Page 1 of 2

WARNING ALL PLAYERS: do not enter!

PostPosted: Tue May 20, 08 7:42 pm
by [FGS]ShadowRunner
Image

This server makes u download a file called roughly something like

"aadaadmod" (it flashed on the screen so quick)

I think it is a .u file, cos it is a massively fast download.

Then you gpf.

You'll notice whoever runs this "server" has all our aliases...

That is me taking the screenshot, so figure out who Shadowrunner is...

Would I be right in saying we would have had to visit a server to have our aliases pinched like that?

Which if true, narrows things down a bit, with that particular name tag I have only played on

FGS
RTK
EDH
ATDM server

I have not visited any other server at all...

PostPosted: Tue May 20, 08 8:17 pm
by ¤[A]Raiden¤
Dont enter none of the EDH servers? Or just the one with the weird looking thing at the start of the server name?

PostPosted: Tue May 20, 08 8:36 pm
by [FGS]ShadowRunner
well.. do what u like, but this fake "server" will make u download a file...

The real EDH server is in it's usual place, further down the list and from what someone else was saying in the other topic, the server changes names anyway...

so yes the weird, NC type "nose" thingy at start of server name...

PostPosted: Tue May 20, 08 8:55 pm
by ~Si[ß]eria~
I guess it's just some impersonator and your DX copy is fucked or you were advbanned :roll:

PostPosted: Tue May 20, 08 9:05 pm
by ~DJ~
This happens to Homer simpsons party and something... it checks some of your logs (IMO) And kind of see the player names and just add it to the list... but they aint real...... they just fake.. if you go in server no one will be speaking... its just you and no one... and there might be some real players too :P

(Its IMO << in my opinion..)

PostPosted: Tue May 20, 08 9:30 pm
by [FGS]ShadowRunner
No.

You can't enter this server. Player can download this file... but gpf's before connecting...

I guess it's just some impersonator and your DX copy is fucked or you were advbanned


Well I am wondering what the hell this file is and what it does...

I can join other servers and play, and I don't seem to be banned anywhere...

PostPosted: Tue May 20, 08 10:51 pm
by Destroyerzero
Actually its dxmotd100 that it has your download.

I set my DeusEx for File Hijacking and Translating. This is the only file that the server has. I took a screenshot fast enough to catch it downloading.....

Here it is

http://www.smashmybrain.com/downloads/dxshot.JPG

I entered the server 4 times and didnt GPF.

Edit: I wanted to see if I would GPF. Some proof of actually entering the server and making it in there would be nice...so here is another screenshot

http://www.smashmybrain.com/downloads/dxentryshot.JPG

PostPosted: Tue May 20, 08 11:50 pm
by Jon
Hi, Alex here. Are you kidding me? You set your DX for file hijacking? Hahahaha, mate, check DeusEx.log some time. As for the file, its NOT dxmotd. I actually have the file and when loading it, your DX shuts down without any notice. And when did you join this server? An hour ago? I guess so, since the fake server been offline for hous already.

Next time: CHECK THE GODAMN SERVER IPS BEFORE POSTING!

PostPosted: Wed May 21, 08 12:28 am
by [FGS]ShadowRunner
yea, it cant be cos u could join...

the file on the fake server ended with the word "mod"...

I checked my cache, there is a file there that arrived today...

if any want it, let me know.



Topic Split; please stick to the issue at hand ;) --Jon

PostPosted: Wed May 21, 08 10:54 am
by Jon
Would be a good idea to PM it to me - I'd be interested in what it is.

PostPosted: Wed May 21, 08 11:20 am
by Alex
To all:

Do NOT enter the server! It modifies your DeusEx.ini!
I was editing my DeusEx.ini for the EditPackages bit as I wanted to compile a mod, when I noticed that suddenly, the masterserver was set to DXMP.NET! THE DOMAIN THAT IS OWNED BY DEJAVU!

The mod that everyone downloaded is in fact a mod that abuses an EXPLOIT (most likely, can't see how he did it otherwise).

Everyone open your DeusEx.ini and replace the following:
Code: Select all
ServerActors=Nephthys.NptServerUplink MasterServerAddress=master0.dxmp.net MasterServerPort=27900

to
Code: Select all
ServerActors=Nephthys.NptServerUplink MasterServerAddress=master0.gamespy.com MasterServerPort=27900


And:
Code: Select all
[DeusEx.MenuScreenJoinGame]
MasterServerAddress=master0.dxmp.net

to
Code: Select all
[DeusEx.MenuScreenJoinGame]
MasterServerAddress=master0.gamespy.com


I will write a modification myself, much alike the one DejaVu made, to undo the changes.

PostPosted: Wed May 21, 08 11:23 am
by Dejavu
the domain is not owned by me. sorry guys, you are wrong here.

PostPosted: Wed May 21, 08 11:25 am
by Alex
Dejavu wrote:the domain is not owned by me. sorry guys, you are wrong here.

Hi there. DXMP.net was owned by you about 6 months ago. It expired 2 months ago and was re-registered 5 seconds after it was expired. This is something very known in the domain registry business.

If the original registrar (YOU) wants to register the domain but it was already expired, he could get it back immediately. And guess what, it has been re-registered by... YOU! DejaVu, we all know it's you who runs the servers.

PostPosted: Wed May 21, 08 11:32 am
by Dejavu
no you are wrong. i never re-registered this domain. show me some proofs, thats its currently registered by me then.

PostPosted: Wed Jun 04, 08 5:29 pm
by Mr. Tastix
I see nobody has taken action to ban DejaVu then? YOU PEOPLE FUCKING CONFUSE ME.

PostPosted: Wed Jun 04, 08 7:08 pm
by Spiderbot01
Whats the point in banning him?

PostPosted: Wed Jun 04, 08 7:53 pm
by James
I see the point in balling all FGS members who post on this site though for shit stirring, to the max.

PostPosted: Wed Jun 04, 08 8:50 pm
by Zora
Please download the newest Nephthys version and install it client side to get protected from malicious servers like that. See Nephthys thread: http://www.dxalpha.com/forum/viewtopic.php?p=234718#234718

Zora

PostPosted: Thu Jun 05, 08 7:45 am
by Psycho
What is the point in banning dejaVu? It will all worsen

PostPosted: Thu Jun 05, 08 4:49 pm
by [FGS]ShadowRunner
I see the point in balling all FGS members who post on this site though for shit stirring, to the max.



Who is shit stirring who here? Would you prefer I didn't start this topic?
Next time shall I just let Deja Vu infect you all? OK James... gg

PostPosted: Thu Jun 05, 08 6:28 pm
by James
GRASS GROWS,
BIRDS FLY,
AND BROTHER?,
I HURT PEOPLE.

PostPosted: Thu Jun 05, 08 7:26 pm
by ~ô¿ô~Nobody~
Dejavu wrote:no you are wrong. i never re-registered this domain. show me some proofs, thats its currently registered by me then.


If it was not your domain anymore, there wouldn't answer your master-server anymore, if you connected to there. nub:roll:

Image

PS: you forgot to add the german message :roll:

PostPosted: Fri Jun 06, 08 1:31 am
by SnakeEater
why did you make this attack? what's the point? yeah its another master server but dude, theres more servers on the gamespy one, dxmp only has a few servers from what i've seen :S

PostPosted: Fri Jun 06, 08 7:54 am
by Psycho
I think DXServerlister doesn't like you Nobody :P

PostPosted: Fri Jun 06, 08 6:51 pm
by ~ô¿ô~Nobody~
Because? :shock:
Well, I don't like it either.
But that's the proof that the domain is still dejavu's one.

PostPosted: Fri Jun 06, 08 9:07 pm
by Dex
What's the thing you're writing C++?

PostPosted: Sat Jun 07, 08 12:09 am
by ~ô¿ô~Nobody~
ugh.. lol
That has nothing in common with the stuff i wanted to show.
The programming environment is simply running in the background.

But if you want to know it. It's the source code of my new PackageReader, which is the base for further protection tools for example.

PostPosted: Sat Jun 07, 08 10:31 am
by Dex
Ah, sounds nice. Good luck with it.
Anyway, DejaVu can be traced with any luck and tools :)

PostPosted: Sun Jun 08, 08 10:15 am
by Psycho
DejaVu can be traced by getting his IP, contacting his ISP and telling them the situation etc, they will have the right then to cut off his internet for multipul reasons.

PostPosted: Sun Jun 08, 08 2:15 pm
by Spiderbot01
Come on, you think they have laws in Sloveniastan?