Get a PM from rcepro advertising an 'Xtrap Killer'?
 

Greetings.

I received this PM on these forums from 'rcepro', advertising an Xtrap bypass 'to help legitimate players'.


It may or may not work (I didn't try it), but various virus scanners definitely detect a trojan. I assume that he (or another account) would have PMed various other people with this, so I decided to just post this as a warning.

Have fun!

-F

I already reported.. and Mods are discussing it. =)

OMG EVIL!

they PM ppl so the mods cant get to them!

i guess they can ban their account...

thx for warning!

Might be a automated program PMing everyone on the member list.

Ignore plox, it's probably a malicious program to steal account information.

OH SHI

*RS flashback*

ew

i didnt get anything though...

or it hasnt gotten to me yet

I got it.

What's funny is that this is actually one of the better written spam-messages.

Reads like something thats actually legible. Kudos for that at least lol.

Heh. I got it too.

Apparently I was chosen as "a select few". ex DEE.

Yepyep - please ignore it. We do not know if it is a safe link or not.

At first I was kind of excited because it was a PM and I don't get a lot of PMs and then I thought it was Zwivix laughing in my face for stealing my James Bomb 2 Championship again and then I clicked it and it was just some stupid ad.

Lame.

stupid people are stupid for wasting their time making stupid things xP

Huh. They PM'ed me twice.

What time did he send you the latest pm?

First: 8:22 PM.
Second: 8:23 PM.

I must've been a test case. Deleted the first, kept the second as evidence.

I just realized this forum still hasn't adapted to Daylight Saving's Time...

O_o

Yay for America and early DST settings.

Do you have it set to automatically switch with DST? I live in CA, which has DST, though I can't remember if the forum was correct. In AZ now, which, oddly, doesn't have DST. Well, it's correct here...

Yay! Spam tester!

Didn't you read the first post, and look at the attached image?

NOT SAFE

I got it too, I was in the process of screening it for you guys but it appears that I saw this thread too late.

I got it too, good thing i didnt open.

Of course, one should be suspicious when the sender only has 1 post count... and he didnt post in MoS and doesnt have a guild either...

Dont Throw Stones.
 

this release was packaged with armadillo custom 4.4 which causes a few lesser anti viruses to have false positives. truth is a lot of anti viruses are poorly coded. did you stop to think for a minute why every single one of those anti virus scanners that reported something, reported differently from the next? that would be because, the anti virus doesn't know what the hell the program does. I'm sure they probably don't see a lot of executables that run and inject code into other executables that often for legitimate purposes, but thats how xtrap killer works. it injects code into fiesta when running and that is what causes the real xtrap not to run.

if you don't want the fix don't use it. but you shouldn't accuse it of being malware. if you knew anything about PE packagers you would already know this. I'm sorry that a few ignorant people can ruin it for others.

Team RCEPro writes fixes not malware.

if you want assurance, go back to one of those mass scanning websites you used to mass scan and read the part up top where it says packer.

what does it say? ARMADILLO go figure.
maybe you should do a google search on false postives due to executable packers?

false positive GG.

Virus or not, you are not allowed send mass spam member's pm boxes.

http://www.fiestafan.com/forums/anno...nt.php?f=6&a=1

Plus, we do not promote file modding of any type to Fiesta on FiestaFan, and that includes disabling X-Trap.

Do not do it again.

Bring out the steak and A1 Blahs!

I still wouldnt trust it, firstly, a reputable(?) company would post a link to their website. Secondly, there are some typos, grammar, and punctuation errors, which shows me that whatever company this is, its definately NOT a professional one. Thirdly, do a google search for "RCEPro", and you will not find any official webpage. You will, however, find some junk, among which is something written in a foreign language and with caps.

I'm not stupid, as you apparently are - did you read my first post? I was accusing nothing, I specifically said that it may or may not work. I was merely warning that it detects a virus, which it indeed does.

Having said that, I still think it probably is. For the reasons NotMyName gave.

*NotMyWay

Professionalism
 

thats because RCEPro isn't a corporation and I'm not perpetrating like we are one its a group of crackers and coders. the underground scene who bring you cracks for games, and fixes. That is why we have no website. nor does any real cracker group. its to protect the safety of the members. because releases can violate terms of service and often do.

you people are far too self righteous so i give up. cant even help you close minded people. which was my original intent

once again tehfusion, you are too stupid/immature to even comprehend?
just because i virus scanner goes of it doesn't mean i file is in fact a virus
the only shoddy virus scanners that say anything, said all different things.
they simply cant understand the nature of a program, which granted on an asm level may look malicious due to the fact that it injects code into another executable's memory space, not something a lot of programs do.
so due to the fact that the a/v doesn't understand, it just goes. oh this must be some kind of generic trojan or something! doh!

it was an attempt to help free fiesta players who were stuck unable to play fiesta due to xtrap, but once again ignorance wins.

have it your way. keep x-crap.
ill still have the fix for anyone who needs it, but wont try to offer it to people. if you need the fix please be mature and don't presume to tell me what i am doing!

rcepro, the point is not whether or not you're helping people, it's the lengths that you went to do so. You spammed people's inbox without knowing whether or not they wanted it, which goes against the rule that Blaaaaah's posted. *cough*

Anyway, I'm gonna go ahead and lock this thread because this issue is already solved. PM a mod or make a thread in the Talk With Mods section if you recieve any more PMs from rcepro.