• Don't join NOX or Darkland servers! VIRUS!
    138 replies, posted
AzuiSleet and/or Mewse has found a way to create .exe executables which are renamed to wut.mdl which can do ANYTHING to your system, including write viruses, backdoors, etc. Right now, the virus writes a file called lol.lua to your autorun/client/ folder which redirects you to the ZS official server on noxious every time you try and join a server. But this is tame in it's nature and can be prevented against. What can't be prevented against is if he decides to write a full fledged virus/backdoor and spread it through other communities, as he is doing with Darkland servers. Bottom line, [highlight]DON'T JOIN NOX OR DARKLAND SERVERS![/highlight] If you have been infected with this virus already, my only suggestion is to delete your garrysmod folder and restart gmod. If that doesn't work, well then your screwed. I'd like to thank [b]Nick Tellis[/b] for providing me with this information. Here's some proof that this exists. [QUOTE=Gmod4ever] Also, thanks to history, I found the links. [url=http://azu.pastecode.com/?show=m40cf0796]The script that is written to your autorun/client[/url] [url=http://noxiousnet.com/logs/208_122_57_213/log75.txt]NoxNet Chat Log 1[/url] [url=http://noxiousnet.com/logs/208_122_57_213/log82.txt]NoxNet Chat Log 2[/url] :v:[/QUOTE]
[QUOTE=Thename96]If that doesn't work, well then your screwed.[/QUOTE] lol. Priceless. :D [b]Edit:[/b] [QUOTE=Thename96]If that doesn't work, well then your screwed.[/QUOTE] I also believe that it is: you're. ;)
I don't play NoX. Or those other people.
I played on NoX a few times, not a lot, but I was fine.
NoX is fine. And so is Darkland.
I'm a constant NoX server player. I just checked said folder (lua/autorun/client). It doesn't exist. He is a liar.
[QUOTE=Tagger]He is a liar.[/QUOTE] Look at his avatar.
[QUOTE=Phenrig]Look at his avatar.[/QUOTE] Sir, I do believe you just earned a Zing! rating.
[QUOTE=andersonmat]lol. Priceless. :D [b]Edit:[/b] I also believe that it is: you're. ;)[/QUOTE] If we want a grammar nazi, we shall ask for it.
Is there some how irony in that post, Stylee?
Think what you want, but I'm just giving you guys a heads up. Join the NOX ZS server then try and join another server. You will be redirected to NOX again. [b]Edit:[/b] [QUOTE=Phenrig]Look at his avatar.[/QUOTE] My avatar decides the information being false, how?
Fine. I'm going to test it out.
I already did. You've probably clicked connect to soon.
are you from chillzone?
[QUOTE=Thename96]Think what you want, but I'm just giving you guys a heads up. Join the NOX ZS server then try and join another server. You will be redirected to NOX again.[/QUOTE] Well if that is true, then wouldn't it make sense that this is a sad attempt at getting more traffic to their own servers? Perhaps they wrote it in order to redirect everyone who was once on their server, back to it again. Maybe this really isn't the work of AzuiSleet and/or Mewse as you asserted. I think you should get your facts straight.
Ok. He is really full of shit. Just checked it out. I joined all NoX servers, then joined another persons server. Nothing. Then I quit Gmod and went into my autorun/client folder. No lol.lua. You sir, have just been caught in the act. [b]Edit:[/b] [QUOTE=Thename96]Think what you want, but I'm just giving you guys a heads up. Join the NOX ZS server then try and join another server. You will be redirected to NOX again. [b]Edit:[/b] My avatar decides the information being false, how?[/QUOTE] The avatar represents that the user has not put in his own avatar. That goes along with the member being new.
[QUOTE=Tagger]Ok. He is really full of shit. Just checked it out. I joined all NoX servers, then joined another persons server. Nothing. Then I quit Gmod and went into my autorun/client folder. No lol.lua. You sir, have just been caught in the act. [b]Edit:[/b] The avatar represents that the user has not put in his own avatar. That goes along with the member being new.[/QUOTE] And being new matters how?
[QUOTE=Tagger]Ok. He is really full of shit. Just checked it out. I joined all NoX servers, then joined another persons server. Nothing. Then I quit Gmod and went into my autorun/client folder. No lol.lua. You sir, have just been caught in the act.[/QUOTE] Good deal, glad you found out that this guy is full of it. Perhaps this thread can be put to rest.
[QUOTE=NCKomodo]And being new matters how?[/QUOTE] Ask the guy who originally mentioned his avatar. But the stereotype for new people is that most of them are idiots, or just ignorant/uninformed.
Azu wanted TheChillZone to host this. I told him that the last we wanted was to have a script that makes even [b]more[/b] of our clients leave. He has it so it makes you join nox, say something along the lines of [quote]UNBAN AZUISLEET PLOX![/quote] and then disconnect. He linked me to a few logs on the NoxNet site that had incidents of it in there. The thing itself is real (it's a .dll renamed as wut.mdl, put in the garrysmod folder and downloaded via something like cache.addlib or something like that [He showed me the code a few hours ago]) but where it is I honestly can't say.
Bet he's on gmod9 and he joined some server with the name Nox/Darkland.
So wait, it is on Chillzone?
No, Tagger. He wanted me to put it on there, but I refused. He left saying "I guess I'll have to wait for Darkspider to get on." Also, thanks to history, I found the links. [url=http://azu.pastecode.com/?show=m40cf0796]The script that is written to your autorun/client[/url] [url=http://noxiousnet.com/logs/208_122_57_213/log75.txt]NoxNet Chat Log 1[/url] [url=http://noxiousnet.com/logs/208_122_57_213/log82.txt]NoxNet Chat Log 2[/url] :v:
[QUOTE=Gmod4ever]Azu wanted TheChillZone to host this. I told him that the last we wanted was to have a script that makes even [b]more[/b] of our clients leave. He has it so it makes you join nox, say something along the lines of and then disconnect. He linked me to a few logs on the NoxNet site that had incidents of it in there. The thing itself is real (it's a .dll renamed as wut.mdl, put in the garrysmod folder and downloaded via something like cache.addlib or something like that [He showed me the code a few hours ago]) but where it is I honestly can't say.[/QUOTE] Told ya. This information was just leaked to only a few lua coders and NOX owners. This virus [b]does[/b] exist, but might not be put on their servers. I'm not new to facepunch or garrysmod at all... I don't want my other account to get banned for this.
He is not lying. I went to a Darkland server and then tried to make my own game and it redirected me. I'm deleted the lol.lua and i am going to try again. How do i get rid of this?
I joined Darkland for the first time in months today, No virus....
[QUOTE=Thename96]Told ya. This information was just leaked to only a few lua coders and NOX owners. This virus [b]does[/b] exist, but might not be put on their servers. I'm not new to facepunch or garrysmod at all... I don't want my other account to get banned for this.[/QUOTE] Well I doubt Jetboom (NoX Founder/Leader) would put this on his server, especially if it spammed in chat to unban someone that is banned on HIS server.
[QUOTE=shark1217]He is not lying. I went to a Darkland server and then tried to make my own game and it redirected me. I'm deleted the lol.lua and i am going to try again. How do i get rid of this?[/QUOTE] Yeah. That's how Azu told me it works. It redirects you when you disconnect. That was his persuasive tact to get me to put it onto TCZ. I still declined. If it's on there, I didn't put it on there.
Perhaps you're from another clan. ARE YOU TRYING TO PREVENT ME FROM PLAYING FORTWARS
@ #1: Hey!, Give Nick some credits for writing the thread you just simply copied and pasted from the phoenix-community.net forums. And by the way, enough proof that this is true. First, the .mdl file that carries the 'virus': [url]http://www.2shared.com/file/3583916/97a1ffdd/wut.html[/url] ( Don't be stupid and run this file, only examine it with a hex editor or notepad++ whatever if you're interested. ) Second: [url]http://luabin.planetgmod.com/?snip=1800[/url]
Sorry, you need to Log In to post a reply to this thread.