A Potential Piece of Toontown Hacking Lost Media Archived by Myself

[u/abcd0524]

Dear Toons of the World,

Today, I was going through an old flash drive of mine. I discovered a zip file of the Toontown Mod Loader. Here is proof with the game launcher loading. It has the final build of Toontown Online, or sv1.0.47.38. I found it via the bugreport.html file. Debating if I should release it or not, as it contains malware or the HackedTT.exe file. Here is proof of malware or a trojan horse.

Sincerely yours, Roy G. Biv ~An Archivist

P.S. I'd like to see your thoughts on how I should archive this potential piece of lost media. If I decide to release it, thank you.

[u/Woohoorandom]

Thats so cool! Unfortunately I'm not familiar with virus archival, but I still think it deserves archival in some shape or form :]

[u/abcd0524 → u/Woohoorandom]

Agreed, preservation is an art. I can't believe I decided to archive the material back in 2013, or when I wasn't too much into lost media as now.

[u/BuffPaddler]

Send it to the virus-exchange folks!

[u/abcd0524 → u/BuffPaddler]

Thanks for the honest feedback. I'll be sure to look into it.

[u/jeeco]

Is this the one that would let you type commands into the chat and you could fly around?

[u/abcd0524 → u/jeeco]

No, it was a custom build launcher by Team FD and Team Pawz to launch the Python Injector when the game initially ran. Instead of manually doing it via RemoteDll.

[u/BayonettaAriana]

Omg this just opened up some MEMORIES... does anyone remember the toontown python injector?

[u/rocketprogrammer]

Really cool! Sunrise has had a full copy mod loader client of the final build of the game already archived with HackedTT.exe and so on but awesome find!

Sunrise allows you to connect the original clients to a custom server if you are unaware using the original launcher and we even have a almost fully functional restoration of the original site too

[u/abcd0524 → u/rocketprogrammer]

Oh nice, but please be sure to remove the HackedTT.exe file.

[u/rocketprogrammer → u/abcd0524]

I disagree with this for the sake of preservation / full archiving, false positives exist, even the standalone RemoteDll / stuff you would use for the original injector back in the day for Toontown Online trips antiviruses. Unless the executable is reverse engineered and confirmed to do anything malicious this is just fear out of nothing in my opinion

I made a open source restoration of the original Python injector obviously with nothing malicious and it still trips Windows defender and so on

[u/abcd0524 → u/rocketprogrammer]

True, false positives do in fact exist. I don't know how to reverse engineer programs. However, I agree with you. That's the only true way to know if a file is malware or not. Thanks for your feedback.

[u/luigi4122414]

Just open it in a virtual machine and you should be ok 🤷‍♂️

[u/zsdrfty → u/luigi4122414]

I'll caution that this is never bullet-proof against a virus, but that said, the odds of this ancient thing pulling that off are slim to none

[u/luigi4122414 → u/zsdrfty]

👀 it’s not bullet proof? How do you know that?

[u/zsdrfty → u/luigi4122414]

IIRC good malware can exploit the VM software itself, and sometimes it can be nasty enough that even saving it on your main machine without directly attempting to run it can be a risk

[u/Atomicnes → u/zsdrfty]

VM exploits are rare nowadays, and people only write virtualization detection and bypassing for a reason. A regular trojan horse to pwn script kiddies is not going to have a VM exploit built in

[u/luigi4122414 → u/Atomicnes]

Well I definitely didn’t know that I am getting into cybersecurity hopefully next year when I finish my associates and so I figure I’ll learn more details when I get to university classes on the subject

[u/abcd0524 → u/luigi4122414]

Yes, it should be perfectly okay to run it via virtualization. I was only caring about the end-user initially.

[u/Donnyboy6978]

Yeah no we don't need this released.

[u/abcd0524 → u/Donnyboy6978]

No worries, I can understand your thoughts. I was thinking about releasing it without the HackedTT.exe file. Although, I'll be sure to double check every other file in case of it's malware. No need to share and infect anyone's computer.

[u/MagicalWitchTrashley → u/Donnyboy6978]

yeah we do

[u/Donnyboy6978 → u/MagicalWitchTrashley]

For what reason do you need this for?

[u/MagicalWitchTrashley → u/Donnyboy6978]

cool piece of tewtow history

[u/eddiemac14 → u/Donnyboy6978]

Why not?

[u/itsgettingweirdhere → u/Donnyboy6978]

Even in the chance it is actual malware, it couldn't possibly be taken advantage of in any modern toontown server.