Sniper296

​Clearly made with a trainer and Photoshop.

​Should be easy to fix the first person issues. LSPDFR or another script would remember the hat and glasses selected for the current model, then if you go into first person it would remove them, when you exit first person it would re-add them. The only problem is detecting if in first person. I did not see any native that sounded relevant to that.

​But you have up-to-date drivers, patched V & correct C++ & .net runtimes. Such optimal, instructions followed, conditions can't be expected on the internet. BTW: Yet more screenshots made with a trainer and photoshop.

​Gimp DDS plugin. https://code.google.com/p/gimp-dds/

Or, you know, you could wait for GIMS or OFIO, the two that were made for OpenIV's OpenFormats. They may have been slower getting Fragment models implemented for IV, but they did it with less crashieness and more in-line with an un-documented standard. The ones that don't force you to pay or pirate a tool to mod a game. Public outcry when the mods have a price tag, but when the tools to make them have a price tag, you all just bend over.

The effort put into a mod would make no real difference. Many of the mods for V are open source. Someone with malicious intent can just shove their code into an existing mod, release it on a site that has not already got it, and infect enough people to achieve their goal. The idea of open source does not solve the problem either. They have released the code, people who can read that language can verify it, but most people are not capable of compiling it themselves, so a pre-built binary has to be provided. Nothing is to stop an author making a binary with malware but keeping the source clean. And without reproducible builds the hashes of the builds on different computers and compilers will be different, so comparing a build with the public source to the pre-built will always be different. Asking the modders that are capable of inspecting the file is definiately not a solution. They will never get shit done. Expecting the AV companies to be competent is not an option. The ASIs still have 0/57 detection rate, the malware it distributes still has a measly 29/57 (just re-submitted) detection rate. And I don't expect the ASI's rate to change because the code that does the dirty work, hell, the code that does the mod shit, is unreachable by emulation. I wish you all luck running crawling GTA V in your sandboxes and virtual machines. Or just playing Russian roulette with your AV software.

NONE of the antivirus sofware currently detects the attack used by the two mods. The code that downloads fade.exe, the malicious file, and executes it is only accessible when scripthook runs the code. None of them are capable of reaching that code when trying to analyse the file. The only point they can detect it is when fade is being downloaded or executed. Even then, fade.exe appears to be detected by only 40% of antiviruses. Noclip.asi detection rate: https://www.virustotal.com/en/file/2ce282e6153e8cbf8bca500a5f9fb86256d1160214781fd89147563562a310fd/analysis/ http://virusscan.jotti.org/en/scanresult/35bfa4cf14a189415897bc76555da42b8fba9af4 https://malwr.com/analysis/ODUyZDA0NDA4ZjA3NGExMTkwYTU5ZTM0MTBhYTAyN2U/ Fade.exe detection rate (I assume this is the fade.exe the asi distributed): https://www.virustotal.com/en/file/96fc6e090cb28dc36c35607fd8f189d62f044d2be18f43e39c58fd1ce2aa9336/analysis/

​They were not actually stored inside the asi, the asi downloaded the malware, that is how it evaded all virus and malware scanners. Luckily, for some, the files it did download were caught before they could do any damage.

​Flashbacks of when PPM "took over". Now for the obligatory "these were made using a trainer" comments... *gets tear gassed and shot by LSPD*

.asi mods are just C++ .dlls with a different file extension. They should be treated with no less suspicion than any other binary downloaded from the internet. I am seriously surprised that this has not happened before.

​Fixed that for the biggest user of said feature.