View previous topic :: View next topic |
Author |
Message |
justa_dude Grandmaster Cheater Reputation: 23
Joined: 29 Jun 2010 Posts: 891
|
Posted: Mon May 22, 2017 12:17 am Post subject: Why is CE trying to connect to the Internet? |
|
|
Hi everyone,
I just downloaded and launched the newest CE. I used the download link for the RAR that claimed it didn't include the adware stuff. Every time it launches, it tries to connect to 104.16.25.216. Why?
Thanks,
JD
_________________
A nagy kapu mellett, mindig van egy kis kapu.
----------------------
Come on... |
|
Back to top |
|
|
++METHOS I post too much Reputation: 92
Joined: 29 Oct 2010 Posts: 4197
|
Posted: Mon May 22, 2017 12:53 am Post subject: |
|
|
Hey, justa_dude. Haven't seen you in a while.
Are you running any monitoring software or anything to see that this is happening? I just installed the no-install version from the site and did not notice anything, but I am not monitoring any network activity.
|
|
Back to top |
|
|
atom0s Moderator Reputation: 198
Joined: 25 Jan 2006 Posts: 8516 Location: 127.0.0.1
|
Posted: Mon May 22, 2017 12:55 am Post subject: |
|
|
Are you using a specific rar/download? I used the one on the main site and I can't reproduce this. The IP you listed is for a Cloudflare name server, so you'd have to do a bit more digging to see what was being connected to. But the main site download doesn't seem to do this for me.
_________________
- Retired. |
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 457
Joined: 09 May 2003 Posts: 25262 Location: The netherlands
|
Posted: Mon May 22, 2017 1:09 am Post subject: |
|
|
use the link from the site, not the one people hotlink to as that is the one with advertisement (i regulary change the url and change the old link to the one with ads to prevent hotlinking)
if that's not it ,and you do have a rar with many files in it (so more than 3) then it might be your os itself. i noticed that windows 10 tends to send information about executables you run to their servers
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
justa_dude Grandmaster Cheater Reputation: 23
Joined: 29 Jun 2010 Posts: 891
|
Posted: Mon May 22, 2017 1:58 am Post subject: |
|
|
Thanks for the fast replies, everyone. It was the executable extracted from the rar archive from the main site under the downloads tab (http://cheatengine.org/download/CheatEngine66_NOsetup.rar) and the behavior is unique to this program. There's something in it or one of the included libraries that is trying to connect to a web-server at that address, at a minimum. I'm certain it isn't a normal Windows thing on my end, because I'm obviously concerned about spyware/adware and would've noticed the behavior in other applications.
Every time I launch Cheat Engine, it attempts to connect to either 198.41.214.186 or 104.16.24.216. I deleted the rar file immediately after installing. Otherwise, I'd love to compare checksums. But I'm absolutely certain that something in the package I downloaded is trying to phone home.
Regards,
JD
_________________
A nagy kapu mellett, mindig van egy kis kapu.
----------------------
Come on... |
|
Back to top |
|
|
Dark Byte Site Admin Reputation: 457
Joined: 09 May 2003 Posts: 25262 Location: The netherlands
|
Posted: Mon May 22, 2017 5:16 am Post subject: |
|
|
Check the DNS it tries to resolve.
But I think it's your security that is actually making you paranoid.
My bet is that your system is set to verify signatures from files downloaded from non-trusted locations on the internet, and to verify that signatures have not been revoked.
When you verify the signature of CE, it will probably try download something from crt.globalsign.com ( http://crl.globalsign.com/gs/gstimestampingsha2g2.crl ) to verify that the CE signature hasn't been revoked
and this has the following ip addresses assigned:
Addresses: 2400:cb00:2048:1::c629:d6b9
2400:cb00:2048:1::c629:d7b7
2400:cb00:2048:1::c629:d7ba
2400:cb00:2048:1::c629:d7b6
2400:cb00:2048:1::c629:d7b8
2400:cb00:2048:1::c629:d6bb
2400:cb00:2048:1::c629:d6b8
2400:cb00:2048:1::c629:d6b7
2400:cb00:2048:1::c629:d6ba
2400:cb00:2048:1::c629:d7b9
198.41.214.184
198.41.215.183
198.41.215.184
198.41.215.186
198.41.215.185
198.41.214.183
198.41.214.187
198.41.215.182
198.41.214.186
198.41.214.185
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
Back to top |
|
|
STN I post too much Reputation: 42
Joined: 09 Nov 2005 Posts: 2672
|
Posted: Fri Jun 02, 2017 3:16 pm Post subject: |
|
|
WHich program are you using to monitor this?
_________________
|
|
Back to top |
|
|
|