punks unbusted ???? I got Hacked badly it seems


(JohnM) #1

hey people something happened as I joined a server, something started downloading through the game autodownloader, it contained the words “happy chicken” and I thought it was a map downloading, but no … when the download finished the browser reported “punks unbusted” or unpunkbusted" I’m not sure which. and now ET has basically … a virus… it resets to default values each time I go to the main menu or the server browser and punk buster is f’d up and will not update itself and will not allow me to connect to any server… I think there are also (obviously) some new bad files in ‘ETmain’

is there supposed to be a file --> cgame.mp.i386 <-- and --> ui.mp.i386 <–

I dont think they are valid files and are hacking up et main. the offending server was @ 205.209.146.120:2796 … I’m 95% certain that was the server, it looks full with alot of players and legit. muthapussbucket.

gonna reload ET now will save copies of offensive shiot if anyone can track it would be great.

m3z


(SCDS_reyalP) #2

The only thing that server made me download was temple final (a map).

At least one of the sites mentioned in the motd seems to be cheating related, and the server is has punkbuster disabled, so I would avoid it in any case.

cgame_mp_x86.dll and ui_mp_x86.dll are all normal parts of the game, and were unchanged when I connected to the server. (you will also find qagame_mp_x86.dll)

The md5 sums of the stock dlls are:
D59ED8564BC71938770F43C265321E9C cgame_mp_x86.dll
9237276B7642A6E1FADF81AD63F9F384 qagame_mp_x86.dll
6CCD36E04ECFEF228C0194F7D75FAD39 ui_mp_x86.dll

If yours differ, you should be concerned. You can find an md5 utility here:
http://www.fourmilab.ch/md5/

If you find the dlls have been replaced, I’d be interested to see them.


(JohnM) #3

i guess it’s gonna be a bit of checking for me and I’m sure that I am capable but probally not tonight, thanks for the input

I’ve reloaded ET and all is well again, but I did save the corrupt ETmain to check further.

aight thanks for the input

John M