Nosbyte Trojan Virus

01/31/2021 15:35 nosspieler123#1
[Only registered and activated users can see links. Click Here To Register...]

Momentan ist ein Trojaner in Nosbyte unterwegs vorsichtig!!

Currently there is a Trojan Virus in the Game. Be carefully

file: C:\Users\EDV\Downloads\NosByte\NosByte\NosByte.dll -> Its a Trojan Virus !!!
02/02/2021 08:17 MohammedAli187#2
Habs überprüft, er hat recht. Aber was bewirkt der?
02/02/2021 11:40 nosspieler123#3
Quote:
Originally Posted by MohammedAli187 View Post
Habs überprüft, er hat recht. Aber was bewirkt der?
das der server attackiert wird. Falls du ein gutes Antivirus programm hast brauchst du nichts zu befürchten
02/02/2021 12:27 PR4Y#4
Quote:
Originally Posted by nosspieler123 View Post
das der server attackiert wird. Falls du ein gutes Antivirus programm hast brauchst du nichts zu befürchten
Ich verstehe nicht wie man soviel Müll aufeinmal labern kann.

Die "Trojaner DLL" ist die DLL zum injecten von z.b. dem Home system, Raid Dmg uvm.

Aber Hauptsache mit deinem Halbwissen irgendwas mal gesagt haben.
02/02/2021 12:37 erixor#5
First things first, I don't think black market is the right section for this.

It's not a virus. We're injecting the NosByte.dll into the client to load our client modification. Since it's done by editing the game's memory, it can be detected as a virus by windows defender or anti viruses.

If you wish to have a clear view of what is happening when the injection happens, just press "ctrl + shift" at the same time right after entering your credentials. A command line window will appear listing all the modules that are injected into the game, for example:

[Only registered and activated users can see links. Click Here To Register...]

As you can see, it only injects our client mods, aka:

- Buddy chat widget, which is a redesigned and resized chat window between friends in game
- consignment edit, which means that when you click on the search bar in bazaar, it doesn't get reset
- Time widget, is the in game clock showed in game, with current server time & current channel
- keybind widget, is an option we have so you can re link all keybinds
- Pet stat info displays your pet & partner HP/MP in real time on the left of your screen
- Custom roles are roles we use mostly for staff & nitro boosters. It gives your name a fancy color, cause we fancy af
- Unlock fps, does what it says. Allows the game to remove the FPS limit so you can enjoy amazing NosTale if you have a 144/240Hz monitor
- Home window is a window that allows you to save up to 3 "home points" that you can teleport to any time you want
- Exploit window is a window that shows your current stats (monsters killed, raids completed etc...)
- Raid Window is a window that you can use in raid. It shows the total damage dealt by players on monsters and creates a ranking out of it
- Role manager is the window that allows you to change roles if you're a staff member or a nitro booster
- Custom wings is what allows us to add new wings to the client. Since we're using an old version of the client, this had to be reverse engineered as well because no public tools allow us to edit the NSEffData.NOS file containing the game's VFX
- Discord rich presence, well, this is just some fancy stuff that shows the amount of players and your character's level on discord

Hope that helps !

@[Only registered and activated users can see links. Click Here To Register...] if not closed, maybe this thread could be moved in a more appropriate section of the forum :rolleyes:
02/02/2021 12:46 Singleplayer™#6
@[Only registered and activated users can see links. Click Here To Register...]
its nostale , they will only trust you when you release the source :lul:
btw nice that the logs are aviable for everyone
02/02/2021 13:06 nosspieler123#7
Quote:
Originally Posted by erixor View Post
First things first, I don't think black market is the right section for this.

It's not a virus. We're injecting the NosByte.dll into the client to load our client modification. Since it's done by editing the game's memory, it can be detected as a virus by windows defender or anti viruses.

If you wish to have a clear view of what is happening when the injection happens, just press "ctrl + shift" at the same time right after entering your credentials. A command line window will appear listing all the modules that are injected into the game, for example:

[Only registered and activated users can see links. Click Here To Register...]

As you can see, it only injects our client mods, aka:

- Buddy chat widget, which is a redesigned and resized chat window between friends in game
- consignment edit, which means that when you click on the search bar in bazaar, it doesn't get reset
- Time widget, is the in game clock showed in game, with current server time & current channel
- keybind widget, is an option we have so you can re link all keybinds
- Pet stat info displays your pet & partner HP/MP in real time on the left of your screen
- Custom roles are roles we use mostly for staff & nitro boosters. It gives your name a fancy color, cause we fancy af
- Unlock fps, does what it says. Allows the game to remove the FPS limit so you can enjoy amazing NosTale if you have a 144/240Hz monitor
- Home window is a window that allows you to save up to 3 "home points" that you can teleport to any time you want
- Exploit window is a window that shows your current stats (monsters killed, raids completed etc...)
- Raid Window is a window that you can use in raid. It shows the total damage dealt by players on monsters and creates a ranking out of it
- Role manager is the window that allows you to change roles if you're a staff member or a nitro booster
- Custom wings is what allows us to add new wings to the client. Since we're using an old version of the client, this had to be reverse engineered as well because no public tools allow us to edit the NSEffData.NOS file containing the game's VFX
- Discord rich presence, well, this is just some fancy stuff that shows the amount of players and your character's level on discord

Hope that helps !

@[Only registered and activated users can see links. Click Here To Register...] if not closed, maybe this thread could be moved in a more appropriate section of the forum :rolleyes:

well in nosbyte forum you didnt say anything ....

see here: [Only registered and activated users can see links. Click Here To Register...]

Quote:
Originally Posted by PR4Y View Post
Ich verstehe nicht wie man soviel Müll aufeinmal labern kann.

Die "Trojaner DLL" ist die DLL zum injecten von z.b. dem Home system, Raid Dmg uvm.

Aber Hauptsache mit deinem Halbwissen irgendwas mal gesagt haben.
mal nicht so frech und normal schreiben kleines ;)
02/02/2021 13:20 erixor#8
Quote:
Originally Posted by nosspieler123 View Post
well in nosbyte forum you didnt say anything ....

see here: [Only registered and activated users can see links. Click Here To Register...]
Yeah, we're not using the forum that much tbh, we only use it for patchnotes & tutorials because it's more convenient than discord. This is a known issue, we've been aware since we released our client modifications that it causes anti viruses to flag it as a trojan :facepalm:

The attack on the server is a totally different thing, we're under a DDoS attack since saturday afternoon, it has nothing to do with the DLL.

We are one of the biggest servers running, and we've been like this for more than a year. Given our community and the hard work we put into the server, it would make no sense for us to add a trojan that could compromise the server.
02/02/2021 13:32 PR4Y#9
Quote:
Originally Posted by nosspieler123 View Post
well in nosbyte forum you didnt say anything ....

see here: [Only registered and activated users can see links. Click Here To Register...]



mal nicht so frech und normal schreiben kleines ;)
Bei solchen Leuten wie bei dir, muss man leider frech werden :) Oder erinnerst du dich nicht damals an unser "nettes" Gespräch auf Discord? =) Aber Hauptsache halbwissen verbreiten, super!
02/02/2021 14:54 nosspieler123#10
Quote:
Originally Posted by PR4Y View Post
Bei solchen Leuten wie bei dir, muss man leider frech werden :) Oder erinnerst du dich nicht damals an unser "nettes" Gespräch auf Discord? =) Aber Hauptsache halbwissen verbreiten, super!
ich erriner mich nicht an leuten die keine bedeutung haben. Wenn du sauer bist dann lass es woanders raus bei mir bist du falsch ;)

Wenn eine gefahr ausgeht dann wird das auch gemeldet, deswegen habe ich hier einen Beitrag erstellt. Dein Spam ist unterwünscht
02/02/2021 15:02 PR4Y#11
Quote:
Originally Posted by nosspieler123 View Post
ich erriner mich nicht an leuten die keine bedeutung haben. Wenn du sauer bist dann lass es woanders raus bei mir bist du falsch ;)

Wenn eine gefahr ausgeht dann wird das auch gemeldet, deswegen habe ich hier einen Beitrag erstellt. Dein Spam ist unterwünscht
"ich erriner mich nicht an leuten die keine bedeutung haben" Scamm ruhig die leute weiter :-(

"Wenn eine gefahr ausgeht dann wird das auch gemeldet" Nur bist du hier in der Falschen Sektion aber nichtmal das raffst du
02/02/2021 18:29 nosspieler123#12
Quote:
Originally Posted by PR4Y View Post
"ich erriner mich nicht an leuten die keine bedeutung haben" Scamm ruhig die leute weiter :-(

"Wenn eine gefahr ausgeht dann wird das auch gemeldet" Nur bist du hier in der Falschen Sektion aber nichtmal das raffst du

ich wüsste nicht wen ich gescammt haben soll oder was das hier zu suchen hat.
2 negative Bewertungen weil der typ gesperrt wurde, kann ich nichts dafür :)

aber weiterhin frech sein wenn man kein plan hat du nase :D
02/03/2021 10:45 Natsu Dragneel#13
#moved
02/06/2021 04:38 EPvPAgen#14
Quote:
Originally Posted by nosspieler123 View Post
das der server attackiert wird. Falls du ein gutes Antivirus programm hast brauchst du nichts zu befürchten
Kannst du bitte erklären, was du damit meinst?
So wie ich das verstehe, denkst du, dass NosByte in ihren eigenen Files eine DLL haben, die den eigenen Server attackiert?

1. Antiviren Programme sind trash.
2. Wie kann denn ein Trojaner unterwegs sein?
3. Wieso ist das hier noch offen?
4. autsch
02/12/2021 21:49 nosspieler123#15
Quote:
Originally Posted by EPvPAgen View Post
Kannst du bitte erklären, was du damit meinst?
So wie ich das verstehe, denkst du, dass NosByte in ihren eigenen Files eine DLL haben, die den eigenen Server attackiert?

1. Antiviren Programme sind trash.
2. Wie kann denn ein Trojaner unterwegs sein?
3. Wieso ist das hier noch offen?
4. autsch
ne meine damit das der server von einer Person attackiert wird, aber so wie hier geschrieben wird hat es keinen sinn zu diskutieren.

Internet rambos die viel zu frech sind