FIVEM packed with malware/Trojans.

[Navi ︻デ 一]

Beware, I downloaded Fivem 2 days ago. Noticed my PC being really slow, even with nothing opened.

My background processes show 10+ edge tasks, and have caught fivem or it’s add on sniffing packets and scanning every file in your pc.


I am making a video before you decide to blindly defend fivem, and it’s devs rockstar needs to end this community as it’s a security risk, and they are using rockstars game.


Before you argue with me think of how much exp you have in cyber security in the real world, vs how many times you saw on Reddit it’s safe to download.

Edit: possible evidence of keylogger through third party AC software to.

[Strawberry {JESUS IS LORD}]

Цитата допису Money Grow Slow:

Цитата допису Strawberry {JESUS IS LORD}:

hmm i have fivem on lappy for messing around in rp servers my malwarebytes didnt detect any malware

Com surrogate was the process being back doored. I opted to update to WIN 11, and as of now 15 minutes after updating, I have an external power monitor software. I’m not seeing weird CPU or memory 99% pegs.

Currently making a win 11 iso and reinstalling win 11.


I read online if you try to local reinstall com surrogate malware, it will attack your boot recovery partitions.

So as of now I’m fairly lucky I didn’t Brick the pc. So it’s dated malware/ransomware.


It’s a malware once you try to destroy, activates a worm that essentially turns it to ransomware, but bricks your pc. There is no ransom. It’s quite literally a toxic virus.

ya granted i havent touched fivem since 2021 maybe i better uninstall lol

[Navi ︻デ 一]

Цитата допису Strawberry {JESUS IS LORD}:

Цитата допису Money Grow Slow:

Com surrogate was the process being back doored. I opted to update to WIN 11, and as of now 15 minutes after updating, I have an external power monitor software. I’m not seeing weird CPU or memory 99% pegs.

Currently making a win 11 iso and reinstalling win 11.


I read online if you try to local reinstall com surrogate malware, it will attack your boot recovery partitions.

So as of now I’m fairly lucky I didn’t Brick the pc. So it’s dated malware/ransomware.


It’s a malware once you try to destroy, activates a worm that essentially turns it to ransomware, but bricks your pc. There is no ransom. It’s quite literally a toxic virus.

ya granted i havent touched fivem since 2021 maybe i better uninstall lol

I’m going to say 50/50 it’s from shady mods, either way. Fivem creators should have tight nips like valve about their mods.

Problem is everyone expects to get rich, or is trying to.


I love games, but I’m from a conservative area. Older I get the less I play, and this experience really turned me off from none valve mods.

R* is really fumbling a bag not incoorperating fivem, and contracting some of these developers. The content is a lot of fun, but I shouldn’t have to risk malware for a good time.

Base gameplay is great, but it’s also a ♥♥♥♥ move not to offer a little bag to these devs, to incoorperate this type of gameplay safely into their game.

I would pay 60 dollars over again for the current state of where a lot of these fivem mods are currently at, for a safer environment. It’s metal af.

Some servers even have mx, so I’m not sure why r* just doesn’t buy the assets.

It genuinely concerns me they are making a new game, but can’t find a few million In the budget to work out some deals with passionate mod creators. Honestly the MX in servers honestly are a far better deal than shark cards imo.


This is why I no longer personally work for big corporations. They’ll find budgets for cocaine binges in Vegas, but not making their products better.

[Navi ︻デ 一]

Цитата допису Strawberry {JESUS IS LORD}:

Цитата допису Money Grow Slow:

Com surrogate was the process being back doored. I opted to update to WIN 11, and as of now 15 minutes after updating, I have an external power monitor software. I’m not seeing weird CPU or memory 99% pegs.

Currently making a win 11 iso and reinstalling win 11.


I read online if you try to local reinstall com surrogate malware, it will attack your boot recovery partitions.

So as of now I’m fairly lucky I didn’t Brick the pc. So it’s dated malware/ransomware.


It’s a malware once you try to destroy, activates a worm that essentially turns it to ransomware, but bricks your pc. There is no ransom. It’s quite literally a toxic virus.

ya granted i havent touched fivem since 2021 maybe i better uninstall lol

So heres my final update my recovery partition is still destroyed, so its looking ill have to iso windows and hope my key transfers, for now I'll live with what i have and monitor it i got 11 on an iso usb.


I'm not sure if i want to take chances on copying what i did, to risk whatever tf that was.


My solution was simply doing the windows 11 upgrade. it seemed to cease 30-99% and chrome/edge crashes.


If i was a betting man. I would guess it's a trojan that tries to imbed itself into the RAM. As i'm getting IMAGE_ errors. 000X error. I'm thinking the .COM surrogate is the process being backdoored on 10. Possible Vun patch between 10/11 solved my issue.


I use online code storage like GIT/pen anyways so if my OS crashes for good, it's not a huge L. I do have to now live with the thought of these files arent coming back if a driver sh!ts the bed, like my little note pads and crap.

sorry for bad english im tired and annoyed at this point lol


so conclusion if you are on 11 you are probably safe, and approach servers with caution i guess, and only join reputable servers.


If you are on win 10, I would suggest maxing out your exploit security, keeping your valued files, then going to 11 to try and close off any backdoors you can yourself in settings. this was advice i found in Microsoft forums.


I also have 11 pro for workstations. In my research i found different vuns for different OS's can happen.

[SpaceDink]

thanks for sharing your fantasy. i chuckled a few times

[Navi ︻デ 一]

Цитата допису SpaceDink:

thanks for sharing your fantasy. i chuckled a few times:gearthumbsup:

lol?

i literally provided every error code. The only thing i havent done yet is do a linux 01 re-write of the memory. 000X, and windows partitions being destroyed indicate ram/OS backdoor.

FARBAR has errors im too lazy to go and research each error.

i could care less about the gta rp community. most of you are pretty cringe and delusional to be someone you aren't in a game. i was more intrigued by the virus. If was a toxic person, you guys are easy targets i get why now.


If i was looking for a group of loaners to target that don't question anything for my personal botnet. This community might be it.

If im so delusional guide me into a bigger community of loaners, that download things without thinking, and i'll say you are correct.


I'm fitting to go up on hackforum rn and be like yooooooo, looks at these loaners ready for some malware/botnet. lets get these lines bussin and servers up and poppin lets put some sneaky deeky code in with some lua.


also i got false banned by 3rd party none vac anti cheats, i have no cheating or memory re-writing programs/software. i actually do not know very well how to read/inject memory.

so you ♥♥♥♥♥♥♥♥ who went through 200k years minimally of evolution to be a ♥♥♥♥♥♥♥♥, you follow the breadcrumbs like you actually have common sense. boom then you find the f'n malware and process its using. ♥♥♥♥♥♥♥♥♥ we discovered common sense.



Valve is also probably monitoring this post, because every time you say the slightest of none pc things you get a ban, First post ever i made in forums without a ban.

[Navi ︻デ 一]

Цитата допису SpaceDink:

thanks for sharing your fantasy. i chuckled a few times:gearthumbsup:

OH btw

https://support.rockstargames.com/articles/115004754228/I-found-an-unofficial-GTA-multiplayer-server-Will-I-get-in-trouble-for-playing-on-or-hosting-one-of-these-servers

go ahead and leave your security up to neckbeards online.

They are already collecting microtransactions, may as well include a malware gift.

[SqueakyTweaky]

They updated their role play information. What you posted is old.


https://support.rockstargames.com/articles/11374598771091/Roleplay-RP-Servers

Also Given that every server make you download hundred of Mo of script and mods before you really log in, maybe someone use that to hide a virus/malware in there. I don't know enough about how this download is handled by fiveM to be certain about that, but I'd say in general any system that allow servers to download any files on your computer can create this kind of security risk.

I doubt it's from fiveM itself tho, given it's an open source software developed by several people, and if someone tried to push a virus in the core base it would get noticed and stopped by others.

As for LUA yes defenetly possible to make it download suspicious stuff if you get it from unknown places and what isn't verified by the community.

[Navi ︻デ 一]

Цитата допису SqueakyTweaky:

They updated their role play information. What you posted is old.


https://support.rockstargames.com/articles/11374598771091/Roleplay-RP-Servers

Also Given that every server make you download hundred of Mo of script and mods before you really log in, maybe someone use that to hide a virus/malware in there. I don't know enough about how this download is handled by fiveM to be certain about that, but I'd say in general any system that allow servers to download any files on your computer can create this kind of security risk.

I doubt it's from fiveM itself tho, given it's an open source software developed by several people, and if someone tried to push a virus in the core base it would get noticed and stopped by others.

As for LUA yes defenetly possible to make it download suspicious stuff if you get it from unknown places and what isn't verified by the community.

ok
commercial exploitation, including the sale of “loot boxes” for real-world currency or its in-game equivalent, the sale of virtual currencies

So we can agree what i noticed a few days ago is highly illegal, so it's not to far off of a thought to suspect you got a little malware?

I'm not a lawyer either, but the bottom of the TOS Basically revokes the first 2 paragraphs.

[Navi ︻デ 一]

Цитата допису SqueakyTweaky:

They updated their role play information. What you posted is old.


https://support.rockstargames.com/articles/11374598771091/Roleplay-RP-Servers

Also Given that every server make you download hundred of Mo of script and mods before you really log in, maybe someone use that to hide a virus/malware in there. I don't know enough about how this download is handled by fiveM to be certain about that, but I'd say in general any system that allow servers to download any files on your computer can create this kind of security risk.

I doubt it's from fiveM itself tho, given it's an open source software developed by several people, and if someone tried to push a virus in the core base it would get noticed and stopped by others.

As for LUA yes defenetly possible to make it download suspicious stuff if you get it from unknown places and what isn't verified by the community.

If you were a content creator, on a server that did any of these actions. The way this is worded, I would assume you could be held liable for association and advertisement.

[Navi ︻デ 一]

Цитата допису SqueakyTweaky:

They updated their role play information. What you posted is old.


https://support.rockstargames.com/articles/11374598771091/Roleplay-RP-Servers

Also Given that every server make you download hundred of Mo of script and mods before you really log in, maybe someone use that to hide a virus/malware in there. I don't know enough about how this download is handled by fiveM to be certain about that, but I'd say in general any system that allow servers to download any files on your computer can create this kind of security risk.

I doubt it's from fiveM itself tho, given it's an open source software developed by several people, and if someone tried to push a virus in the core base it would get noticed and stopped by others.

As for LUA yes defenetly possible to make it download suspicious stuff if you get it from unknown places and what isn't verified by the community.

I live with a content creator to, so don't call me crazy over that one.

[SqueakyTweaky]

Цитата допису Money Grow Slow:

Цитата допису SqueakyTweaky:

They updated their role play information. What you posted is old.


https://support.rockstargames.com/articles/11374598771091/Roleplay-RP-Servers

Also Given that every server make you download hundred of Mo of script and mods before you really log in, maybe someone use that to hide a virus/malware in there. I don't know enough about how this download is handled by fiveM to be certain about that, but I'd say in general any system that allow servers to download any files on your computer can create this kind of security risk.

I doubt it's from fiveM itself tho, given it's an open source software developed by several people, and if someone tried to push a virus in the core base it would get noticed and stopped by others.

As for LUA yes defenetly possible to make it download suspicious stuff if you get it from unknown places and what isn't verified by the community.

So we can agree what i noticed a few days ago is highly illegal, so it's not to far off of a thought to suspect you got a little malware?

I don't know what servers you visited but I joined some big communities that have been around years, I didnt get any malware & my pc is clean and safe and is working the same way as before I played in some servers, nor did I notice anything wierd in glasswire and other security programs running in the background.

People defenetly shouldn't play or use LUA scripts of servers that they don't know who created them or join random servers. Just cuz it didn't happen to me doesn't mean it couldn't happen to others.

[Navi ︻デ 一]

Цитата допису SqueakyTweaky:

Цитата допису Money Grow Slow:

So we can agree what i noticed a few days ago is highly illegal, so it's not to far off of a thought to suspect you got a little malware?

I don't know what servers you visited but I joined some big communities that have been around years, I didnt get any malware & my pc is clean and safe and is working the same way as before I played in some servers, nor did I notice anything wierd in glasswire and other security programs running in the background.

People defenetly shouldn't play or use LUA scripts of servers that they don't know who created them or join random servers. Just cuz it didn't happen to me doesn't mean it couldn't happen to others.

you are the first on this post to speak common sense.

I agree 100% with you i should have researched, before blindly jumping in. I joined around 9 different servers, so to pinpoint which one gave me a gift that kept giving is tough, but i highly suspect it was the last server i joined, because thats when my pc hit the fan.

alot of the basic mods like hot wiring/stealing cars had a ton of flaws in that server to.


I was playing on prevail my first day or 2 and didnt ave a single issue.

[SqueakyTweaky]

If you want to dig further have a look in to Angry planes & No clip asi menu that used to distribute bads stuff around to people it was tied to the source code and AC wouldn't pick it up.

Anyway I think we shouldn't talk about it on steam as it may go against their rules.

[Navi ︻デ 一]

Well TOS legally allows RP so im not sure why steam would care about server talk.

If anything, I think there should only be trusted servers on the front advertising page. I was joining servers from the splash page.

leave it to the one server to have shtty soundcloud rap on the loading screen to ♥♥♥♥ me

i think valve is also dropping a small bag not seeing this issue, and finding a more safe of mind solution between rockstar, and its gamers. community workshop exist for a reason.

if anything rockstar could care less about server costs/donations thats pennies on the dollar compared to main game sales. rockstar would probably turn a blind eye, because business/hosting/dev's time everyone knows thats not free.

So at this point im accepting i went computer dumb, but these companies, and mod creators can act like adults, so we can game in peace. i want to be a monke and have a good time. the working mods i played on prevail were fun, and the gang server i played on was fun. Most fun i had sandbox gaming in a long time.

so im not even sure why im catching hate, i think the ♥♥♥♥♥ fun, but needs a lot more security.

im trying to work and type while also reinstalling like 6 months worth of ♥♥♥♥ so ♥♥♥♥ my english

[Navi ︻デ 一]

Цитата допису superblake_:

Цитата допису Money Grow Slow:

Beware, I downloaded Fivem 2 days ago. Noticed my PC being really slow, even with nothing opened.

My background processes show 10+ edge tasks, and have caught fivem or it’s add on sniffing packets and scanning every file in your pc.


I am making a video before you decide to blindly defend fivem, and it’s devs rockstar needs to end this community as it’s a security risk, and they are using rockstars game.


Before you argue with me think of how much exp you have in cyber security in the real world, vs how many times you saw on Reddit it’s safe to download.

Edit: possible evidence of keylogger through third party AC software to.

that is because it opens when your pc turns on you can turn that off on the windows settings then your pc will be faster and then you will see less processes on task manager. there is no malware/Trojans.

we will see everytime i download gamefiles they get corrupted atm.