IS THIS A JOKE?!

by MamLas • 25 Sep 2008, 13:25 • Journals
SOMEBODY DOES NOT LIKE ME!

I played like about 1h ago on public Wolfet.pl @ pukawka.pl, played like fucking lovely 15 mins and when the map finished I got kicked for nex_settings.src

needed to check what's going on, first I thought that somebody spoofed my pbguid ('cause heard that is possible now) but when I found this I'm almost sure that somebody exploited my pc or something

Scanned PC - found nothing
Searched HDD - found 'few' files
check this shit out:
http://img146.imageshack.us/img146/1050/27869948ia1.jpg
http://img246.imageshack.us/img246/4683/96470768yo8.jpg

the funniest part:
I loved rickroll srsly, it was always funny for me but not this time
http://img213.imageshack.us/img213/294/75075953ng2.jpg
http://img213.imageshack.us/img213/3027/65382328ev9.jpg

I need a solution to this problem. DISCUSS!




I'm angry like the guy from this link
http://www.youtube.com/watch?v=sAftehrdBfo

EDIT:
I forgot about pbbans link:
http://www.pbbans.com/mbi-viewban-409a8099-vb91875.html

EDIT2:
files are inside every folder C:\WINDOWS\ excluding "Temp" and "System32"

EDIT3:
I cannot delete them :|

EDIT4:
yeah try to cheat with nexus which is dead for a long long time... and play 15 mins at a server with it, wish you GL

EDIT5:
I can easly delete the files now but they are replacing back with the same date...

EDIT6:
fixed / delated
Comments
85
▼
MamLas 25 Sep 2008, 14:29
sorry for my engrish now, I forgot how to write in this language!
▼
qpr 25 Sep 2008, 14:30
HAHA :DD
▼
Gabt 25 Sep 2008, 14:30
pwnt pwnt
▼
MamLas 25 Sep 2008, 14:31
just check the screenshots
▼
TEKN0 25 Sep 2008, 14:32
you could of made that rick roll file ur self 0_o
▼
MamLas 25 Sep 2008, 14:34
then tell me how, that'll be helpful in the future
Parent
▼
Deann 25 Sep 2008, 14:32
No u dont.
▼
Kiewan 25 Sep 2008, 14:34
are you polish?
▼
MamLas 25 Sep 2008, 14:37
as you can see
Parent
▼
Deann 25 Sep 2008, 14:37
and I wont be by u anyways!
▼
VerSus 25 Sep 2008, 14:37
hahaha :DDDD
▼
westi 25 Sep 2008, 14:40
CSI:Crossfire

I'll tell you the whole story:

You've been playing on a public for a while, then you thought "hey, it would be so much fun to pwn these n00bs little harder, let's check if there are any public undetected bots!". You did a little research and downloaded nexus, advertised as undetected by pb. You were probably thinking "I'll do it just once, don't wanna get CB banned". So you start your brand new nexus, do some pew-pewing on the server and BAM! PB kicked you for a MD5Tool detection! FFS! I'll get CB banned fo sho, killerboy won't let this slip. I better think of something rly n1ce. So you came up with this story. You set your system clock do 2006-06-06 06:06, created a .txt file naming it nex_settings.src about 100 times in your OS directiories, did the file searching thingy and voilla. "Someone h4x0r1z3d my PC, halp!".

:D
▼
MamLas 25 Sep 2008, 14:44
you should write a book cause your stories are pretty well constructed ;)

EDIT: then need to know hot to copy 68 files in 1 sec to separated folders, tell me plz
Parent
▼
westi 25 Sep 2008, 14:49
one minute ;)

Modification date is set to blabla 06:06

You can change your system clock as many times as you want.
Parent
▼
MamLas 25 Sep 2008, 14:55
try to do it and then show your results here because I want to see how does the system clock works (Modification Date 2006 6 June 2006, 06:06:06)
Parent
▼
westi 25 Sep 2008, 15:03
just try to live with the fact that you are busted
Parent
▼
MamLas 25 Sep 2008, 15:05
I won't
try to prove that fact and make 68 separate files in the same second even with the clock changing which won't works cause antivirus says that I'm trying to fake their trial period
Parent
▼
westi 25 Sep 2008, 15:19
it's easy using a batch file + 4-5 tries at most :)))
Parent
▼
Xo 25 Sep 2008, 14:40
Lol harsh xD
▼
w0nd3r 25 Sep 2008, 14:42
pb|gv strikes again, wohoooooo
▼
anzz 25 Sep 2008, 14:44
Maybe this link helps
▼
alhric 25 Sep 2008, 14:44
something very similar happened to me... check my journal from yesterday

good to know that i'm not the only one :D

e: after acutally reading your journal it's not that similar tbh.. so nvm
▼
grzesiek 25 Sep 2008, 14:46
IT WAS ME
▼
MamLas 25 Sep 2008, 14:50
BAN HIM BAN HIM ; D
Parent
▼
topher 25 Sep 2008, 14:47
That server isn't running the 2.60b patch.. so there's your answer.

EDIT for those who don't know why the 2.60b patch exists.. without it the server can place any file anywhere on your pc.

Or you cheated.
▼
Deactivated5287 25 Sep 2008, 14:51
no fuckin way! there are no cheaters in et
Parent
▼
MamLas 25 Sep 2008, 15:09
can you explain how it works?
Parent
▼
Gabt 25 Sep 2008, 15:21
Hand me the fucking key u cocksucka, wadafuk
Parent
▼
topher 25 Sep 2008, 15:55
In English please!@*%#
Parent
▼
MamLas 25 Sep 2008, 15:22
it was my first game today
yesterday last I played on railgun at random german server
do you think that something happend to me there?
Parent
▼
w0nd3r 25 Sep 2008, 15:32
ye, the germans are at fault for it, like always :D
Parent
▼
MamLas 25 Sep 2008, 15:34
I just played on german server ; D dunno what was happening there
Parent
▼
topher 25 Sep 2008, 15:53
No it is the polish server that is unpatched, that is where it is likely the exploit was abused. I'm not in the habit of giving out information on how these things are actually done though, sorry.
Parent
▼
kazzam 25 Sep 2008, 14:57
There is no solution at all.
No one will trust you and you'll go to jail, or get a pbban.
All the same.

I'm sorry for you, if you were honest, but there's no way around that ban...
▼
hannes-` 25 Sep 2008, 15:09
dont run et as admin account :)
▼
panics 25 Sep 2008, 15:14
format
▼
MamLas 25 Sep 2008, 15:18
yah format is the best for every problem!
Parent
▼
panics 25 Sep 2008, 15:19
Now you're catching on! :D
Parent
▼
pala 25 Sep 2008, 15:25
do a system recover and wish pbban will remove your ban with your proofs
▼
MamLas 25 Sep 2008, 15:31
yeah I'm preparing as many proofs as it is possible
Parent
▼
pala 25 Sep 2008, 15:32
save them in a usb but first imo do a fast system restore so u will lose all the files
Parent
▼
MamLas 25 Sep 2008, 15:35
yes, thanks I would do so
Parent
▼
loctarar 25 Sep 2008, 16:13
I wouldn't do that first. Do you have a link to the PB kick?

LE: Found it. Make a backup of the file and then download the MD5 tool from the PB site. What you have to do is to prove that YOUR file has the same signature as the one on the PBBANS link. If there is a mismatch you can't do much.

LLE: http://www.evenbalance.com/index.php?page=md5tool.php Here you can find info about it. Read it carefully and using the information provided by PBBANS see if you get the same result.
Parent
▼
MamLas 25 Sep 2008, 18:36
it might be hard to do cause there are many files to check
Parent
▼
loctarar 25 Sep 2008, 20:36
It's the same file copied dozen of times. Just send a copy.
Parent
▼
MamLas 25 Sep 2008, 20:58
I don't think it's copied (my antivirus isn't that bad to let somebody to do so), it's probably created by the exploit with the concrete text but I don't know that I have this still...
well I can try, it won't kill me ; D
Parent
▼
loctarar 25 Sep 2008, 21:07
You got kicked because you have a file containing same information spread all around the Windows folder. That information is summarized in a 16bytes code. If you can prove that the file you showed to us (containing bullshit and no cheats) has the same summary as that displayed on the PBBANS kick I guess your ban can be lifted. Thats why I ask you again to post the file on a site and let me check it.
Parent
▼
MamLas 25 Sep 2008, 22:33
I'm finishing the problem with pbbans staff, thanks for your help
I <3 U!
Parent
▼
fredd 25 Sep 2008, 15:34
retarded excuse
▼
GoodGuyGary 25 Sep 2008, 15:36
when it happens to me, i will believe these stories.
▼
pala 25 Sep 2008, 15:38
i think its possible to check via yawn when he last played / seen, if yawn says he was in around the time the files got entered / "modified" than he has some more proofs
+ tropher also said on a none patched 2.60b server can enter any file anywhere on your pc, i dont think you will play on a none 2.60b server, so i doubt it will happen to u / anyone here
Parent
▼
GoodGuyGary 25 Sep 2008, 15:39
its kinda bullshit cos he had those files since 2006, and he got kicked after 2 years?
Parent
▼
loctarar 25 Sep 2008, 15:52
http://msdn.microsoft.com/en-us/library/ms724933(VS.85).aspx

Creation date can be modified programmatically.
Parent
▼
MamLas 25 Sep 2008, 18:50
had? they are randomly created like those aim=666 things
Parent
▼
MamLas 25 Sep 2008, 19:20
wait, programming an exploit for you
Parent
▼
MamLas 25 Sep 2008, 15:38
I would prepare the proofs and appeal the ban later
now I'm going to the hospital... bb
▼
gari 25 Sep 2008, 15:46
wut? why hospital?
Parent
▼
MamLas 25 Sep 2008, 21:08
I had to take off my seams
Parent
▼
gari 25 Sep 2008, 21:11
o: ah keke
Parent
▼
saKen 25 Sep 2008, 15:47
yeah 3 month ban cu
▼
nsd 25 Sep 2008, 16:31
Satan hacks poland.
▼
INSTi 25 Sep 2008, 16:45
just wasted 5 minutes of my life reading this, hoping for something interesting to happen
▼
HansoO 25 Sep 2008, 17:11
wont solve your mouse-problems anyway :(
Parent
▼
INSTi 25 Sep 2008, 17:31
my mouse is fine tbh
Parent
▼
HansoO 25 Sep 2008, 17:32
oh. thought it was that. but its FPS then, right?
Parent
▼
INSTi 25 Sep 2008, 17:38
http://forums.nvidia.com/lofiversion/index.php?t10368.html

Gonna bring my old ati x850xt-pe to a shop and let them reflash it. Accidentally flashed the wrong bios, had like 10 on my desktop :/ Problem should be solved then :P
Parent
▼
MamLas 25 Sep 2008, 22:34
FUCK! I cannot join to my own server cause it's streamed :|
▼
k1tT 26 Sep 2008, 12:07
lol. owned!!!!!1
Parent
Back to top