds become lower in volume and an attack would increase in volume. Alternatively you would be playing the islands map and Dolly partons song, “Islands in the stream” would start playing and if you moved to the islands then it was a game changer. etc etc on a variety of maps the same occurence dependant on the music.

    Now before I reveal the proof then just bear with me another moment or 2: A few nights ago I had just started listening to music from an external source and logged into World Of Tanks when the first question went, “Who is listening to music?”, what music, I dont know that group etc. So I reboooted and tried again, exact same.. and again exact same.

    The Proof:

    My Antivirus stopped World Of tanks and proclaimed it had stopped a phishing attack on me. It showed the exact location the attack had come from and would you believe it! it was a World Of tanks file that no one ever seems to use nor mention. A read of this file which I believe you all have reveals items like your terms and conditions etc… But wait until you read them closely as you have gave WOT express permission to listen and record everything that do. That includes listening to your music files and pretty much gives full access to every part of your PC.

    Has Bob, yes Me, taken a sherbert too much and sees conspiracy theories yet again or do you also see something that I have missed? Well get your eyes into this because it auto installs even after deletion and rebooting.  No matter what you do that file is always there. Best thing to do is delete it after getting to the home page and before starting an actual battle to be able to play your sounds in peace with no interference from War Gaming. Check the Internet and see that this is a reported issue from many years back and is known to many a group:

     

     

    Threat 2.PNG

    Threat 1.PNG

    Threat.PNG

    #114589
    A_Troll
    Member

    Nice try Bob.

    Only thing you missed was that the process adress was incorrect in the report.

    If on the slim chance you were sober and serious…….. I think you need to read how sound files and embedded browsers work.

     

    #114590
    Skittles_
    Participant

    it handles the browser pop up in your garage for messages from WG about special offers etc

    #114591
    A_Troll
    Member
    1 hour ago, Skittles_ said:

    it handles the browser pop up in your garage for messages from WG about special offers etc

    He’s just trolling.

    He typod in the report.

    6 hours ago, BobC said:

    Threat.PNG

    Shouldn’t that be……

    C:gamesWorld_of_Tanksrescefcef_browser_process.exe

    ???

    Hard to think a generated report from AVG would do a typo.

    #114592
    Hunter1
    Member

    I just had bitdefender block the same one , if I can find the report i’ll post

    #114593
    A_Troll
    Member
    17 hours ago, Wildest1 said:

    I just had bitdefender block the same one , if I can find the report i’ll post

    Dude. Bob is trolling. He typed the address and forgot the full path.

    #114594
    BobC
    Member

    I am NOT trolling!!!

    That screenshot is a genuine report. It has NOT been changed in any format. It is an exact copy of what AVG found.

    Open up the respective file and start reading through it. The file is long and boring but I am sure that some of you guys with coding capabilities will see more than I was able to.

    To date I have never yet came on here trolling. Asking for answers from guys that I know could assist is hardly trolling.

    Now @ A_Troll on this occasion try reading within the file (the whole file) and then make comment based on what you read. I will gladly discuss in the off chance that something truly is amiss.

     

    #114595
    Hunter1
    Member

    I had bitdefender firewall block the same file and it has never happened before , as soon as I launched the updated game it caught it.

    2 hours ago, A_Troll said:

    Dude. Bob is trolling. He typed the address and forgot the full path.

     

    #114596
    BobC
    Member

    @A_Troll ahh I see why you are confused about the path.

    Just keep in mind that not all paths must 100% follow what your PC does to its directory.

    That path is genuinely the way it is displayed on this PC.Capture.PNG

    #114597
    BobC
    Member

    A search reveals that there are many instances of this issue across all WG games, ie tanks, ships and planes:

    http://forum.worldoftanks.com/index.php?/topic/571221-malwarebytes-detecting-a-protection-event/

    and

    https://forum.worldofwarships.com/topic/137132-installer-unable-to-move-cef_browser_processexe-file-to-cef-folder/

    and

    https://www.google.com/search?q=cef_browser_process&ie=utf-8&oe=utf-8&client=firefox-b-ab

    *Cough* is that a rare apology from A_Troll I hear? Man up.

    Not everyone is out to Troll.

    ps: Try opening cef_extensions.pak 108,493 lines of code? All that just to show a WG advert page?. It’s possible as you guys will say but I think it unlikely.

    line 36256 is code that looks readable by most people but wether we get the true meaning is unclear. Any thoughts?

    Therefore is there a virus doing it rounds or is WarGaming not telling us whats in some files. perhaps it’s a virus that is using the Wargaming files to try and spread? I honestly do not know but I thought that it’s best to let you know that something unusual is out there. Don’t you agree?

     

    #114598
    Hunter1
    Member

    I don’t know enough about this stuff to comment , I just know bitdefender spat one out and blocked it.

    Thx

    #114599
    BobC
    Member

    Wildest1, I thank you for your support and do not doubt for a second that you too have seen a similar message.

    Skittles, I appreciate your thoughts though I do not believe that therein lies the cause but a solution will be appreciated.

    Sadly there is a player “A_*****” (their name gives it away) believes that all I do is troll and yet when I raise a  serious topic they still persist in being totally unhelpful. perhaps it is because that person cannot offer any serious thoughts. I really do not know.

    If more people like yourself (Why should there be anymore?) are having the same issue is it not therefore shocking that people whom we hope have the knowledge and intellect on coding etc won’t help? Instead they go into total meltdown and think this is an attack on them?

    For once in your little life “A_*****”, if you cannot answer objectionably then hush Son, hush.

    #114600
    A_Troll
    Member
    1 hour ago, BobC said:

    A search reveals that there are many instances of this issue across all WG games, ie tanks, ships and planes:

    http://forum.worldoftanks.com/index.php?/topic/571221-malwarebytes-detecting-a-protection-event/

    and

    https://forum.worldofwarships.com/topic/137132-installer-unable-to-move-cef_browser_processexe-file-to-cef-folder/

    and

    https://www.google.com/search?q=cef_browser_process&ie=utf-8&oe=utf-8&client=firefox-b-ab

    *Cough* is that a rare apology from A_Troll I hear? Man up.

    Not everyone is out to Troll.

    ps: Try opening cef_extensions.pak 108,493 lines of code? All that just to show a WG advert page?. It’s possible as you guys will say but I think it unlikely.

    line 36256 is code that looks readable by most people but wether we get the true meaning is unclear. Any thoughts?

    Therefore is there a virus doing it rounds or is WarGaming not telling us whats in some files. perhaps it’s a virus that is using the Wargaming files to try and spread? I honestly do not know but I thought that it’s best to let you know that something unusual is out there. Don’t you agree?

     

    Ho hum.

    http://forum.worldoftanks.com/index.php?/topic/571221-malwarebytes-detecting-a-protection-event/

    critical to all users of modpack #07-#09 who are installing one of following Polyacov_Yury mods: radial menu, ut announcer, tank lights, colored chat kill msgs, camo selector. Unfortunately the author of that mods has added recently an uwanted connection to his website that is loading ads and creating suspicious and unwanted traffic in background using the game process

    That is nothing to do with BW and it is old news.

    https://forum.worldofwarships.com/topic/137132-installer-unable-to-move-cef_browser_processexe-file-to-cef-folder/

    6/09/2017 16:36:30          move safe: rename: from=”C:GamesWorld_of_WarshipsUpdatesDataclientwows.na_0.6.10.0.278489_client.wgpkgcefcef_browser_process.exe” to=”C:GamesWorld_of_Warshipscefcef_browser_process.exe”, what=”move file”, msg=””C:GamesWorld_of_WarshipsUpdatesDataclientwows.na_0.6.10.0.278489_client.wgpkgcefcef_browser_process.exe” to “C:GamesWorld_of_Warshipscefcef_browser_process.exe”

    system error: (0x5)”Access is denied.”” … retrying in 1 sec (retry 1 of 5)

    This is an obvious false positive from data scanned in a zipped file that was blocked by AVG. (Get a propper AV program you cheap bastard…. lol).

    https://www.google.com/search?q=cef_browser_process&ie=utf-8&oe=utf-8&client=firefox-b-ab

    That is a google search for instances where that process is found. They are a combination of the above two which can both be dimissed by age and false positives.

    Ooooo… Bob wants to get personal. Flame on. (I think you are very brave).

    7 minutes ago, BobC said:

    Sadly there is a player “A_*****” (their name gives it away) believes that all I do is troll and yet when I raise a  serious topic they still persist in being totally unhelpful. perhaps it is because that person cannot offer any serious thoughts. I really do not know.

    I was helpfull. (Just not to you perhaps). Jeez. You just objected to the answer, (because I didn’t agree).

    The screenshot you posted is edited.

    You have a history of rambling on without making sence.

    Need I say more?

    Listen Bob. I answer to you the way I would answer anyone else so please don’t think you are special……… even though your mommy might say that to you a lot.

    17 minutes ago, BobC said:

    If more people like yourself (Why should there be anymore?) are having the same issue is it not therefore shocking that people whom we hope have the knowledge and intellect on coding etc won’t help? Instead they go into total meltdown and think this is an attack on them?

    Who would that be? I didn’t see anyone melting down, or waving their arms around except Bob.

    Why would anyone with coding knowledge help someone posting a doctored screenshot by someone who also claims to wear a tin-foil hat?

    22 minutes ago, BobC said:

    For once in your little life “A_*****”, if you cannot answer objectionably then hush Son, hush.

    Hahahahahahaha make me oh mighty internet warrior. (Is that objectional enough?).

    #114601
    BobC
    Member

    @A_troll: Son, you can argue all you want but the there was nothing edited. Prove it otherwise. I have shown an un-edited screenshot of both the original message and that of a path that my PC follows.

    By all means troll me to your heart is content but the fact still remains that the screenshots are original and all I seek is an answer.

    Your childish side is showing when there is a question of which you cannot answer in an adult manner. Perhaps you should leave the original issue to the adult or those with the knowledge to offer a reasonable explanation?

    Does anyone have any other ideas on what has happened in the original post?

    I noticed above that you- A_***** suggested that Black Wot was the culprit.

    Their comment “IE: That is nothing to do with BW and it is old news.”  What part do you NOT understand that BlackWot has not once in this topic ever been suggested as being the instigator? IMHO BlackWot has nothing to do with my original post but I really thought they would have offered me some understanding and insight into what the original post  was concerning.

    Instead I get your ramblings.

     

     

    #114602
    A_Troll
    Member

    Learn to read Bob.

    I find the point implying I am a child very funny. That would imply that you think you are the grown up here. Thinking about that….. that’s even funnier.

    Now……. posting in the BW forums would imply that in some way they should be included in this wild conspiricy theory. I merely pointed out they should not. If you need to twist that in any way to make yourself feel better……….. Go for it…………….. Hope you feel better now.

    If you only wanted answers…. you got them. Move on.

    The screeny is edited. An output from an AV program would not forget a folder in a path. Someone copying text from an explorer window might.

    It’s obvious you want a fight Bob. I asked you previously in a nice way to keep personal differences in PMs. If you want to fight in public to prove some strange thing….. be my guest. I don’t know you…. I don’t care who you are……. I don’t care how stupid you want to look in public.

    If you want answers to questions in a public forum then BEHAVE YOURSELF like an adult or loose the right to ask.

    I am a guest here the same as you. You want to have a pointless fight? Do it in PM or the Admins will probably ban us both.

     

Viewing 15 posts - 1 through 15 (of 47 total)
  • You must be logged in to reply to this topic.