PvP Server♔Cap130♔Skills130♔Baghdad♔Free Silk♔ConstFW♔D14 FB

[retared01]

-What's the new in our server :-
- U will spawn level 130 & sp 9999999 & 2m gold

Spoiler!

- Fortress war enabled ( bandit & jangan & Const & hotan )

Spoiler!

- All regions enabled + Baghdad town full working

Spoiler!

- Free silk for all chars (please read the explain below)

Spoiler!

- New D14 design to make the game more fun

Spoiler!

- New Uniques 125 ~ 130

Spoiler!

- All teleports u can teleport from dw

Spoiler!

- New skills ch 120 ~ 130 , and eu 120 ~ 130

Spoiler!

- New thief avatars

Spoiler!

- New areas

Spoiler!

- New job system , all temple mobs lvl 130

Spoiler!

- New avatars

Spoiler!

- New quest for the rank name

Spoiler!

- All Alchemy inside the Npc

Spoiler!

- All alchemy 100% succeed rate

Spoiler!

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
[B][SIZE=150]-New arena coin system[/SIZE][/B]
u can buy alot of useful things by arena coin like :
- 20% damage abs - inc
- reverses
- hp & mp 4100 +
- global chatting
- all kind of the elixirs
- advanced elixirs (shield & pro & weapon & accs)
- Devils & Avatars
- Etc ...

Spoiler!

u can get the arena coins from :
- GMs events
- Killing the arabian uniques
- Capture the flag Every 1h
- Arena Every 1h

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- explain free silk :-
- We decided to give all users free 7000 silk to build ur own char on our server and to have a chance to raise up your character inside our server and make plus + for ur weapon and ur set
- This free silk for limited time 20 ~ 30 days we will make notice on our website & facebook page
- all the items u bought by silk will remove after this period (ONLY THE SILK ITEMS) (NOT UR SET OR ANY WEAPONS)
- after this period u can donate for silk OR u can earn free silk by ur online time , Example : if u open 1h = 3 Silk

We made this change to give u chance to raise up ur char fast


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-The new skills improvmence
Chineese Skills :
- all builds now is balanced and can face the europeans chars
- glaviers now have a reflection , bladers have a good defence and attack , bow increased thier attacks and defence , also the forces like fire & force & Light & Cold , you will discover alot of new skills

Europe Skills :
- some new edits , and some buffs for the wizzard to increase his defence for a little , and some passive buffs for crossbow and dagger , and also the warlock , you will discover alot of new things while playing ...

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-Finally the Links
<< Links removed due to high risk of infection -XMoshe >>
Hint :- we have Direct Link FTP on download section above and have : (data & particles & media & map) , single file downloads to make it easy for u to play our server

[XMoshe]

Is this the same server as your other thread? If so I'll go ahead and lock this one and kindly ask you to not post the same server twice. If it's not then everything is fine.

[retared01]

Is this the same server as your other thread? If so I'll go ahead and lock this one and kindly ask you to not post the same server twice. If it's not then everything is fine.

i closed the old one

[Bartic]

It does look like the same one.

[retared01]

It does look like the same one.

but the server now free silk

[XMoshe]

Alright I locked the other. Not sure why you couldn't just change the first post with that 'free silk' but thats fine haha

[Bartic]

He probably opened a new thread because we argued about files in the previous one.

[XMoshe]

Very likely. Lets not do that here then ^^

[Toast]

Nice virus.

[XMoshe]

Nice virus.

Is that true, did you scan his client? Or did you just post that randomly. If you can show it has a virus I'll remove the links etc. if not then tsktsk bad Toast.

[Toast]

Nice virus.

Is that true, did you scan his client? Or did you just post that randomly. If you can show it has a virus I'll remove the links etc. if not then tsktsk bad Toast.

I'd have to download it again, which I don't mind doing if I need to. Minute I ran his client Avast blocked and deleted it.

I still have this, if it's good enough for proof.

[retared01]

Lol what's the **** !!! the client is clean and before i upload it , i scan all EXEs with virustotal and there's no any virus !!!

[Toast]

I'm not a liar, and I'm definitely not an idiot. So I beg to differ.

Nice lie by the way, the max file size VT can scan is 35mb, your data.pk2 is somewhere around 2gb if I remember right.

[Bartic]

^He said he scanned executables.

[Toast]

Oh yeah, missed that.

Either way he's still lying, soooo.

[XMoshe]

What exactly is it? It could be harmless.

None of the downloadfiles are working for me so unfortunately I can't check them myself.

[Toast]

What exactly is it? It could be harmless.

None of the downloadfiles are working for me so unfortunately I can't check them myself.

Haven't the slightest clue to be honest, if there is anything, it isn't in the executables, it would have to be in one of the pk2 files. The only description Avast gives is that files similar to that one have a history of being malicious, but if that were true every client would get tagged.

In the end it really doesn't matter though, doubt anyone from here will end up playing.

[XMoshe]

I'll leave it up then. I know more servers, even the official one, gets flagged by some antivirus'.

[Toast]

Most servers can justify why though, eg; Ludo said it was their encryption. But yeah, doesn't bother me, just decided to try the server for the heck of it and stumbled on that by accident.

[XMoshe]

I know I know ^^ Thank you for mentioning it

[XMoshe]

A concerned SRF member contacted me last night over the files from your server. I quoted the entire message below:

Yea I figured as well since the server was real, it seemed unlikely, but can't say for sure.

Just know that I found like 1300 instances of that as well as "ramnit" -.-", then redled their client to scan and it popped up the same name. http://files.fm/u/ovmkuvs

example from the log.

Code: Select all

C:\Program Files\Adobe\Adobe Bridge\AdobeDocMeta.dll   Win32/Ramnit.A virus
C:\Program Files\Adobe\Adobe Bridge\Adobelmsvc Installer.dll   Win32/Ramnit.A virus
C:\Program Files\Adobe\Adobe Bridge\AdobeOLS.dll   Win32/Ramnit.A virus
C:\Program Files\Adobe\Adobe Bridge\AdobeUpdater.dll   Win32/Ramnit.A virus
C:\Program Files\Adobe\Adobe Bridge\AdobeXMP.dll   Win32/Ramnit.A virus
C:\Program Files\Adobe\Adobe Bridge\AGM.dll   Win32/Ramnit.A virus
C:\Program Files\Adobe\Adobe Bridge\ARE.dll   Win32/Ramnit.A virus
C:\Program Files\Adobe\Adobe Bridge\asneu.dll   Win32/Ramnit.A virus
C:\Program Files\ATI\Technologies\ATI.ACE\Core-Static\atiamaxx.dll   Win32/Ramnit.A virus
C:\Program Files\ATI\Technologies\ATI.ACE\Core-Static\atishlx.exe   Win32/Ramnit.A virus
C:\Program Files\ATI\Technologies\ATI.ACE\Core-Static\CLIStart.exe   Win32/Ramnit.A virus
C:\Program Files\ATI\Technologies\ATI.ACE\Core-Static\DXStress.exe   Win32/Ramnit.A virus

Went to scan the exe on virustotal, and it was already scanned a couple days ago apprently.
https://www.virustotal.com/en/file/6ed0 ... /analysis/


Found a couple other things, apparently Sro evolution files could be infected.

Spoiler!

http://webcache.googleusercontent.com/search?q=cache:BRghSd-sy0EJ:mpwr.biz/silkroad-online/43870-almost-all-new-sro-servers-client-infected-ramnit-trojan.html+&cd=3&hl=en&ct=clnk&gl=us

The **** is going on?
In the last 2 days, I was bored and searched for some vulnerable servers to have some fun (exploitable ports open, etc.)
As I downloaded the clients, my antivirus always alerted me, but I ignored it.
Today I have noticed that after I started silkroad.exe, it created a new file called silkroadSrv.exe, then sro_client.exe created sro_clientSrv.exe
Now over 3000 files on my computer is infected with two variants of Ramnit, Win32.Ramnit.A and Trojan.HTML.Ramnit.A.

I searched for the word "ramnit" in the Silkroad section on elitepvpers and these servers were among the results:
Ayos Online
DragonSro
RisingRoad
EvaSro
Holigans Online
Revenge Silkroad
PxSro
ClashSro
Zephyros Online

And it seems that Evangelion (a tool released by Chernobyl) is also infected with this virus.

About Ramnit:
Quote:
Ramnit infections have really become quit nasty and dangerous. We could attempt to remove it, and we have had some success in the past, but recently it has become even more trouble to remove. It is really safer to just bite the bullet and do a clean reinstall.

The problem is that the damage caused by this infection really makes a PC unreliable/untrustworthy. PE file infectors like Ramnit, Virut,.... etc can infect all executable files (DLL, EXE, SCR....and many more and also HTML). These infections can open back doors that truly may compromise your computer and your security. These backdoors could allow a remote attacker to access and instruct the infected computer to download and execute more malicious files.

In many cases the infected files (which could number in the thousands) cannot be disinfected properly by your anti-virus or by other scanning tools. Also when disinfection is attempted, the files often become corrupted and the system may become unstable or irrepairable. The longer Ramnit remains on a computer, the more files it may infect and/or corrupt so the degree of infection can vary.

They may not even know its infected if so.
http://www.elitepvpers.com/forum/privat ... ation.html

I see this as enough proof to take action. So unfortunately I will have to close the thread. Now I'm not saying you posted here with the intention to steal our users information. As said in the quote you might not even know your files are infected. But since the downloads are infected I will have to close the thread. If you want to discuss this in further detail feel free to send me a pm.