9D PK is hazardous.

[Tetlaliloc]

Hey, remember that I asked about if 9D PK server was infected?

Well, I decided to tell my antivirus it was ok to run the game, so I went to play for a week, then I have been receiving e-mails of another service I have, that there have been several failed login attempts into my account from that service. I registered into 9DPK with my usual e-mail (my mistake) and it's the only "new" thing and "suspicious" thing I have put part of my information in.

The IPs I have been attacked from are 76.12.161.171 and 93.123.84.237, they are from Delaware, US and Sofia, Bulgaria, respectively. Pretty far away from each other, but it's still suspicious.

Be careful.

My email has also received failed login attempts from Vietnam, Japan, Colombia and Irak. And these date back to the day I registered in 9ds.onl

[ngthtg735252]

This suck a negative thread.
The Ninedragons.exe file has same MD5 and SHA with another private server. Same as file on old PA server.

[adek1994]

Originally Posted by ngthtg735252

This suck a negative thread.
The Ninedragons.exe file has same MD5 and SHA with another private server. Same as file on old PA server.

What about installer? Launchers? Also, that's quite funny they had the same as PA's - I'm not sure, cuz I didn't check that, but icon on PA was changed on exe's resources - wouldn't that change hashes?

[Tetlaliloc]

It might have not been the server files themselves. When I registered into 9ds.onl I used a certain e-mail. These people are trying to get into my other services that I have linked to my e-mail and they are trying to guess my password.

What I am saying is that maybe the files are not infected, but the purpose behind the whole server is to make either phishing or social engineering to get into your private information.

Idk if this will get me on the wrong side of all the community here, but I'd bet you are related to this server. (I don't mean you, Adek)

[eddwood]

This doesn't sound like something wrk would do.

Is he still the owner?

[adek1994]

He used to be one, but I didn't see him anywhere, actually.

[Tetlaliloc]

Anyone else thinks Kazuuu(add thousands of "u") is suspiciously defending 9DPK too much?

[adek1994]

Originally Posted by Kazuuuuuuuuuuuuuuuuuuuuuu

You know what else is hazardous? Your stupid ***.

So why didn't you die yet, since you licked it so much earlier?

[xtJamie]

tis alright boys. i'm on the case. i'm downloading that exe op posted and i'll rip it a new orifice and post the results in next half hour.

no traffic generated such as udp/tcp/dns resolution.
no changes to keys in registry key/hive and no changes in any reg shot comparison.
no processes or ports or any kind of changes to any service
sample executable op provided only has three modules and no referenced text of any description towards 9dragons - 3 modules and one with some random dlls.

sha256 checksum matches virustotal upload previously with 8 detections.


packed using yoda's cryptor (why yoda - incredibly easy to unpack)?


advice? **** it off unless it comes from the actual people behind 9dpk but even then be cautious.

[zl0rd]

Originally Posted by xtJamie

tis alright boys. i'm on the case. i'm downloading that exe op posted and i'll rip it a new orifice and post the results in next half hour.

no traffic generated such as udp/tcp/dns resolution.
no changes to keys in registry key/hive and no changes in any reg shot comparison.
no processes or ports or any kind of changes to any service
sample executable op provided only has three modules and no referenced text of any description towards 9dragons - 3 modules and one with some random dlls.

sha256 checksum matches virustotal upload previously with 8 detections.


packed using yoda's cryptor (why yoda - incredibly easy to unpack)?


advice? **** it off unless it comes from the actual people behind 9dpk but even then be cautious.

So you are saying that 9d pk is infected ?

[xtJamie]

Originally Posted by zl0rd

So you are saying that 9d pk is infected ?

i'm offering advice to be cautious with any executable you run on your machine. if you want to run it, use caution.

[mrquickshipuk]

Paranoia again.

[9D_player]

Originally Posted by Tetlaliloc

Hey, remember that I asked about if 9D PK server was infected?

Well, I decided to tell my antivirus it was ok to run the game, so I went to play for a week, then I have been receiving e-mails of another service I have, that there have been several failed login attempts into my account from that service. I registered into 9DPK with my usual e-mail (my mistake) and it's the only "new" thing and "suspicious" thing I have put part of my information in.

The IPs I have been attacked from are 76.12.161.171 and 93.123.84.237, they are from Delaware, US and Sofia, Bulgaria, respectively. Pretty far away from each other, but it's still suspicious.

Be careful.

My email has also received failed login attempts from Vietnam, Japan, Colombia and Irak. And these date back to the day I registered in 9ds.onl

Seems like Play9D is still around. Браво
Man, never use your primary mail to register such things. You can make dozens of dummy accounts, which aren't linked to any social/personal service. I think the information is probably collected when registering account and not by the game exe itself. Any file related to the game on the local PC could/should be easily caught if trying to play bad.

[Tetlaliloc]

Originally Posted by 9D_player

Seems like Play9D is still around. Браво
Man, never use your primary mail to register such things. You can make dozens of dummy accounts, which aren't linked to any social/personal service. I think the information is probably collected when registering account and not by the game exe itself. Any file related to the game on the local PC could/should be easily caught if trying to play bad.

That's what I tried to say and elaborate on, in that post and in following replies. Thanks, anyway.

[eyalmp]

Originally Posted by eddwood

This doesn't sound like something wrk would do.

Is he still the owner?

Originally Posted by adek1994

He used to be one, but I didn't see him anywhere, actually.

Originally Posted by Tetlaliloc

Anyone else thinks Kazuuu(add thousands of "u") is suspiciously defending 9DPK too much?

as i said WRZ not owner the owner is Kalzion paul he will replay here soon ^^
katzuki is him and kazu is tutski gm
take you time to understand my thread about it before ahh ic my bad english
all pvp_noobless are team of staff
such as pooh hook kalz ibomber and so on same like old ely all league runs it
btw i gift all beads santa etc so no need pm me 6eXy >.<