Nightmist Online Forum (http://www.nightmist-online.co.uk/cgi-bin/YaBB/YaBB.pl)
Nightmist Online - Please read the terms of use before posting here >> Discussion Forum >> Free Crits?
(Message started by: Old School Freaks on 04/26/03 at 22:10:21)

Title: Free Crits?
Post by Old School Freaks on 04/26/03 at 22:10:21
 
 Today I logged in my account to take the ole thieves on a stroll and was shocked to find crits with names like Moonbaby, Swift, etc...
All of Swifts crits popped up in my account. 2 FA Founder crits, a few arches and a nice chunk of gold on a few of em. I did what I thought was best and logged on Momba and contacted staff. I was advised to /bug it.
After I logged Momba I logged into my account several times and his stuff wasn`t there. But non the less that was way way uncool. This from what I hear isn`t the first time something like this has happened. As I understand it Ana(Maesse)had all her crits deleted as a result of something like this. And I believe ICP had it happen also.
I was given a file name (csrss.exe) by a player in game. Said it was something like an auto logger program or something like that. Either way I deleted the program and my computer still runs fine so no big lose.
Does anyone have any info on the file named csrss.exe? I found it located in my Windows file.
JLH is this a problem that you as God(Game Operations Director) can fix? Man I'd hate to have my account hacked. I can`t say forsure, but when I first started playing this thing I woke up without 2 hallys,a set of spiked and all my gold. That was like a year ago and JLH convinced me at that time that in some way it was my fault. Well I`m not a n00b anymore JLH, so would ya care to give a shot at explaining this one?

Title: Re: Free Crits?
Post by Apple on 04/26/03 at 22:23:29
Ok, dude..


How big is this file you have got? the crsrss or whatever, from that if its about 6kbs you are ok, and is there only one type of file that is this? Because this file holds windows and something to do with subsystem graphics, The main problem is, Minions keylogger is named the same ive heard, do not delete anything yet, if you could post the size of the file you know of and any other files you have, don't open them or any other exe of any kind just incase.

Title: Re: Free Crits?
Post by newb on 04/26/03 at 22:26:25
As far as I remember, the actual keylogger is 40-60 kb in file size and has a little icon of one of those things they use in movies. The things they snap and say action with.

Title: Re: Free Crits?
Post by Pandilex on 04/26/03 at 22:40:42
the file you mentioned above is a VIRUS and should not be downloaded at all. If a person wants to send you this file or it comes as an e-mail attachment, delete it IMMEDIATELY.

It is advised that you always run a virus scanner on your computer to make sure that incoming files are not infected, and there are many free ones available if you do a search.

Note that the csrss.exe is actually a file that comes with windows, and the virus has the same name as this to try to hide itself - if you have the file already then it is probably nothing to worry about (as it is a vital windows program and deleting it may break your computer entirely), however it is always recommended you run a full system sweep to make sure.

Never accept files off other people related to nightmist, whether it be programs claiming to auto-roll characters, or interface with the game in any way - don't even accept the installation 'setup' file. Any of these could be viruses in disguise, so always download your files from our website directly rather than from other players.

Title: Re: Free Crits?
Post by Old School Freaks on 04/26/03 at 22:58:02
* scratches his head

 I have only excepted files from 2 players in this game. Chris and Jessie. So is there another way this virus or whatever it   is could have made it on my puter?

 Currently I have 2 files it looks like named csrss.
One located in C:\1386 (file size 1.67KB)
The second is located in C:\WINDOWS/SYSTEM32(file size 4.00KB)
 Both of these files where last modified on 8/18/2001. That was right about the time I bought this puter. If a file is opened or changed isn`t the date it was last modified changed to the current date?
 Anyone got any Idea when this minion whoever started sending this thing?

Title: Re: Free Crits?
Post by Zephie on 04/26/03 at 23:53:59
Momba, did you visit any websites that asked you to install a specific exe?

Title: Re: Free Crits?
Post by newb on 04/26/03 at 23:58:03
The file that is the keylogger is a .exe . The other ones are some sort of system file with a different extension I believe. Maybe something like csrss.vxd or csrss.inf .

Title: Re: Free Crits?
Post by Matrona on 04/27/03 at 02:42:30
Actually it is Csrss.exe which stands for client/server run-time subsystem. More informatino pertaining to this particular file can be found at this site:
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/q263/2/01.asp&NoWebContent=1

Do not delete that file as it is very important for the PC.

If you suspect you have a keylogger program, I suggest going to http://security.symantec.com/ssc/home.asp?j=1&langid=us&venid=sym&plfid=23&pkj=TRKBPJUIYCZRWEJGSSK and doing a virus/security scan on your PC.

NOTE: The one in my windows system32 directory is also 4 kb and I KNOW I don't have a trojan or virus. Just my opinion of course.

Title: Re: Free Crits?
Post by Keldon68 on 04/27/03 at 02:45:07
Today i ran a full systam search for the file, and my computer found 2 copies of the file. I deleted one, but the other says it couldnt be deleted cuz it was currently in use.

I talked to JLH today on MSN, and he told me a few ways to delete it. One would be a virus scan, another being send to recycle bin. Well my virus scanner(norton antivirus) wouldnt find it as a virus on my computer, and it wouldnt let me send one of them to the recycling bin. Soooo, i ran an ms dos prompt my uncle gave me and deleted the file from the computer.

Also my friend programmed a special sort of ban type for files. This ban stops a certain file from ever being downloaded onto the computer again, unless the ban file is removed

All in all, i got the worms out of my computer and all is well. Thanx again Jon and i hope minion burns in Jahanna :D LOL

Title: Re: Free Crits?
Post by wonderful_nightmare on 04/27/03 at 08:06:11
ok hmm didn't read all replies so this might have been said before :D

but it would be nice to know who send you the file :D


Title: Re: Free Crits?
Post by newb on 04/27/03 at 08:55:23
MinionNwN/Limp2skate18 on AIM.

Title: Re: Free Crits?
Post by Defcon on 04/27/03 at 09:12:15
i really hate to burst all your bubbles here but i have a few points to make
1: Any file downloaded and ran on your computer can be set after the application has been run it installs it self under a different file name

2: Now with start up methods then can be installed and auto start in the following ways

Registry - Run
Registry - Runservices
Win.ini
System.ini

and many others
now theres files can literrally dump copy and replicate them selfs in any part of your hard drive and even store the selfs on you virtual memory and install and replace them selfs on the start up and shut down of your machine worse still they can write them self to your boot sector of your hard drive

no the usualy place is in the windows directory or system directory these files will go to to hide but can and usually are set to go else where depending on the user and how they set it up it can be vitually impossable to find any of these files when there installed

if you get one chances are you wont even know it till something happens because half your virus scanners i see you all saying you use suck and nay build in firecracker to any of these trojan will blow your anti virus out of you system as soon as u open it disabling them deleting them and remove there protection only word of advise i can give you is
DO NOT ACCEPT ANY FILES FROM ANYONE NO MATTER HOW MUCH YOU TRUST THEM OR HOW WELL YOU KNOW THEM BECAUSE IT USUALLY YOUR SUPPOSIDE FRIENDS THAT INFACT YOU WITH A TROJAN/VIRUS/WORM

Title: Re: Free Crits?
Post by wonderful_nightmare on 04/27/03 at 11:05:39

on 04/27/03 at 08:55:23, newb wrote:
MinionNwN/Limp2skate18 on AIM.


wasn't minion the one with the keylogger?



Nightmist Online Forum » Powered by YaBB 1 Gold - SP 1.3.1!
YaBB © 2000-2003. All Rights Reserved.