Malicious Servers (Nov. 07, 2020)

11/07/2020 19:53 thirdeye42#1
It probably doesn't affect users of Elitepvpers but thought I would post this anyways so the word is out.

Zan Dekaron A3 [Return]
Magic Dekaron [Returned]


These 2 servers are pushing a virus called w32/floxif-c through their launchers, possibly the client too. This virus will delete files (exe, dll, etc) from your computer and replace them with it's own version of the file to keep the virus speading. Windows Defender and Anti Virus software detects the actions as a virus but DOES NOT STOP the actions of removing and replacing files.

If you are infected with this virus do not continue as if you're fine. This malicious virus as with all viruses has a purpose. The purpose of this virus can be many things such as keylogging, remote access to your computer, and ddos attacks.

Get your system cleaned/repaired immediately.
11/07/2020 20:27 kingtjinn#2
Good share,
if anyone doesnt know what to do i would recommend a wipe & purge on your computer with an data destruction program.
I personally would recommend Darik´s Boot and Nuke - [Only registered and activated users can see links. Click Here To Register...]
While i also heared a lot of good things about CBL Data Shredder - [Only registered and activated users can see links. Click Here To Register...]

This will make sure no file is left on your hdd/ssd
While a format only destroys the tables identifying where any files have ever existed, making it very difficult to find or read any files again. It does not however securely erase the actual magnetic bits stored on the drive, so if someone is sufficiently qualified and motivated and has the necessary tools it is technically possible to exploit this method to make a virus not being deleted after a format.

You can think about a format as shredding paper. The information on the paper doesn't disappear, but reassembling it into something readable is pretty difficult.
While a data destruction program is like burning it.

So if you are unsure about if you are being infected, you want to take preactions in case, since you never know how good someone is
11/07/2020 21:43 thirdeye42#3
Quote:
Originally Posted by kingtjinn View Post
I personally would recommend Darik´s Boot and Nuke - [Only registered and activated users can see links. Click Here To Register...]
Thanks kingtjinn. It's not my field of expertise so I didn't have anything to recommend. I used TronScript and as far as I know, it has repaired my system.
11/10/2020 19:26 PyrexiaStudios#4
Nice server smear, but Dekaron Eternia does not delete your files lol.
11/11/2020 15:19 conquer93#5
Its true. I got zandekaron its a fun server but since i installed it. Skype and battlenet for warzone stopped working cause of missing dlls
, when i get to task manager to startup, i see there something called Program which i never had before but i cannot find its file location through there so idc i turned it off but hope it stops deleting dlls now cus i had to reinstall skype every time i reboot pc and same for battlenet
11/11/2020 22:26 thirdeye42#6
Quote:
Originally Posted by conquer93 View Post
Its true. I got zandekaron its a fun server...
It's obvious which ZanDekaron you're talking about but will you verify to others which one so none are confused?

Thanks
11/11/2020 23:12 nemesidevmv#7
Quote:
Originally Posted by conquer93 View Post
Its true. I got zandekaron its a fun server but since i installed it. Skype and battlenet for warzone stopped working cause of missing dlls
, when i get to task manager to startup, i see there something called Program which i never had before but i cannot find its file location through there so idc i turned it off but hope it stops deleting dlls now cus i had to reinstall skype every time i reboot pc and same for battlenet

you installed the zan dekaron fake hahaha
11/12/2020 07:52 conquer93#8
[Only registered and activated users can see links. Click Here To Register...]

I got this one.. Didnt know there were more zandekaron
11/12/2020 09:39 torianbg#9
I played on an A3 ZanDekaron server (not sure how many there are, the website has been dead for over an year, the facebook page is [Only registered and activated users can see links. Click Here To Register...] )

The server had 0 people online when I played. I still have the client(mostly to check the share folder if the had fixed any of the bugs I had (they didnt lmao)), haven't noticed anything weird from it. Not saying its clean or anything ofc, just sharing exp. Could be a different ZanDekaron from what you guys are talking about, I haven't really been following the pserver scene.
11/12/2020 15:26 nemesidevmv#10
zan dekaron fake [Only registered and activated users can see links. Click Here To Register...]
zan dekaron real [Only registered and activated users can see links. Click Here To Register...]
11/12/2020 16:32 lifs2000#11
Yeah it is fake zan-dekaron indeed.
That is not the real owner.
11/14/2020 05:55 alexzzzzz#12
It's crazy seeing that fake ZanDekaron. I'm slowly rolling out the server again in A3 form. The real ZanDekaron is at [Only registered and activated users can see links. Click Here To Register...]
I let the .net domain go a while ago.
11/14/2020 11:06 torianbg#13
So the zandekaron.net was still the real ZanDekaron?
11/14/2020 14:22 thirdeye42#14
Quote:
Originally Posted by torianbg View Post
So the zandekaron.net was still the real ZanDekaron?
It used to be but it's taken by someone else now.

[Only registered and activated users can see links. Click Here To Register...]
11/15/2020 15:01 mr.deathalb#15
This is funny . actually the viruse thread its due to the patch of enigma patcher till they using a cracked version of it .... Second you really think they will care about destroying your pc or sharing viruses around :facepalm: :facepalm: :facepalm: :facepalm: :facepalm: