[xnorf]

Howto discover fake files

Webservices
After doing a search, you can check a file immediately by using webservices. Go to Options/General/Edit Web Services... and paste in the following lines:

Quote

Power-Portal,http://ed2kstats.power-portal.to/ed2k.php?hash=#hashid
Peerates,http://edk.peerates.net/check.php?hash=#hashid
Shortypower,http://ed2k.shortypower.dyndns.org/?hash=#hashid
edkfakes,http://www.edkfakes.info/action.php?link=#filesize:#hashid
DF Check,http://donkeyfakes.net/fakes.php?referer=emule&hash=#hashid&size=#filesize&name=#filename
DF Report,http://donkeyfakes.net/report.php?hash=#hashid&size=#filesize&name=#filename
Fake Check Bitzi,http://bitzi.com/lookup/ed2k:#hashid?ref=eMule

If your file isn't listed, you should check length/bitrate on plausibility and if provided different filenames for the file (only global search and kad)

Reading filenames and comments
After you connected to some/all sources for the download, you can check the different filenames or comments. Comments or 2 different filenames should concern you.

Empty files
A file downloading very fast with high compression (>100%) is often an indicator for a file filled with lots-of zeros. You should cancel these downloads immediately.

Preview
As soon as you downloaded the first 16 KBs, a preview can be successful. To enhance eMule's preview function, you should add the line

Quote

PreviewSmallBlocks=1

into the preferences.ini somewhere below "[eMule]" (emule may not be running when saving the preferences.ini!)

You can also create a file called "PreviewApps.dat" in the config dir, which could look like this:

Quote

VLC085=C:\Program Files\vlc\videolan\vlc.exe
MPlayer=C:\Program Files\MPlayerC\MPlayerC.exe
ACDSee=C:\Program Files\ACDSee\ACDSee32.exe

Videolan can be downloaded from here: http://videolan.org/...ad-windows.html and Media Player Classic here: http://sourceforge.n...ackage_id=84358. Older and free versions of AcdSee (a fast and small image viewer) can be found here.

VLC plugin
The advantage of the plugin is, that VLC shows all downloaded data. It is recommended to use the according partfile plugin v0.1.4 for VLC 0.7.2 http://prdownloads.s...v-0.1.4_bin.zip or v0.2.1 for VLC 0.8.4a http://www.geocities...023_binary.html

Determing real file extension
Sometimes a file has the wrong filename. A 100% working method to find out the real extension is to look into the file using a text/hex editor. Most of the time, the first 3 letters suffice for identification. Here is a short list.
ID3=.mp3
ÿû=.mp3
MZ=.exe (be careful with downloaded .exe files. You should always check them for viruses!)
PK=.zip
Rar=.rar
RIFF²ôáAVI=.avi
ÿØÿà JFIF=.jpg
0&²=.wmv
???????**ACE**=.ace (?=wildcard)

Link sites
Of course, you don't need to do any of the above if you use a link site like i. e. http://contentdb.emule-project.net/

This post has been edited by xnorf: 06 January 2009 - 11:39 PM

[jestheonlyone]

Just some small additions/corrections:

Determing real file extension

ID3 = .mp3
FFFB or FFFA (hexa) = probably .mp3

RIFF????AVI = .avi
RIFF????WAV = .wav
(?=wildcard)

0&² = .wmv (video) / .wma (audio) / .asf (any)

OggS = .ogg (audio) or .ogm (video)

.RMF = Real Media File

[FindMeInTheClub]

Where to get a good hex/text editor?
And what is ACDsee?

Good Tutorial! Thx!

[niclights]

[Neonil]

Quote

Fakecheck Donkeyfakes,http://donkeyfakes.gambri.net/index.php?action=search&hash=#hashid

Good bye Donkeyfakes, we missed you.

[ElChele]

Hi everyone
That's missed too.

Quote

Fakecheck Jugle.net,http://www.jugle.net/?comments=#hashid

Linked to:
Click me

bye

[bazak]

"Of course, you don't need to do any of the above if you use a link site like i. e. http://content.emule-project.net"

Probably a statement of my gross ignorance but how do you do that?

Baz

[niclights]

Click on that link to go to the free legal content database. From there follow links to a particular file and click that to send an ed2k link directly to your Emule.

[Lissy]

Can you please tell me where I find web services, and how to navigate to what you are mentioning.
Thanks, Merry Xmas

[niclights]

I assume you understood how to setup the webservices - I can't see a clearer way of explaining it!

To use them: Right-click on any search result and select them from the 'webservices' menu at the bottom. This should in turn open the relevant page in your browser.

HTH

[frkec]

is there a way that fake emule searches wouldn't even be seen?

[xnorf]

No.

[shooter_im469]

Hey, thanks for your help/advice on the other thread.

In the second quote under the "Preview" section:

"You can also create a file called "PreviewApps.dat" in the config dir, which could look like this:"

does putting VLC (the only one of the three I presently use), MPC, and ACDSee in the "PreviewApps.dat" file mean that you can use any of the three apps to preview media? Similar to how you can open a jpg on your hdd with Paint, GIMP, MSIE, MS Photo Editor, etc by right-clicking and using the "Open With" command?

[xnorf]

In case you haven't figured out yet: Yes. You can install multiple preview applications in previewapps.dat.

[kopn]

Hello xnorf!
How to "check a file immediately by using webservices? How to "check if provided different filenames for the file (only global search and kad)"?
Best regards,
Dima

Moderator note: quoting xnorf's entire post is not only annoying, but also totally unnecessary.

This post has been edited by PacoBell: 03 November 2006 - 03:12 PM

[mike18xx]

Neonil, on Nov 16 2005, 11:44 AM, said:

Quote

Fakecheck Donkeyfakes,http://donkeyfakes.gambri.net/index.php?action=search&hash=#hashid

Good bye Donkeyfakes, we missed you.

I'm convinced the project was a lost-cause anyway, since it's easier to create and propogate a fake than it is to go through the trouble of writing a report, seeing it hosted, and then having it amount to anything anyway since a large percentage of people won't have their client equipped to do anything about it. This is particularly the case if fake-creation is automated (as is, I suspect, the case with "<bleep!>" -- fakes of that pour out at the rate of dozens every single day).

One advantage of BT in this area is that most hosting sites let you see who posted the tracker file: I.e., anybody could put "[aXXo]" or other reliable releaser's name in the title of a fake, but if it's actually aXXo posting the release on TorrentSpy, you'll know it's the real deal.

This post has been edited by PacoBell: 14 December 2006 - 11:34 AM

[arishy]

Can you please tell me how to report fake files that I downloaded, so others can benefit .....

[PacoBell]

arishy, on Dec 8 2006, 10:35 AM, said:

Can you please tell me how to report fake files that I downloaded, so others can benefit .....

Did you not read the first post of this thread

[marlboro952]

thanks for this usefull information.

[NetSkipper]

xnorf, on May 27 2005, 01:23 AM, said:

You can also create a file called "PreviewApps.dat" in the config dir, which could look like this:

Quote

VLC085=C:\Program Files\vlc\videolan\vlc.exe
MPlayer=C:\Program Files\MPlayerC\MPlayerC.exe
ACDSee=C:\Program Files\ACDSee\ACDSee32.exe

It's not working for me. I've added several media players, image viewers, and the problem is the same



This is my PreviewApps.dat

GOM Player=C:\Program Files\GomPlayer\GOM.exe
MPlayerC=C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe
WinAmp=C:\Program Files\Winamp\winamp.exe
ImageViewer=rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1
MSPaint=C:\WINDOWS\system32\mspaint.exe
ACDSee=C:\Program Files\ACD Systems\ACDSee\9.0\ACDSee9.exe
WinRAR=C:\Program Files\WinRAR\WinRAR.exe

The interesting part, that GOM Player (or any other video player), that set to be default Preview player, is working if set thru standart settings.

But with the PreviewApps.dat the same player is not.


P.S. MorphXT v9.6

This post has been edited by NetSkipper: 09 April 2007 - 12:01 PM