Register for your free account! | Forgot your password?

Go Back   elitepvpers > MMORPGs > Nostale
You last visited: Today at 17:13

  • Please register to post and access all features, it's quick, easy and FREE!

Advertisement



Nosbyte Trojan Virus

Discussion on Nosbyte Trojan Virus within the Nostale forum part of the MMORPGs category.

Reply
 
Old   #1
 
elite*gold: 0
Join Date: Jun 2017
Posts: 349
Received Thanks: 13
Nosbyte Trojan Virus



Momentan ist ein Trojaner in Nosbyte unterwegs vorsichtig!!

Currently there is a Trojan Virus in the Game. Be carefully

file: C:\Users\EDV\Downloads\NosByte\NosByte\NosByte.dll -> Its a Trojan Virus !!!
nosspieler123 is offline  
Old 02/02/2021, 08:17   #2
 
elite*gold: 0
Join Date: Aug 2018
Posts: 7
Received Thanks: 1
Habs überprüft, er hat recht. Aber was bewirkt der?
MohammedAli187 is offline  
Old 02/02/2021, 11:40   #3
 
elite*gold: 0
Join Date: Jun 2017
Posts: 349
Received Thanks: 13
Quote:
Originally Posted by MohammedAli187 View Post
Habs überprüft, er hat recht. Aber was bewirkt der?
das der server attackiert wird. Falls du ein gutes Antivirus programm hast brauchst du nichts zu befürchten
nosspieler123 is offline  
Old 02/02/2021, 12:27   #4
 
PR4Y's Avatar
 
elite*gold: 0
The Black Market: 273/0/0
Join Date: Jun 2016
Posts: 878
Received Thanks: 107
Quote:
Originally Posted by nosspieler123 View Post
das der server attackiert wird. Falls du ein gutes Antivirus programm hast brauchst du nichts zu befürchten
Ich verstehe nicht wie man soviel Müll aufeinmal labern kann.

Die "Trojaner DLL" ist die DLL zum injecten von z.b. dem Home system, Raid Dmg uvm.

Aber Hauptsache mit deinem Halbwissen irgendwas mal gesagt haben.
PR4Y is offline  
Thanks
2 Users
Old 02/02/2021, 12:37   #5
 
erixor's Avatar
 
elite*gold: 0
Join Date: Jul 2013
Posts: 381
Received Thanks: 1,036
First things first, I don't think black market is the right section for this.

It's not a virus. We're injecting the NosByte.dll into the client to load our client modification. Since it's done by editing the game's memory, it can be detected as a virus by windows defender or anti viruses.

If you wish to have a clear view of what is happening when the injection happens, just press "ctrl + shift" at the same time right after entering your credentials. A command line window will appear listing all the modules that are injected into the game, for example:



As you can see, it only injects our client mods, aka:

- Buddy chat widget, which is a redesigned and resized chat window between friends in game
- consignment edit, which means that when you click on the search bar in bazaar, it doesn't get reset
- Time widget, is the in game clock showed in game, with current server time & current channel
- keybind widget, is an option we have so you can re link all keybinds
- Pet stat info displays your pet & partner HP/MP in real time on the left of your screen
- Custom roles are roles we use mostly for staff & nitro boosters. It gives your name a fancy color, cause we fancy af
- Unlock fps, does what it says. Allows the game to remove the FPS limit so you can enjoy amazing NosTale if you have a 144/240Hz monitor
- Home window is a window that allows you to save up to 3 "home points" that you can teleport to any time you want
- Exploit window is a window that shows your current stats (monsters killed, raids completed etc...)
- Raid Window is a window that you can use in raid. It shows the total damage dealt by players on monsters and creates a ranking out of it
- Role manager is the window that allows you to change roles if you're a staff member or a nitro booster
- Custom wings is what allows us to add new wings to the client. Since we're using an old version of the client, this had to be reverse engineered as well because no public tools allow us to edit the NSEffData.NOS file containing the game's VFX
- Discord rich presence, well, this is just some fancy stuff that shows the amount of players and your character's level on discord

Hope that helps !

@ if not closed, maybe this thread could be moved in a more appropriate section of the forum
erixor is offline  
Thanks
4 Users
Old 02/02/2021, 12:46   #6

 
Singleplayer™'s Avatar
 
elite*gold: 53
Join Date: Feb 2016
Posts: 1,274
Received Thanks: 316
@
its nostale , they will only trust you when you release the source
btw nice that the logs are aviable for everyone
Singleplayer™ is offline  
Thanks
1 User
Old 02/02/2021, 13:06   #7
 
elite*gold: 0
Join Date: Jun 2017
Posts: 349
Received Thanks: 13
Quote:
Originally Posted by erixor View Post
First things first, I don't think black market is the right section for this.

It's not a virus. We're injecting the NosByte.dll into the client to load our client modification. Since it's done by editing the game's memory, it can be detected as a virus by windows defender or anti viruses.

If you wish to have a clear view of what is happening when the injection happens, just press "ctrl + shift" at the same time right after entering your credentials. A command line window will appear listing all the modules that are injected into the game, for example:



As you can see, it only injects our client mods, aka:

- Buddy chat widget, which is a redesigned and resized chat window between friends in game
- consignment edit, which means that when you click on the search bar in bazaar, it doesn't get reset
- Time widget, is the in game clock showed in game, with current server time & current channel
- keybind widget, is an option we have so you can re link all keybinds
- Pet stat info displays your pet & partner HP/MP in real time on the left of your screen
- Custom roles are roles we use mostly for staff & nitro boosters. It gives your name a fancy color, cause we fancy af
- Unlock fps, does what it says. Allows the game to remove the FPS limit so you can enjoy amazing NosTale if you have a 144/240Hz monitor
- Home window is a window that allows you to save up to 3 "home points" that you can teleport to any time you want
- Exploit window is a window that shows your current stats (monsters killed, raids completed etc...)
- Raid Window is a window that you can use in raid. It shows the total damage dealt by players on monsters and creates a ranking out of it
- Role manager is the window that allows you to change roles if you're a staff member or a nitro booster
- Custom wings is what allows us to add new wings to the client. Since we're using an old version of the client, this had to be reverse engineered as well because no public tools allow us to edit the NSEffData.NOS file containing the game's VFX
- Discord rich presence, well, this is just some fancy stuff that shows the amount of players and your character's level on discord

Hope that helps !

@ if not closed, maybe this thread could be moved in a more appropriate section of the forum

well in nosbyte forum you didnt say anything ....

see here:

Quote:
Originally Posted by PR4Y View Post
Ich verstehe nicht wie man soviel Müll aufeinmal labern kann.

Die "Trojaner DLL" ist die DLL zum injecten von z.b. dem Home system, Raid Dmg uvm.

Aber Hauptsache mit deinem Halbwissen irgendwas mal gesagt haben.
mal nicht so frech und normal schreiben kleines
nosspieler123 is offline  
Old 02/02/2021, 13:20   #8
 
erixor's Avatar
 
elite*gold: 0
Join Date: Jul 2013
Posts: 381
Received Thanks: 1,036
Quote:
Originally Posted by nosspieler123 View Post
well in nosbyte forum you didnt say anything ....

see here:
Yeah, we're not using the forum that much tbh, we only use it for patchnotes & tutorials because it's more convenient than discord. This is a known issue, we've been aware since we released our client modifications that it causes anti viruses to flag it as a trojan

The attack on the server is a totally different thing, we're under a DDoS attack since saturday afternoon, it has nothing to do with the DLL.

We are one of the biggest servers running, and we've been like this for more than a year. Given our community and the hard work we put into the server, it would make no sense for us to add a trojan that could compromise the server.
erixor is offline  
Old 02/02/2021, 13:32   #9
 
PR4Y's Avatar
 
elite*gold: 0
The Black Market: 273/0/0
Join Date: Jun 2016
Posts: 878
Received Thanks: 107
Quote:
Originally Posted by nosspieler123 View Post
well in nosbyte forum you didnt say anything ....

see here:



mal nicht so frech und normal schreiben kleines
Bei solchen Leuten wie bei dir, muss man leider frech werden Oder erinnerst du dich nicht damals an unser "nettes" Gespräch auf Discord? =) Aber Hauptsache halbwissen verbreiten, super!
PR4Y is offline  
Old 02/02/2021, 14:54   #10
 
elite*gold: 0
Join Date: Jun 2017
Posts: 349
Received Thanks: 13
Quote:
Originally Posted by PR4Y View Post
Bei solchen Leuten wie bei dir, muss man leider frech werden Oder erinnerst du dich nicht damals an unser "nettes" Gespräch auf Discord? =) Aber Hauptsache halbwissen verbreiten, super!
ich erriner mich nicht an leuten die keine bedeutung haben. Wenn du sauer bist dann lass es woanders raus bei mir bist du falsch

Wenn eine gefahr ausgeht dann wird das auch gemeldet, deswegen habe ich hier einen Beitrag erstellt. Dein Spam ist unterwünscht
nosspieler123 is offline  
Old 02/02/2021, 15:02   #11
 
PR4Y's Avatar
 
elite*gold: 0
The Black Market: 273/0/0
Join Date: Jun 2016
Posts: 878
Received Thanks: 107
Quote:
Originally Posted by nosspieler123 View Post
ich erriner mich nicht an leuten die keine bedeutung haben. Wenn du sauer bist dann lass es woanders raus bei mir bist du falsch

Wenn eine gefahr ausgeht dann wird das auch gemeldet, deswegen habe ich hier einen Beitrag erstellt. Dein Spam ist unterwünscht
"ich erriner mich nicht an leuten die keine bedeutung haben" Scamm ruhig die leute weiter :-(

"Wenn eine gefahr ausgeht dann wird das auch gemeldet" Nur bist du hier in der Falschen Sektion aber nichtmal das raffst du
PR4Y is offline  
Thanks
2 Users
Old 02/02/2021, 18:29   #12
 
elite*gold: 0
Join Date: Jun 2017
Posts: 349
Received Thanks: 13
Quote:
Originally Posted by PR4Y View Post
"ich erriner mich nicht an leuten die keine bedeutung haben" Scamm ruhig die leute weiter :-(

"Wenn eine gefahr ausgeht dann wird das auch gemeldet" Nur bist du hier in der Falschen Sektion aber nichtmal das raffst du

ich wüsste nicht wen ich gescammt haben soll oder was das hier zu suchen hat.
2 negative Bewertungen weil der typ gesperrt wurde, kann ich nichts dafür

aber weiterhin frech sein wenn man kein plan hat du nase
nosspieler123 is offline  
Old 02/03/2021, 10:45   #13
„Ich bin Igneel's Sohn!“



 
Natsu Dragneel's Avatar
 
elite*gold: 72
The Black Market: 654/0/0
Join Date: Jun 2016
Posts: 12,822
Received Thanks: 2,340
Arrow Nostale Trading -> Nostale

#moved
Natsu Dragneel is offline  
Old 02/06/2021, 04:38   #14
 
elite*gold: 97
Join Date: Feb 2015
Posts: 364
Received Thanks: 203
Quote:
Originally Posted by nosspieler123 View Post
das der server attackiert wird. Falls du ein gutes Antivirus programm hast brauchst du nichts zu befürchten
Kannst du bitte erklären, was du damit meinst?
So wie ich das verstehe, denkst du, dass NosByte in ihren eigenen Files eine DLL haben, die den eigenen Server attackiert?

1. Antiviren Programme sind trash.
2. Wie kann denn ein Trojaner unterwegs sein?
3. Wieso ist das hier noch offen?
4. autsch
EPvPAgen is offline  
Thanks
1 User
Old 02/12/2021, 21:49   #15
 
elite*gold: 0
Join Date: Jun 2017
Posts: 349
Received Thanks: 13
Quote:
Originally Posted by EPvPAgen View Post
Kannst du bitte erklären, was du damit meinst?
So wie ich das verstehe, denkst du, dass NosByte in ihren eigenen Files eine DLL haben, die den eigenen Server attackiert?

1. Antiviren Programme sind trash.
2. Wie kann denn ein Trojaner unterwegs sein?
3. Wieso ist das hier noch offen?
4. autsch
ne meine damit das der server von einer Person attackiert wird, aber so wie hier geschrieben wird hat es keinen sinn zu diskutieren.

Internet rambos die viel zu frech sind
nosspieler123 is offline  
Reply

« Args | bot mackerel »

Similar Threads Similar Threads
s>water,trojan 126 or t>for trojan no rb or trojan warrior in BlueBird
09/12/2012 - Conquer Online 2 Trading - 2 Replies
s>water,trojan 126 or t>for trojan no rb or trojan warrior in BlueBird
[N]S>TROJAN TROJAN TROJAN [Constellation/Virgo] [/N]
04/28/2010 - Conquer Online 2 Trading - 2 Replies
S>Trojan Trojan Trojan Lvl 130-130-133 Armor lvl 120 +6 2Socks 2 Sdg's -3dmg Coro lvl 120 +7 2Socks 2 Sdg's Neck lvl 130 +6 2socks 2 Sdg's Ring Lvl 126 +6 2socks 2 Sdg's Blade lvl 130 +6 2socks 2 sdg's Blade lvl 130 +7 2socks 2 sdg's -5dmg DivineRobe -1dmg
S>Trojan Trojan Trojan
02/26/2010 - Conquer Online 2 Trading - 1 Replies
Lvl 130-130-133 Armor lvl 120 +6 2Socks 2 Sdg's -3dmg Coro lvl 120 +7 2Socks 2 Sdg's Neck lvl 130 +6 2socks 2 Sdg's Ring Lvl 126 +6 2socks 2 Sdg's Blade lvl 130 +6 2socks 2 sdg's Blade lvl 130 +7 2socks 2 sdg's -5dmg DivineRobe -1dmg Miraculous Gourd
S> Trojan>Trojan>Trojan [130-130-131] + Items!
09/28/2009 - Conquer Online 2 Trading - 0 Replies
kj
S>a 2nd rb water-trojan-trojan and a trojan-trojan 127-40
10/12/2007 - Conquer Online 2 Trading - 0 Replies
2nd rb wat-troj-troj: Server:Cerbrus Lvl:about lvl 50(he is my friend's char) Name: Troj-Troj char:



All times are GMT +2. The time now is 17:13.


Powered by vBulletin®
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2024 elitepvpers All Rights Reserved.