phishing for cd-key?

Locked
dzjepp
Posts: 12839
Joined: Wed Mar 28, 2001 8:00 am

phishing for cd-key?

Post by dzjepp »

*puts on tin foil hat*

After playing on a few servers, and I'm not really sure where exactly it originates from, a 2kb 'qkey' file gets put in my baseq3 (different from 'q3key' of course). Inside there is a bunch of moon speak.

Code: Select all

鯷퉋䘳剰팡䐪⮣受㹛㰫넓맗蔻␺큎⑘⪡䋚轟榨䂤䏣ᖈ뺂蠁㤲ࠓ叽쏍蟶幭䔇қ흽樒௟힚퀼뼡㓙욽檬ᇕ⟢ک栂홖ጢ녚쓰☿逇襢靖훈ᜑ픀勊苮葉訕격倮욤?鳌츫ᑦ⹾掷栆襫촘菧ᱤⳎ裡僡⳷㪚輰橮ꀺੂ짦倻硬倐䴞繛았?㱃⻟豣䣱퍴蝟鄟悢㫓ꦦ斣Ჩ똚ᾦ⅘Е퉤㇕䁉鴛ꪨ䝡讗⑊ự脕뱓풪嫪穛귁黛딴좞홞ꬤ찲犯蚨뀲㝹婇Օ박䏖⤑鑵荡ⴢ뢵绐濌ۨዎ常켕㨽潕а㵁톲㖘몺좢ዥ粵壑뱥琫㓇垓돣켇鲕嘊戍Ü㿰븢ᑍ묚襾줴锯冸툰臀庾뿪鄩沊莍稾竲ﹲ秗惂㔼귮⅑흌䌪?腂꘲䱠硞䟯๻硉꺮픳⫮뮑칕 힮㤒ఝ?㖒譒뺘ꯅ犃ň꒔顅녅厡羕ẽꔻ祫蚲쐻콛މᳲᫎ䨔留헭꺰䜆뜿⦵ꥐᇲ㐊钗錉쑸붕嫹⨪ṕ섹愽˪칅嶬װ梓슄칪⟀⼥ቿ⢴컒瀀굽锋䢆鄼찺䲛莏뵋㛺쎏䙼❻ᐊ蟫ꉸБ硋颁ﷸർ㝝搛얘팳섃︗䭮⢕涐Ⳉ谓㾯廓떀絎㽫칸㞧虽Ѵﬧ⋪溜还펅膯䕕䢨管ⴿ婶蛆ಧ鿼騦遳䮤龀䀨௯腇ﵹ噗䃇襨౛裴Ὓ퐣觐湳戣쿥ು儏꜓ρ钒袴羸燗骅꧄⾾ℵ䝍鈤䅆䎊衞噻썋駎๢Ŀ蜢栿ꄑ캲螉ꄼ䏬凘ᆁ㉿牯糞ꕪ㌇䉳᝝횙촦䭄ג镸ꡑᇆ떏৥ꏵ纕㘽ࠊъ慞卮䫬所⮟毵ꇴ铤㍣땓醨ᢢ絯㔦ꎖဨ塀贵쓛く궳ޓ暓䱓䖛ɜ邛팎ᚏﳱꬸგ盘劖靬럒爛ⅾ㤫溶᪎膮嗱⬵醱䄃㰡铙➽윝죱ᒕ蘟ᕡ㣍篰廚͒ᗼ薁墧囙並蹤脦䎍ፃ⛝섛㊬煔弉횷毳㘒ꒅ炭脖뇹⯩杞銐肤ꡅ桳㶫狮巺ཧ鵼෵爱ﰡ잷朐橄跤鷛䤌翓옙⤳隆鱻綊郙ᾄ蕫恸异젵ꚃ囚䮎꙼䓓仙ퟢࢊ䘳莰箛缐䂒㢍품㕢ײַଃ㓩贇?曎匫ӥ뢐踅Dž᲏ꑬ⢟甩炉뽡鳱犏㔯䚇떑芛挛㌫൷䛛籅㞖ꩋ⨌줰Ȇ﵋쐜덌⦘ﳋ㔓槖ﮇ井蛮ꑾ诸匱俶䔗睸理湾阛䙿÷ᗁ︖璲ᕛಂᥞ↔拈䌰ݛ蠼򨯚蚿୉鲐鹨嶘쮳荇뎪唕䒛煗ꧦ㛴?ꚷ뾳≶髌娅먿㡾꿈刟ᓰꛫ潥ҁ劺⛇讇䬜Ꮤ㌦ꊚ樠ݬא衢㨍᫰ⵛ὆參녗ꃠ縦㸼뿑顈枋勗麎?觷騢㸵ఔ몙㹄⒬폯埲荘ঘ贌ﺄ㏕줇丄똺濘וּ᣻銙竟䍚漀旄?ጄ뮲䮻ᬤ쯶隘絇造츂縎䱽榉ྚ孜悲쏪瑷?뽄㩎삤嵠寴죌멠킥㍃ퟚ恂舥뮑㞒윌粑덮葞꓃䭍뺢훽䕏뵋䓜걺小䲵뽻䉇缛ۧ誖鹑䣮孒Կ걙户⌽뒼춰还播逸炧點믕껒䐀앤艿웕뵩䪅뚙˧榎盟뙌៙ᚷ暧퀢쒃셶ῇ鸻蜪慣뀖냺䌕௣욚翈珲㈻碝缓஝쁆띵눭뱛畡逦累ꗖჍ敷읰ﺤៀӛᎋⷱ瘕ဒྲ䞢赪互঳歎摉颻鵾㙁蟂琽穜干烱廌꫸ꦂ䄕쌄돌팯䓟퍟誐ᓇ䱤Ꙝ鐟꺦챛律䤜褴䢾햚룓镘괾탂枝楴囫ࡇ牋ꧪ峲趯쨱닧蚒얫᷼ᾝﯥ鱘꛴猓뼞瀱컸ꃬ㕜靿퉏絼兜秨浌儒?霿ꐡ흪�䕅虼충顺町南බ⾮猺︄Ắ쭷䉙䙹ᅷ蚝᠂㱿뎬?뗩鄬ῒ䢣Ⴛ屐⯧嚑㇁쳲떻䒊㜬栆䡟叒䫹弜쿠஘杠퍙崍㞆䭟憄绸燅袅䛸⌔s
I can delete the file, but it comes back after a while, probably when I join the server that put it there in the first place.

ZOMG!?!?!?!?! :paranoid:
Fjoggs
Posts: 2555
Joined: Fri May 03, 2002 7:00 am

Post by Fjoggs »

virus? pwnt? ne questions?
Caffeine
Posts: 115
Joined: Fri Feb 24, 2006 8:00 pm

Post by Caffeine »

Argh, that crap really kills Firefox. Anyways...

If you're using a recent ioQ3, then that's probably the random key generated by tjw's cl_guid feature. A hash is made of that file and sent to every server for identification purposes. The feature was originally for Tremulous, since tjw doesn't like the traditional rcon password system and wanted a better way to authenticate remote admins; it's easier for him to revoke one person's rcon privileges this way without affecting others.
Citizen of the [url=http://www.oldamericancentury.org/14pts.htm]Fascist[/url] [url=http://en.wikipedia.org/wiki/Plutocracy]Plutocracy[/url] of America.
dzjepp
Posts: 12839
Joined: Wed Mar 28, 2001 8:00 am

Post by dzjepp »

Ahhhhh I see, good man thanks :D
Locked