Virus around in JJ2

[Super Saiyan]

Beware

A week ago I heard from a friend he had some problems with JJ2. He said the names in the server-list (F9) keep on changing in: Lets keep it a bit normal here : (Derby: A bunch of inappropriate or otherwise, bad words) and Etc. These wich I said were only a few examples. There are much more. Im not quite sure what really happends because I dont have the virus my self but the one wich have, a few friends of me, say you cant do a thing about it. When you Re-Install jj2 it doents work. You keep the virus. So just lets say simple what the virus actually does: The names in the F9 list change into 'bad' words. So beware about this virus ore what it is. It may is spreading itself over the jj2 Networks ore is just using the computer to spread itself.
This are the guys wich have it: UmbaMan, Tazz, Goldy. These three are all TSF players, so it might only spreads over TSF. Who knows. Tell us if you have the virus also!

Ow yeah, you cant get rid off the virus. Umbaman, doesnts have it anymore, he said you just must wait until it doesnts work anymore. It may have a limited time of working. Btw, FQuist told me to post this on JCF, before he post news on j2o.

Derby: Content replacement.

[||Slim]

hmmm....

are you sure it isnt some problem with the filter?

i doubt it could be a virus..

[Rage]

There are no such things as viruses spreading via JJ2. We discussed that some time ago with the BOMB thang.

Must be a late april fools joke or sumptin...

If you have this virus thing, please take shots of it..

[ElectroPiZZa]

I sincerely doubt this.

For one thing, it is nearly impossible to change player names via clients on the fly in that manner. You would need some extensive memory-editing or client-based hex editing type tools to do anything like that, and you cannot modify the netcode to display different values of connected players at all. If such an event occurs, you might want to send me a screenshot of it, although I think this is some throwoff to make people stop playing JJ2. If this is indeed true, I will look into this.

[Super Saiyan]

The one wich has the virus only will see the strange names. The server and the other wich dont have the virus will just see normal names. So the virus actually messes up your jj2 game, and dont effect others.

[Super Saiyan]

Ill ask UmbaMan ore Goldy for a pic. Though Umba doensts has the virus anymore.

[ßúññ¥€lmérTbtCC]

i got the same problem :
-Chanche of the nickname,s int obad name,s
-automatellywarp to other positions
-automatelly your jj2 screen goes black cant do anything {only exit}but can take a vieuw on the server{chatting}

so now 4 people having trouble with this:( why me!reinstall didnt work

[ßúññ¥€lmérTbtCC]

so here proofed happy now?
http://www.geocities.com/bunnygohan/jcf.jpg
cantsee (http://www.geocities.com/bunnygohan/jcf.jpg)

anywhay no i profe it to you all what can we do abaut it i'wait but...:(
atleast
-you now see what happends the virus or whatever chanche,s the nickname,s
-Lets you automatic warp to other psoitions and yo uwil get stuck

[Shadow XZ]

Virus' are real... I've had one a while back and so did Roseta and Icegoddess where it removed the JOL from our names and even if you manually entered it, it added other stuff. Plus I had a virus before with a bannlist of every jazz player... so virus on jj2? Very likely.

[Nova]

The Guy 'Kick Me' in The Server was Supersaiyan.

[Mystical]

Originally posted by Nova
The Guy 'Kick Me' in The Server was Supersaiyan.

you shure?

[MaGoo]

This isn't a virus. Server hosts can create extra long names in their regedit, and the part of their name that you can't see in the game goes on other people's names.

[Nova]

Yeah, I'm Sure Myst,
I Was in Da Server :p

Magoo May Be Right, I Have Done That Before...


-- Nova

[||Slim]

geez.. this is IMPOSSIBLE. theres NO way whatsoever that this could happen ( pretty much :p ) anyway.. when did you recieve this anyway? theres no way it couldve came "bundled" from a .j2l file, etc. (btw bunnyelmer that pic doesnt work)

[Kaz]

EP: It is possible over a remote computer. It does sound like a virus and I know how to replicate several of it's affects, it'd just be getting a program over the net to do it locally that would be a tougie.

[Link]

Yes, I agree with Kaz. This stuff is easy with memory addresses.

But it cannot be spread through JJ2. You would have to get it externally (like an email attachment or a download or something).

And the pic does work, you just can't link to geocities pictures. Just right-click on the link below it, click "copy shortcut", then paste into your address bar.

[ElectroPiZZa]

Well, it is still true that executable commands wouldn't be easily accomplished within JJ2 netplay. It just doesn't seem likely.

(by the way, this is the 10,000th post in General Jazz 2 Talk)

[Mystical]

Originally posted by ||Slim
geez.. this is IMPOSSIBLE. theres NO way whatsoever that this could happen ( pretty much :p ) anyway.. when did you recieve this anyway? theres no way it couldve came "bundled" from a .j2l file, etc. (btw bunnyelmer that pic doesnt work)

I think it is possible.

[Mystical]

Originally posted by Shadow XZ
Virus' are real... I've had one a while back and so did Roseta and Icegoddess where it removed the JOL from our names and even if you manually entered it, it added other stuff. Plus I had a virus before with a bannlist of every jazz player... so virus on jj2? Very likely.

I know someone who had this problem until they removed everything from their banlist

[FQuist]

Bunny Elmer's problem seems to be a different situation, no bad words, and only half of the players look weird. I think that one was a hoax(or Bunny Elmer was set up)

[defalcon]

Originally posted by ElectroPiZZa
Well, it is still true that executable commands wouldn't be easily accomplished within JJ2 netplay. It just doesn't seem likely.

(by the way, this is the 10,000th post in General Jazz 2 Talk)
It could be easily done I think - it apparently only effects the people with it, so it might modify some of the memory values, maybe some stuff in the JJ2exe, who knows. But it couldn't come from a level or tileset file, it is most likely from an exe (almost certainly). So maybe it came in those little programs and trainers and all people like fiddling with while in single player mode. But this does seem like a serious problem.

Hm...if you can't get rid of it, don't just reinstall. Uninstall JJ2, delete the extra files left over in the folder, and go download and run the JJ2 Registry Key remover so you can reinstall JJ2: http://www.jazzjackrabbit.com

I THINK that's what you might need to try anyway, although you should ask someone like Alberto, Kaz or Newspaz first. I'm not going to be held responsible if you uninstall it wrong. :p

[Air Wolf]

nah, don't vory, there is no ''net-work virus''
I have had this a couple of time, but ''only'' on special servers, or when there where lots of lag.
This might happend if your connecting and there is many that chat, i tried too, there is 3 ways:
1. Re-enter
2. Wait until you found a place ;P
3. Restart your computer

This is just usual connecting problems, first i tried this was on one of Irony's level. I waited until it stopped with warping and ended in other end of level =p
If it continue, god will ban da lag ;p, and you will soon loose your connecting.
There is no way to fight back lag at what i known ;p
I do always rid of warp error with restart, try it

.....

[Air Wolf]

I give a cokie to the person who makes post 15000 on jazz2 oginal talk forum :god:

=P

[Michael]

That's not a virus. Change the name of this topic to save time of ppl who are short of it.

[Mystical]

yah.
Someone I know used to have poroblems with the annimatimations; when someone was jazz they looked like spaz and jazz looked like spaz..
sometimes even the same prob as when someone on 1.23 edits it so they can play tsf; even though thats not what she did.

Then she re:downloaded the server patch and it was fixed; she had tho do that each time she had the problem though..

[ßúññ¥€lmérTbtCC]

Originally posted by Mystical


you shure?

yeah we/i am sure if you look at the pic{that isnt working;p}but click on cantsee then;) you wil see i where chatting on msn with Ssj he where the host server called: Súpérsáyiáñ

[Super Saiyan]

Ok, here are two pictures wich Goldy took when she had that strange F9 list.

Picture One (http://www.geocities.com/saiyans_page/SSJ_1.html)

Picture Two (http://www.geocities.com/saiyans_page/SSJ_2.html)

Thats the profe. Be sure to check also the score at the second picture (Upper-Left).

[..::Goldy::..]

If the upper pictures did not work i'll try it again just to be sure.

<html>

<a href="http://www.geocities.com/saiyans_page/SSJ_2"> <font color="nightskyblue" size="3"> click here </font></a>

</html>
i really hope it works so yall will see that we are telling the truth.
and btw: for everyone who thinks i'm a hacker: I'M NOT just don't listen to what winner says! besides i don't even know how to hack!

[Shiverz]

Ive Never had this problem

[Link]

Just blithering on about the "virus" is not going to get us anywhere. Let's stay on topic about this and try and get what we know together.

Description: The virus changes your local F9 players list so that all the names are bad words. It does not affect anyone else in the server. It may warp you around and turn your screen black, but that could be something else.

Who has it: UmbaMan, Tazz, and Goldy. BunnyElmer may have it.

Other information: It does not disappear when you reinstall JJ2, but may have a time limit as to how long it will continue working.

My hypothesis: This "virus" is an external program that does memory hacking to do this stuff. Most likely it was made in Visual Basic. It has probably been disguised as another program, such as a trainer. With only three or four people having it, it is likely that it is not spread through JJ2.

What I want to know: Do the people who have this virus use or have used any pre-made trainer at any time? It doesn't matter if it is multiplayer or single player. If so, what program(s) have you used? What do they do? Who gave them to you?
When this virus is occuring, press Ctrl+Alt+Delete, and see if there are any suspicious things running.

[Super Saiyan]

Originally posted by Link
Just blithering on about the "virus" is not going to get us anywhere. Let's stay on topic about this and try and get what we know together.

Description: The virus changes your local F9 players list so that all the names are bad words. It does not affect anyone else in the server. It may warp you around and turn your screen black, but that could be something else.

Who has it: UmbaMan, Tazz, and Goldy. BunnyElmer may have it.

Other information: It does not disappear when you reinstall JJ2, but may have a time limit as to how long it will continue working.

My hypothesis: This "virus" is an external program that does memory hacking to do this stuff. Most likely it was made in Visual Basic. It has probably been disguised as another program, such as a trainer. With only three or four people having it, it is likely that it is not spread through JJ2.

What I want to know: Do the people who have this virus use or have used any pre-made trainer at any time? It doesn't matter if it is multiplayer or single player. If so, what program(s) have you used? What do they do? Who gave them to you?
When this virus is occuring, press Ctrl+Alt+Delete, and see if there are any suspicious things running.

Ok, I know this virus isnt such evil. It even doesnts deserve the name virus. I just posted because if people have the 'virus' they will know Its not a bug in their game ore something and that other people have it too. Ow yeah UmbaMan, Goldy Etc. are not them all, Im sure there are more people. And it does (I think) spreads itself over some strange way. But believe me I arnt trying to spamm J2o ore JJ2, Its just a Alert.

[Bobby aka Dizzy]

<i>Did this all happen in the same server?</i>

I'm guessing this is the work of the server whoever was hosting that...

To explain what I bet they did is that they editted the names of the people who would enter the server. Now, anyone who joined after the names were editted for the server would see a different name than the person originally had since the server would be sending an editted version of the user name list to the joining client. So, it would also explain why no one else had a different name, but all of the other names were changed. If what I'm thinking is right, it is no virus, just the server messing around changing memory values.

[..::Goldy::..]

Trust me, it wasn't in the same server, even when i was at home i hosted a server (not on internet) and i saw myself being warped all over the place and changing names. So i'm sure it's not the host.

[ßúññ¥€lmérTbtCC]

chanching the name,s can be happen on all servers 1.23 and TSF
and you getting warper on all too your own nickname chanche,s too

why aren.t you beleaving us Dizzy were asking for help :confused:

[Super Saiyan]

Look, the first example-pic wich Bunny Elmer took, was made in MY server.
The last two example-pics, Goldy made in BackSlash (Im not quite sure) Server, I was also in it. Now, I dont think Backslash cant do that memory value. He is just not smart enaugh to do it =P Me neighter, because I dont really exactly understand what do you want to mean Dizzy.
But let me explain the Virus a bit,

1. The virus can warp the victim to other places. Just out his self.
2. You can get a black screen, you only then can see the text in the server.
3. The virus changes the names in the F9-list.
4. It also effect the score limits.

So it might be just a program wich automatticly runs itsself when JJ2 starts. I still my self dont know how this program spreads itself. It maybe even doesnts do it. But those victims wich have it may got it from eachother/someone by some strange way.

Ok this is all what I heard from the 'victims'. My self, I dont have the virus.

[FQuist]

Let's set one thing straight: it can't spread through jj2 itself. It must be an outside influence.

Like Link asked, have these persons ever used jj2 utilities, or did they download suspicious jj2 stuff?

[Air Wolf]

This is crazy! =P
1. Virus arent there for change gameplay, virus is for destroy gameplay =p
2. I known Wreid, I don't belive this
3. This is not posible, that name's changes into correctly spelled words ;p...Do that just prove enoph?

=P

If yea want that cokie, be sure on to post da post ;P

[Mystical]

Yep it was probably the host of a server edditing memory values.
Someone told me about some program Overloard made it lets the host change thier own nickname when they are hosting and my guess is that they probably converted it so it eddited another players name.

And I thought it was impossible to warp other players to another position; probably eddited the memory values to make it possible.

Roseta told me about this: She went to Blurredd's server and when she left the server; someone elese and her names changed and became big;
another problem she had: the end of her name once changed from JOL to LOJ or something; she quit Jj2 and eddited regedit then changed it back; closed regedit then restarted Jj2.

[Bobby aka Dizzy]

1. The virus can warp the victim to other places. Just out his self.
2. You can get a black screen, you only then can see the text in the server.
3. The virus changes the names in the F9-list.
4. It also effect the score limits.

1. Does it warp the person playing or do you see "ghosts" of other people, people that appear to be around you but don't move since they really aren't there.

2. Could be the black hole type of bug when looping a level in extreme lag... might not.

3. Changing names can be done by the server so you have a different name to everyone who joins after you do...

4. Does it appear to change the score for the client but the level will still change after a certain number? Or does the limit change for the server?

[Link]

Do you see the players names in the list changing before your eyes? Or are they already like this when you join.

[Mystical]

It acutally warps the player probably (moves them to a diffirent pos and keeps doing it)

In a what I think was a super laggy server; I ghosts of my self when I moved even though there was a background with no gaps on it.

It also effects score limits? you can make a trainer do that!

EDIT: I claim 2nd page

[Super Saiyan]

Ive asked about your questions, the player itself just warpes around and around. Another thing, the name changing doestns have to anything with the server, because it happends on everyones server. A example, when BunnyElmer was in my server to take a Screen Shot, Nova KK was there also. She said she just saw normal names. But BunnyElmer even didnt know who was talking so only he had those strange names. The name changings could might as well happen also in The Server itself. I mean when the 'victim' hosts for itself.

[defalcon]

Well, turn on your computer and press ctrl+alt+delete to see what's running. Connect to the net and do the same thing. Then run JJ2, and do it again. If at anytime whilst playing JJ2 and it happens, check to see if something else has popped up. That could be the culprit. Note down the name and do a search on your computer, but if you find anything don't delete it because we might want to take a look at this.

[Krezack]

I don't think some of you people even deserve the title "n00b", others are just gullible.

Look let me get one thing straight: If this is a virus then its your own fault for using trainers.
Another thing to get straight: ITS NOT A VIRUS! Merely a hoax setup by some / and a few people believe that its a real virus.

How do you know that those people didn't join WITH those names? ARG brain overload from some of the / of some people. Let me go rest.

It could also be a programme which edits the registry....not a virus.

Sorry if i seems a little touchy...heh.

[Mystical]

When it warps you around; it seems the other players never notice it. You just move to diffirent pos and dont see the warp outline like when you go though an actual warp.

BunnyElmer try removing everything from your filter and see if that fixes it.

[Link]

Mystical, how do you know all this? Do you have it too?

Krezack, we have established that it is not a virus. But that is just the name we are calling it right now. Until there is evidence that it is a program for sure, we will continue calling it virus.

Now about the virus, we have also established that it does these certain things or something close to it. But, we need to find out the answer to questions such as these, that need to be answered by people who have it.

Have you ever used any trainer program in the past. If so, what was it?

Are there any mysterious programs running in your Ctrl+Alt+Delete list when the virus is taking effect?

Have you recieved email attachments from any JJ2 people recently?

[ßúññ¥€lmérTbtCC]

-Yes i used trainers

-yes i got a e-mail fro ma jazzer {just someone@hotmail.com}

he send me TSF megawarp after that i saw things from thatt thing we now call virus. i removed it and virus scan it but......

[..::Goldy::..]

well, i think it must be that magewarp program cause umba sand that too me and he had the so called "virus" too, so.

anyone want it? :P

[Krezack]

Hmm, the plot thickens.

I'm afraid the situation is dire. You will need to do a COMPLETE reformat of all fixed drives and then when you install jj2 don't download anything for it.

Well no not really but anyway.

Hum hom, try deleting all your trainers ;)
Reinstall jj2 to another directory and rename the Executable file, may do nothing, may fix your probs. I however do think its a hoax.

[Link]

EDIT: Krezack and I posted at the same time...I didn't see his message. But a complete reformat is unnecessary. Just try and figure out what it is that is running, and get rid of that. It may be in the registry somewhere too.


Then I think we have solved the problem. It must be the TSF Megawarp program.

I would like that program. I want to take a look at it.

Who made the program?

[Mystical]

Originally posted by Link
Mystical, how do you know all this? Do you have it too?

Krezack, we have established that it is not a virus. But that is just the name we are calling it right now. Until there is evidence that it is a program for sure, we will continue calling it virus.

Now about the virus, we have also established that it does these certain things or something close to it. But, we need to find out the answer to questions such as these, that need to be answered by people who have it.

Have you ever used any trainer program in the past. If so, what was it?

Are there any mysterious programs running in your Ctrl+Alt+Delete list when the virus is taking effect?

Have you recieved email attachments from any JJ2 people recently?

No I have not had these problems; I of people who have though and explained to me very throughly what happened.

The TSF mega warp program is called Ultra Warp; and no I dont have it.

[Mystical]

Originally posted by Air Wolf
Got da ''virus'' a single time in warp form ;p
This is very enjoing when hosting co-op, ended 4 different places in a roof
I got rid of it by restart my computer.
Btw. I ended on a super secret in a hotel with this warp ;P
Kuul!

lol!
Restarting a computer seems to work for most people.

[Air Wolf]

This virus ****s =p
I got it now, and eperiment with it ;p
Trying see how it works,
and found out that Blade got renamed Fat Nurse ....

=P

[Super Saiyan]

Well I do also have that TSF warper. But I dont seem to have those strange stuff :P Btw, Goldy said there is running a program when she opens JJ2 Its called ini't'cent ( Maybe from Inicent). When she close it, it keeps comming and doesnts stay closed.
*I didnt ask Bunny Elmer ore Umba Man and the other victims about a running program at A+C+D. Maybe it isnt even that program initcent.

[Cpp]

TSF megawarp? Yea I had the program. But there was really nothing weirg going on on my jazz (except that divide by zero errors were more common). I later on deleted the program cos I got UW2. It's much better :P Still nothing weird going on here.

[Mystical]

Originally posted by Air Wolf
AAAAAA no ;p
I do still have it (just found out)
And it's very enjoing ;p
Blade got renamed Fat Nurse ....

:lol: rofl! :lol:

[ßúññ¥€lmérTbtCC]

It wasnt ultra warp a strange programm just like megawarp but now yo ucould choose into wich version 1.23 or TSF

When i use ctrl alt delete i dont see any other unusaly programms running

another thing i figured out last time i where on a server called {please join:p } then after a while my jj2 schreen got black i wasnt in the server lkist anymore but you didnt saw: BúññyÉlmérGpW left the game'

but i could see the people in the server chatting

ater a while i got the message: server conection timed out or something that happens evreytime when my screen gets black {mostly after 1 minuut}

[Krezack]

O.o...i would like to take a look at this programme...if you are sincere about this "virus" (although it should be renamed to trojan) then send either me or linka copy of it.

[..::Goldy::..]

Yeah i had that too, that u can see people chat etc. but fer the rest screen is black, only i don't wait until it says "connection timed out" cause when that happens i just close. And btw, i asked umba if he had that "initcent" program also running and he has it too, but it also could be somethin else because bunnyelmer doesn't even have it. so i really don't know :confused:

[Krezack]

Then its possible that Someobdy could be lying as a "funny" joke and that you and the others believed this joke to be real?

When you enter a game were peoples names already "dumb idiot" etc. Or did they become that when people left and others joined?

[Super Saiyan]

After a few secs the names change suddently.

[Super Saiyan]

So I mean when you enter their just normal. But after a few seconds ore minuts they change.

[Krezack]

Kinda like when the game lags up heaps and player 2 leaves then another person joins into slot 2 and the games goes back into sync (catches up from the lag) and the name in position 2 on the f9 list has changed without you noticing it come up as a text message (alerting you that some one left and another person entered)?

[Super Saiyan]

Lets get it right it doestns have to anything with lag ore something. The names just change, you even dont notice. When BunnyElmer and Goldy were in my server to take screen shots they were waiting until they names changed. By Elmer they changed about in some seconds. But at Goldy it took longer then a few minutes. Also dont forget: The so called 'virus' only changes the names at victim itself. So the others in the server wich dont have the virus dont notice a thing, they just see normal names.

[Super Saiyan]

Ow yeah Goldy made this screen shot in her server.

Picture not available...anymore.

I joined her server I didnt make a pic but I saw the same like the screenshot. Also, the server (Goldy) had my name. It was like that I was hosting a server. But it wasnt.

[Air Wolf]

Stop laughing of me mystical or it's gonna be a:
Møønblãzé vs. Mystical

=P

[Krezack]

Firstly why is the screen black?
Secondly that picture is rude take it down.
Thirdly why are the bad names different to before? If this was a real programme then it would replace the names with swearwords ALL the time + in the previous pictures only some of the names are changed. Someone whould have to goto a pretty large effort to make a programme that would do that....and by large i don't just mean a few hours worth of programming i mean weeks.

Through the points i have stated above i have come to the conclusion that it is a hoax.

Also if you wish to PROVE that its not a hoax then do the following:
Have JJ2 running with a the virus working its stuff. Press Ctrl+Alt+Del. Now take a screenshot, i want jj2 running in the background with the f9 list open and the virus "changing the names to swearwords".

[Super Saiyan]

The first pictures were made as 'Client'. The last one which I had posted Krezack was made by Goldy in her own Server. The blackness is a part of the 'virus'. Like I said it can give you a black screen when you host, you only then can see the text but you are 'frozen'. You cant do a thing, you cant move, you dont see your self, you cant chat, you only see what others chat, you only see who enters ore leaves. So Its a bit sucky while hosting when youve got the virus. :)

[Air Wolf]

This virus is very dangerus, more than anybody thinks, choose things can happend:
1. It changes names on player often, so you don't known who is who, this damages your chat, sinice you often don't known who your talking to
2. Sometimes you warp somewhere on level, that is often: Stuck
3. It pop players out of your game list (F9), when this happend, you cannot see the player, but the player can see you, the player can shoot you, you can't.
4. It radomly freezes the game in a black screeen, you must close jazz2 to get freeze out.
5. This virus spreads fast, unknown how, this can lame the TSF

Care, be sure on to have 1.23, this might be virus-free
Don't host if your a victem ;p
I'm a victem...

[Mystical]

I expect some TSF people got infected them and it effected them also on 1.23

[Super Saiyan]

Good guessing, I was right that it was spreading itself by some way. Anyway dont come to much on TSF, the virus got some more victims I think. Also dont join servers who are being hosted by a victim itself. You can know when someone has the virus, when you enter his server your jj2 should be frozen also then, you should then also got a black screen and your name should be at the first in the F9 list. If this is all so, then press so fast as possible Alt+F4. Just dont get it. (I think you get the virus by joining a victims server and staying there a few second ore minutes.)(MAYBE.)

[ßúññ¥€lmérTbtCC]

We must do somethign abaut this{the virus}:(

Why me:mad:

[Mystical]

Originally posted by Super Saiyan
Good guessing, I was right that it was spreading itself by some way. Anyway dont come to much on TSF, the virus got some more victims I think. Also dont join servers who are being hosted by a victim itself. You can know when someone has the virus, when you enter his server your jj2 should be frozen also then, you should then also got a black screen and your name should be at the first in the F9 list. If this is all so, then press so fast as possible Alt+F4. Just dont get it. (I think you get the virus by joining a victims server and staying there a few second ore minutes.)(MAYBE.)

I know this is a bit off topic:
someone quit some time ago had this problem: everytime she hosted a server and one or 2 people joined; her Jj2 froze and she had to restart the whole computer.
Another bug: once she hosted a server and everytime someone tried to join; she got an access violation; this was just with one level.

I think I mentioned earlier; someone had this problem where on some servers they joined; they typed something in and it appeared as their name when they tried to chat; the text all the other people in the server typed appeared weird like for example:
??! and some square shaped O s.
When you typed something in a person would answer: ???? in question marks.

However this problem was only on some servers; when you left everything was back to normal and ok on other servers.

[Air Wolf]

I found out that some program is runing in bagrund when virus working, it's named Initcent...This should be da virus!
You can't stop it by ask to close it, it just turn on again on 0,00000001 sec
Hope somebody find out of to get rid of it ;p

[Super Saiyan]

Yep, your right Mystical. The server gets a acces violation. Another thing, Im now tottaly sure its spreadings itself over the jj2 network. This morning I saw 2 other ppl who said they also got it. I still dont know how they got it.

[White Rabbit]

Hmmmm...I think I might have got the problem too. I don't see weird names in the F9 list but I often get ctos when playing and have to rejoin again. And when I do, I find myself warping around the lvl. To fix this, I simply rejoin again but once I couldn't fix it. I rejoin and rejoined but I still got warped around. There was nothing suspicious when I pressed ctrl+alt+delete and I think it might be some kind of internal bug in JJ2. Maybe.

[Super Saiyan]

Thats just Lag. :) I sometimes have that also, just restart your jj2 then.

[ßúññ¥€lmérTbtCC]

Today i played Jj2 and the name,s didnt chanche The day before they did

the screen didnt got black
the only thing where left the score i set treasure : gems to 100 that chacneh into diferent numbers but anywhay wo crae,s now i can see who,s talking to me :D

[Taz]

It's not a virus..... It's a prog.

[Mystical]

Nope its not a virus.
I was curious; as yesterday I had my firewall at full protection (stealth mode) Overloard joined my server; I minimized to look for something; I maximized again and I got a short access violation;
on another server he told me he timed out; I am not accusing anyone here.
Anyway (a bit off topic) I turned off some functions in my firewall so I can finally host servers and they dont ping all the time.

[Super Saiyan]

Well I think y'all were waiting for this:

Conclusion (http://www.geocities.com/saiyans_page/SSJ_4.html)

Its a program running initcent, Im sure about it. These 3 c+a+d pictures are from victims which got the virus ore program... what ever. Anyway I think we still dont know how they get it.

[ßúññ¥€lmérTbtCC]

Yeah anywhay i got rid of it :P:lol:

[Alberto]

Ok you guys who got it, what did u download recently?
Before you got that virus.. say

[Rage]

TSF Megawarp, we already figured that out.

[Mystical]

I dont think so. Those who dont have it still had some of those problems..
Mabye its also 1.23 mega warp.

[..::Goldy::..]

It was for 1.23 and tsf and i don't know if that's it but that's the only thing i um got new, cause i don't really download much stuff from the net exept for songs. btw, that warper program doesn't even work on my pc:p .

[the WINNER]

When I shut down/restart my computer, I see something "WORKING" text bottom-left on my screen! And today I was checking is "Initcent" in the "close programs" screen. It was there. Then I tried to close it! It close but then there was a "WORKING" again in the bottom-left bottom-left on the screen. Then the "Initcent" came there again!

[..::Goldy::..]

Yeah winner i have that too! when i close down my pc i see in the lower left corner the word "working"in blue!!!!!

[the WINNER]

:( Agh, in my computer, the "initcent" runs when my Windows starts! So it runs BEFORE Jazz2 starts! But I think Initcent is only a default Windows program like Explorer etc.

[MaGoo]

You people are so gullible. I can tell you right now this is not a virus. It's a program that makes people's names look different if you leave and re-enter a game again. Bobby and I were testing this little program out the other day and we discovered that it's harmless and you can switch your name back just by leaving the server and re-entering it.

If your name has been changed by the server, only the players who left the server and came back again, or people who are just joining the game can see your edited name. There, I solved your little problem. Now enough of this gullibility from all of you.

[Mystical]

Originally posted by MR MAGOO
You people are so gullible. I can tell you right now this is not a virus. It's a program that makes people's names look different if you leave and re-enter a game again. Bobby and I were testing this little program out the other day and we discovered that it's harmless and you can switch your name back just by leaving the server and re-entering it.

If your name has been changed by the server, only the players who left the server and came back again, or people who are just joining the game can see your edited name. There, I solved your little problem. Now enough of this gullibility from all of you.

Onistly; your weird.

[ßúññ¥€lmérTbtCC]

1 last time i used TSF warper

someone send this to my e-mail:

Hi. im from jj2 and i found a programme megawarp works in tsf. it really works. try it.

bye.
worlock from jj2

When i used it the virus worked again
:( Its has a time limit so i have to wait again :(


2 When evreyone where aksing what there bad neame,s where i told them then someone else told them to they weren,t the same

3 The name,s are always withe and there are no weird chars in it

4 i got used to the name,s i geuss there are 20 diferen,t bad name,s{mabey more}

5 Sometime,s 2 bunny,s{or more} have the same bad name

6 When i said i got rid of the virus the score was still chanching
you needed 278 roasts!

7 I got even a time when my name chanched to

8 At a moment All name,s chanche at the same time
into bad name,s then after a time{i geuss 5 minutes} they all chanche into other bad name,s

9 This hapens on both versions and on your server and on other servers

10 last time only name chanche my screen isnt getting black anymore and i aren,t warping anymore

Who readed al tihs :P

[backslash]

How i get that

I come in BunnyElmer's server (he haves that virus). He kicks me. AND NOW I HAVE THAT TOO! Please, stop it somebody!!!

[Super Saiyan]

I doubt Its a Windows Program like Explorer. Allthough Im not sure.

[Mystical]

I doubt it too tho mabye it is just a windows program that became infected by another program..

[Cpp]

Hey! I got it from the same guy as you did, Bunny Elmer! And I sent it to some friends. Sorry :). I opened it and used it a couple of times but then deleted it. If I had the virus it has already timed out like elmer said... It has probably got a time limit. I noticed nothing weird after I used the prog. Ow Except for those "Divide by zero" errors on TSF.

[Super Saiyan]

Possible, btw some ppl said the virus stopt working. Next day they said it works again. I think it works on different times, ore...Its using a program and when it gets open in Windows it then only runs, like you said Mystical.

[>>Møønßlãzé<<]

Okay, here's our mission :D :
Seek the very well hidden file and delete it.
Enter a server with virus and check if the file returned, if it does, tell us about file, so we all can delete the file/program at ONES and the virus program will be eliminated
Go go go soldiers :lol:

[Nova]

I Was Just RoR Spy's Server On TSF. Twas Freaky. The F9 Player List Didnt Show Spy As Host, Yet Every Time Someone Joined The Game, They Became The 'Host'. If Someone Joined After That Person Became 'Host', They Were Just A Normal Player.....
People Were Coming In Every Few Seconds Or Less, Leaving And Coming Back Too Fast To Be Realistic.

Bah.

This 'Virus' Or Whatever Iz Nasteh.

Must Kill.

[Mystical]

what was their player number? player1?
If their player number was not 1 then the host was minimized; that is if they where not in the player list..

[Nova]

what was their player number? player1?

They Became Player One.
I Know When The Host Minimizes :p

[MaGoo]

It's a program, like I said.

[the WINNER]

Originally posted by MR MAGOO
You people are so gullible. I can tell you right now this is not a virus. It's a program that makes people's names look different if you leave and re-enter a game again. Bobby and I were testing this little program out the other day and we discovered that it's harmless and you can switch your name back just by leaving the server and re-entering it.

If your name has been changed by the server, only the players who left the server and came back again, or people who are just joining the game can see your edited name. There, I solved your little problem. Now enough of this gullibility from all of you.

You are very weird...

[Super Saiyan]

Ermmm...I think that virus is really spreading itself by some way. Cant someone crack it ore something???

[>>Møønßlãzé<<]

Originally posted by Super Saiyan
Ermmm...I think that virus is really spreading itself by some way. Cant someone crack it ore something???

Do no read the replies?!?
There's the usual way, delete it forever!
Why spend time on crack it?
You need find it first!
And that's the problem =p

[Super Saiyan]

You dont really need to find the virus, when you got it, it runs automaticly in Windows. I think there are programs which can open them by that way (I THINK) ...

[||Slim]

http://ossr.phpwebhosting.com/forumpics/thisthreadsucks.jpg


sorry. i got lost somewhere on the first page.

[MaGoo]

*Claps* W00!

[>>Møønßlãzé<<]

Okay, that virus deserve to be slapped :P

[Cpp]

How many people actually have the virus so far?

[Super Saiyan]

About 11 on TSF which I know, some said the virus stopped, after a few days they said "Doh!, the virus is working!"

[Link]

Hmmm...

I don't think initcent has anything to do with this. I also think that this program, whatever it is, was made by an amateur programmer.

I would like to look at this program. Goldy emailed me and asked if I wanted it, and I replied and said yes, but she hasn't gotten back to me yet. Does anyone else have it who would be willing to send it to me?

[>>Møønßlãzé<<]

Originally posted by Link
Hmmm...

I don't think initcent has anything to do with this. I also think that this program, whatever it is, was made by an amateur programmer.

I would like to look at this program. Goldy emailed me and asked if I wanted it, and I replied and said yes, but she hasn't gotten back to me yet. Does anyone else have it who would be willing to send it to me?

Link, PLAY until you got it :P
It spreads itself

[Link]

Viruses\programs CANNOT be spread through JJ2. It is impossible. There is no way for executable code to be transfered through the game. The closest that could come to a virus spread through a game is a level that has an AV in it.

This has got to be a program. And people have even said, that they observed symptoms of the virus after using a program.





And what I said about executable code being transferred through JJ2 is not completely true. I know how to do it, but it can't be done through JJ2 (A program could be used to mimic a JJ2 server, and send a program instead of a JJ2 level, and then disconnect itself after sending the program). If this was the case though, it could not be done unknowingly by the host, and would require the client to rename the file to something with a .exe extension. Also, if this was the case, the server would not be joinable and playable.

[Super Saiyan]

I think we still arnt able to find that virus. Ow yeah Link, how do you think the program spreads itself...? No Ideas?

[Link]

It is spread by people emailing the program to each other.

When MW got out, it spread like a wild fire, but didn't work for TSF. The person who made this TSF MW knew that the TSF people wanted a MW, so he made it, and knowing it would spread like wildfire, he put some bad stuff in it.

Even BunnyElmer said he got an email with it.

[ßúññ¥€lmérTbtCC]

Yeah

anywhay i already delete that TSF warper but that didnt work lucky it has a time limiet i geuss... i remove it from my hotmail inbox

and who removed my signature logo/picture i will put it back

[>>Møønßlãzé<<]

Sniff......remove megawarp?
*cries*

[the WINNER]

Hey! I have an idea! Remove all these programs:
Ultrawarp, Megawarp, TSF Warper, Weird 2, Jazz2 QuickCheat, Anti-Access Violation patch(when you have used it) and Controller.


Initcent has nothing to do with this so removve all the programs listed. If you don't have some of these, remove OTHER program what can cause problem.

[>>Møønßlãzé<<]

Originally posted by the WINNER
Hey! I have an idea! Remove all these programs:
Ultrawarp, Megawarp, TSF Warper, Weird 2, Jazz2 QuickCheat, Anti-Access Violation patch(when you have used it) and Controller.


Initcent has nothing to do with this so removve all the programs listed. If you don't have some of these, remove OTHER program what can cause problem.

Did you ever think about the virus?
It was most recent after these programs where releashed

[defalcon]

Originally posted by the WINNER
Hey! I have an idea! Remove all these programs:
Ultrawarp, Megawarp, TSF Warper, Weird 2, Jazz2 QuickCheat, Anti-Access Violation patch(when you have used it) and Controller.


Initcent has nothing to do with this so removve all the programs listed. If you don't have some of these, remove OTHER program what can cause problem.
Okay, Anti-Access Violation Patch (as long as it's from overlord's site/J2O), should cause nothing about this. Delete all those traniners, darn cheaters. ;P

[FQuist]

Yeah, I wonder if these programs were solely used for testing single player levels. ;p

[Mystical]

Originally posted by Fquist
Yeah, I wonder if these programs were solely used for testing single player levels. ;p

I doubt it. I have a few cheat programs on the computer I downloaded but I never used them. And I very rarley cheat in single player.

[>>Møønßlãzé<<]

Okay, let's stop cheat and give it a try. <strike>If it dosen't work, Overlord hands free usernames out to his ultrawarp.</strike> :P
Btw. Your saying Overlord putted badies in his ultrawarp?
I Think I known what program it's! ;P
Umbaman *Skulls at umbaman* send me this program:
http://upload.turbosport.co.uk/gallery3/2002429154044319072.jpg
I'm testing about it, I give my results soon
But right after he send me it, I got the problem too
Anyway, it's a crap of cheat program ;P

[Cpp]

Originally posted by the WINNER
Hey! I have an idea! Remove all these programs:
Ultrawarp, Megawarp, TSF Warper, Weird 2, Jazz2 QuickCheat, Anti-Access Violation patch(when you have used it) and Controller.


Winner! My programs have nothing to do with the virus so you are removing them for no reason. But it can be/is possible that they got infected by it. So just redownload my progs again and check the file size if bigger than the downloaded one.

And Moonblaze!
I don't give UW keys to everyone BTW. But I'm not the only one who can give them *HINT*

[>>Møønßlãzé<<]

So if I said, gimme one, you don't give, so if I say Don't gimme one, you give me one? ;P

[Super Saiyan]

I dont think Overlord puts virusses in his programs. Also, I got TSf warper too, why I dont have the virus, huh!?

[FQuist]

Moonblaze, please pursue your questions elsewhere. The JCF wants to have nothing to do with cheating.

[Krezack]

As magoo and i already said, GULLIBLE! You silly people should know that going to a geocities site and downloading bloody trainers is gonna kill your comp.

I know how to get rid of the virus...I uh had it aswell, do this:
Delete: megawarp, ultrawarp, superwarp, duperwarp, sillywarp, warp, mega jj2 trainer, anything with the word "trainer" in it, anything with the word "jj2" in it thats not jj2 and/or a file jj2 needs to run.

I did this and now my system is virus free!

[Krezack]

http://feedback.blackisle.com/images/macro/burythisthread.jpg
AHAHAH! DIE!

[the WINNER]

I know how to get rid of the virus!!!
1.Press ctrl+alt+del.
2.Click Initcent.
3.Press enter. Then very quickly press ctrl+alt+del again. If you see two Initcents, you was fast enough. If you see only one, too late(you must act very quickly).
4.Wait 30 seconds.
5.Click on the upper Initcent and press enter. And then 'close program' to the two windows what appear!

Yeah, no virus :D

[the WINNER]

;) :r Peacemaker has a program. You can remove Initcent with it. But he gives it to nobody! Yeah!

[Ruffe aka Peacy]

Winner is a hacker. He hacks people and sends Initcent to them without they are seeing it! One of Winners victims have been Eagle! If someone know Eagle so tell this to him!

[the WINNER]

Originally posted by Ruffe aka Peacy
Winner is a hacker. He hacks people and sends Initcent to them without they are seeing it! One of Winners victims have been Eagle! If someone know Eagle so tell this to him!
By the way, don't lie to Eagle(unless you are his enemy).
I don't have hacking programs. How do you even prove it? Tell Eagle about that and Eagle will slap you back.
(by the way, don't attack, Peacemaker)

Edit 1:

If I am sending Initcent, why I am telling how to get rid of it?

[Ruffe aka Peacy]

If it isnt true so you are a liar. because that was what you told to me. But if it was true, then there is proofs. And you told how to get away from it because that doesn't help. You said to me that it didn't help either on your computer.

[Unhit]

Originally posted by Ruffe aka Peacy
Winner is a hacker. He hacks people and sends Initcent to them without they are seeing it! One of Winners victims have been Eagle! If someone know Eagle so tell this to him!

I don't know anything about this. But I also don't think Winner could hack Eagle. Eagle is a hacker himself, and theres nothing harder than to hack hackers ;)!

[>>Møønßlãzé<<]

I bet your waited for this :P
I don't have checked on other computers if it works there becuse i only have one (D'uh)
Folow theese steps
1. Reboot/start your computer
2. After pressing OK, folow the system start up by pressing ALT+CTRL+DEL
3a. If a program named wtujmwy start, stop it FAST
4a. Initcent and wtujmwy should be asked to stop, and they...stop! :P
3b. If a program named wtujmwy dosen't appear, keep closing INITCENT until it appear, stop it.
4b. Now initcent should stop recoming, and you have got rid of it this time! :P

It's hard to do, but IF you want to make a JDC duel, this is usefull
~Screen Shot
<img src="http://upload.turbosport.co.uk/gallery3/2002513193542862209.jpg">

[Unhit]

<s>Cool desktop Background, Moonblaze :P!</s>

Argh...offtopic :D!

[Link]

Although that solution may or may not be a temporary way to stop the "virus," we still need to find out more about what it is, and who made it.

I would assume that the creator will eventually come forward. I was talking to Derby on ICQ about this, and I came up with two possibilites:


The creator wants to prove a point, or teach people a lesson (such as "don't use cheat programs!")
The creator wants attention or publicity or something. (I can see this happening, because after coming back after making MW, people I had never heard of before would chat in a JJ2 game, "Hey! Are you THE Link? The one that made MW?!" That wasn't purposeful of course, but I do think that making MW has my name more well known in the JJ2 community)


Either of these possibilities need the creator to come forward. I guess there could be someone who just wanted to destroy JJ2, like "Ooooh! This game is so fragile that just one more crack and it will shatter into a hundred tiny pieces }>" but I doubt that.

In my conversation with Derby, he mentioned someone he thought was a suspect. I'm not going to name that person here, at least not until we do further investigation.

And finally, if you have been paying attention to the J2HG message board, you'll find that there has been someone under the alias "EO3" who claimed to make this "virus." I gave the IP to the JCF admins, who looked it up, and figured out that it was a joke message, but they wouldn't tell me who it was (<strike>The message was in the style of an ElectroPiZZa joke though</strike>). Whoever that was, please don't joke around about something serious like this.

[defalcon]

Well, it turns on at startup, right? Couldn't you at least remove it from the startup process, by editing the startup-ini-file (boot/win.ini, I foget which) or by using mscfg? It won't remove it from you system, but it won't be running either.

[Krezack]

Originally posted by Link
In my conversation with Derby, he mentioned someone he thought was a suspect. I'm not going to name that person here, at least not until we do further investigation.

First of all i would like to tell people some maybe not so permenant ways to remove programmes you don't want to occur at start up:

Click start>run>type: msconfig

Once in click the tab called 'Startup' then untick the programmes you don't want at startup.

Also i don't think that "wtujmwy" has anything to do with this, most likely just another trojan screwing over your computer.

And last of all: Of course we all know who the suspect is Link, its Krezack of course. Who else could it be? :rolleyes: (na i'm just joking with you Link :D )

[Super Saiyan]

No wait. I think those programs like TSF Warper or those other cheat programs dont have much to do with this virus. I think the virus is more a Add-On Script which uses programs which are <s>a bit</s> popular so much people would use it and get the virus. Im sure Its that, because I have TSF Warper too, but I dont have the virus.

Also I think I may know why this virus uses TSF warper and not other programs: The virus warps victims to places, he does that with TSF warper, Im sure about that. And those F9 list names could be some lil extra script.

[Link]

I highly doubt that this virus (or whatever it is) "attaches" itself onto existing programs.

[defalcon]

1. The virus CANNOT spread through JJ2, the only way is the method link pointed out about replacing it with a level blah b lah, but it'd be difficult to do.

2. I don't think it'd attach itself to programs, for various reasons <s>that I'm too lazy to type</s>

3. Overlord, Eagle and Krezack don't make viruses. Overlord is not that type of person, nor is Eagle or Krezack.

Use mscfg to take it out of startup. It shouldn't hassle you then.

[Unhit]

Eagle told me the virus would come through some warp programme, and he and Alberto are at the moment looking where you EXACTLY can get it from.
Darned cheaters :P. This is a nice punishment to all of you ;)!

[the WINNER]

UNHIT!!! STOP THAT!
Stop attacking, mr. Unhit!YEAH

Edit 1:

The virus uses programs.
1. The virus uses TSF Warper or Ultrawarp to make you to warp other positions.
2. Virus uses The Weird to change names.
3. The virus makes players invisible. You can do that with Stealth Kicker.
4. You get a black screen if you kick yourself with Stealth Kicker. Virus does that.

btw, how Eagle can know the virus comes with a warp program?

[Krezack]

Gee, this "virus" seems to mutate each day. Why would someone that advanced at programming bother to bother us? Tell me that darned cheaters. ;)

[Ruffe aka Peacy]

I had got Initcent away a week ago, but then, I needed TSF warper to do a thing, then, I downloaded it and just got Initcent back!! Thats a proove about it comes from TSF warper.....
I have been hacking Initcent sometimes, but I dont get any clues about who mae it or anything. There comes another program with Initcent, that one makes a new Initcent to the Windows directory. You just have to shut down those programs and delete the files, then everything is good again.

[MaGoo]

Nobody believed me when I was the first to say it was a bunch of programs.

[Unhit]

I definitely did not attack anyone, Winner.

[the WINNER]

Ruffe/Peacemaker? What are the files? Initcent has a random name. Everybody has different because the filename is random.
I saw that thing when I deleted UGKCAB.EXE(Initcent program). When I restart computer to make sure that Initcent is gone. Pow! Initcent came BACK! With a different filename. You know what is the filename if you do THIS thing:
1.Press ctrl+alt+del.
2.Close initcent.
3.VERYVERYVERY QUICKLY press ctrl+alt+del.
4.If you see a NEW program came to the close programs window, that is Initcent. That new program is the filename without EXE.
5.Close the new program.

If the Initcent did not close, try again. In my computer, this works SOMETIMES, but when it did not work, I tried to do this again and then Initcent was away.
Do that above and delete the virus program('new program in ctrl+alt+del'.exe).

[Cpp]

I was wondering... What does actually "initcent" mean? It doesn't mean anything in English. Maybe it's in another language. Can anyone recognise the meaning of this word?

[Unhit]

Perhaps it means "in_it_sent" (sent for cent), what means that it is included in a file?

[>>Møønßlãzé<<]

Originally posted by the WINNER
Ruffe/Peacemaker? What are the files? Initcent has a random name. Everybody has different because the filename is random.
I saw that thing when I deleted UGKCAB.EXE(Initcent program). When I restart computer to make sure that Initcent is gone. Pow! Initcent came BACK! With a different filename. You know what is the filename if you do THIS thing:
1.Press ctrl+alt+del.
2.Close initcent.
3.VERYVERYVERY QUICKLY press ctrl+alt+del.
4.If you see a NEW program came to the close programs window, that is Initcent. That new program is the filename without EXE.

Well done winner, the program is called wtujmwy ¬_¬

I didn't installed any crap called wtujmwy, or anything, but this program appears when initcent reload.
Oh, get it, just close the program.

I didn't got glasses and don't need any, what's the program in start up edit called? There's no program called initcent or wtujmwy.

*Falls on his knees* sniff...I did it, I'd found out how to stop initcent a single time, and people don't even say a little thanks
*Runs crying away*
*Finds a blaster*
*Shoots anything he sees*

[defalcon]

Originally posted by the WINNER
UNHIT!!! STOP THAT!
Stop attacking, mr. Unhit!YEAH

Edit 1:

The virus uses programs.
1. The virus uses TSF Warper or Ultrawarp to make you to warp other positions.
2. Virus uses The Weird to change names.
3. The virus makes players invisible. You can do that with Stealth Kicker.
4. You get a black screen if you kick yourself with Stealth Kicker. Virus does that.

btw, how Eagle can know the virus comes with a warp program?
Unhit isn't attacking anyone in specific - he's putting down cheaters, something I agree to ;P

Okay: EAGLE DOES NOT MAKE VIRUSES!!!! How does he know the virus comes from a warp program? Well, for starters, you guys here are saying 'oh, we got TSF warper and now we have this weird thing', so just a slight possibility he visited this thread or heard from others. :roll:

Now, Stealth Kicker? TSF Warp and Ultrawarp? If you choose to use all these trainers and programs, then technically it's nobodies fault but your own.

[Ruffe aka Peacy]

Why is everyone asking what the file names are??!! You must just find out yourself!! Find the two files 1. the Initcent file 2. the file wich makes a new Initcent Then delete them. Initcnet isnt in the startup things because the other one is and that one starts Initcent! So, if you want to get it away, find out wich names the 2 files have on your computer and then shut them down and delete them! (It isnt so hard as you think! You only are making it very hard!)

[the WINNER]

Originally posted by &gt;&gt;Møønßlãzé&lt;&lt;


Well done winner, the program is called wtujmwy ¬_¬

I didn't installed any crap called wtujmwy, or anything, but this program appears when initcent reload.
Oh, get it, just close the program.

I didn't got glasses and don't need any, what's the program in start up edit called? There's no program called initcent or wtujmwy.

*Falls on his knees* sniff...I did it, I'd found out how to stop initcent a single time, and people don't even say a little thanks
*Runs crying away*
*Finds a blaster*
*Shoots anything he sees*
The program is called WTUJMWY in your computer. It's random filename. The program what makes new Initcent file, I don't know its filename (or argh, it's random too?). And this is to all: TSF WARPER makes the virus so you, who has TSF Warper but not the virus, DELETE THE TSF WARPER NOW! The program don't make the virus in some two days. When you have TSF Warper for a week, you have the virus. :( . Moonbaze, your WTUJMWY is the virus, but did you even listen?? EVERYBODY HAS A DIFFERENT VIRUS FILENAME!
That's why they did not say "Thank you". So. Follow the Moonblaze's reply(That where was the very nice big pic :D ) and the WTUJMWY is a 'new program' what comes into CTRL+ALT+DEL list. If you don't understand, read MY reply how to get rid of INITCENT. But Moonblaze, delete the file and restart your computer. You have the virus still and with different filename.

[Ruffe aka Peacy]

A virus comes and it looks like impossible to get rid of. Then.... maybe a month goes, and then someone sees how to delete it. Then he/she tells to others and they delete it too. Then....soon the virus is only history. If someone gets it, he just deletes it. Initcents time is now over. Some people have allready got rid of it before and now I can do it too and so. I dont think it takes much time before nearly everyone knows how to delete it. So dont be affraid you never get rid of it. Its not even hard.

[Super Saiyan]

Maybe its: Ini't'cent, Inicent.
ya know from: it didnt do anything or its harmless ya know. Hmm maybe its not, maybe its just a stupid name.

[Cpp]

Good news, people!

Yesterday me and Alberto examined this virus a bit. As Alberto said, the virus spreads itself with a program called TSF Warper, exe name: Warper.exe, Icon: An exclamation mark in a yellow 3angle. His discovery was confirmed by me. When you run this warper.exe it creates a file named "Msacdlg.exe" in windows/system directory. It aslo adds this file to startup so it runs every time windows start. This is the reason why the virus didn't disappear when you deleted all the trainers you had(including warper.exe). When this file (Msacdlg.exe) is executed it creates another file in windows directory under random file name making it hard to find. This file has a windows icon so it looks like just like it was a non-exe or a file with unknown extension. Its file size is around 16,5 kb. And when this file is executed it creates the "Initcent" virus that messes with the game.

So shortly:
Warper.exe => Msacdlg.exe in windows/system directory => Initcent virus with a random file name in windows directory.

I'm not sure if there are any more files that were created by this virus but if you delete them the virus is gone for sure.

How to get rid of it:
1. Delete Warper.exe, don't spread it.
2. Run registry editor and delete this key: "Mscadlg" in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run
3. Delete Msacdlg.exe from your windows/system directory
4. If Initcent is running restart your computer otherwise skip this step
5. And finally find the virus file in the windows directory and remove it. It has a random name, windows icon, file size = 16896 b

This should take care of the virus.
Me and Alberto also winhacked this file and discovered a few things. It actually has a name. It's called Jazz 2 Annoying Virus. We also found all the bad words in it. LOL "Naked lori" :P Thanks, Alberto for the copy :P
But we still have one question unsolved. Who made it?

[Cpp]

For more information see the post by Alberto:
http://www.jazz2online.com/jcf/showthread.php?s=&threadid=4347

[>>Møønßlãzé<<]

Thank you so much Alberto, Eagle, and Overlord.
We own your guys a lot.

[defalcon]

:) Good job guys. I'm assuming you had some program/script that allowed you to find/alerted you about any files changed/added, etc, and worked it from there? Or something, just a guess. ;P

[Alberto]

Nope, I didn't have anything like that, at first I didn't suspect much of TSF Warper, because Initcent never ran, till I opened Msacdlg.exe many times, so. :P

[Derby]

By the way, this "virus" is not a virus at all. It is classified as a weak trojan horse invasion (in case you wanted to rename it). Good job on finding it.

[Alberto]

We already found it Derby. :)

[Derby]

I am aware. You have posted it in another topic. I am just clearing up the misconception that it is a virus.

[Unhit]

Good job ;).

Have you already got an idea who could have made this?

[Alberto]

No, not yet, actually Unknown is the one who could know who he is, because he saw someone saying the Omega stuff.

All what we know is that is an UT player for sure.

[Unhit]

OK.

Hmm....the UT stuff...this is also the text when you choose "Godlike" as botskill: "I am the Alpha and the Omega"...

[>>Møønßlãzé<<]

Whoa, it took 5 pages on JCF to solve how to get rid of it, slowpokes :cool:

[Unhit]

You could have helped them more ;).

[SSB_CC_Piccolo]

Well ive had Initcent And it was really (making me mad)
well how i got warper was in an e mail which i received
I dont know if this will help but i received this i shall paste it below


From :
"NoOne Somebody" bigbrick88@hotmail.com

To :
kylemctwist@hotmail.com

Subject :
a tsf megawarp

Date :
Sun, 10 Mar 2002 16:48:05 +0000

Attachment : Warper.zip (60k)


hi. im worlock from jj2
look I found a tsf megawarp. it really works fine good. try it.
bye worlock.


----------------------------------------------------------------
MSN Photos is the easiest way to share and print your photos: Click Here

Notice: Attachments are automatically scanned for viruses using



Hope This Might Help

( God Am i Attarcted To Virus's Or Somthig!)

Gotta Love ME :P
$§ß PÎççÖlÔ

(EDIT: Misspelled (-) LOL :) )

Derby: Content edit/replacement.

[SSB_CC_Piccolo]

:o While Playing Unreal Tounry 1 day around a month and a half ago i remember a fellow with the name Worlock AATO im assuming that AATO means alpha and the omega
he was using Xan the only player who can do the taunt
I Am The Alpha And The Omega
He Kept Flooding That....... This May not be useful
OR it May be useful im not sure ...
Well If This Help ( And i hope it does)
Same With my post Above with the E-Mail From him
WELL I HAVNT DONE THIS IN ABOUT A YEAR AND I WANNA DO IT
SO ( My Signature Not Used For About a Year)

:-) I DEMAND A REFUND!

:lol: I Crack myself up

[>>Møønßlãzé<<]

Originally posted by SSB_CC_Piccolo
:o While Playing Unreal Tounry 1 day around a month and a half ago i remember a fellow with the name Worlock AATO im assuming that AATO means alpha and the omega
he was using Xan the only player who can do the taunt
I Am The Alpha And The Omega
He Kept Flooding That....... This May not be useful
OR it May be useful im not sure ...
Well If This Help ( And i hope it does)
Same With my post Above with the E-Mail From him
WELL I HAVNT DONE THIS IN ABOUT A YEAR AND I WANNA DO IT
SO ( My Signature Not Used For About a Year)

:-) I DEMAND A REFUND!

:lol: I Crack myself up

You'r the third Picolo here ¬_¬

[SSB_CC_Piccolo]

IM THE ORIGINAL PICCOLO! HENCE SSB!!!!!

[Chiyu]

Originally posted by SSB_CC_Piccolo
IM THE ORIGINAL PICCOLO! HENCE SSB!!!!!

That's right. This Piccolo has been around for a very long time, even before he joined CC he has been on my ICQ list for a loooong time.

[Unhit]

Everyone says he'd be the original one...

[Super Saiyan]

Looser, Ive found out who it was :P Its some guy called Neo3 or Meo3 something like that. Its at tha j2hg Message Board.

[SSB_CC_Piccolo]

Yah Know what i was in KP too Kirby First Clan ( Boy Those Were The Good Ole Days ) :) and that again proves i the original piccolo LOL KP = Kirby Puff

Yes i am the original Piccolo Hence KP! And SSB!

HENCE HENCE HENCE HENCE HENCE HENCE HENCE HENCE HENCE HENCE HENCE
HENCE
HENCE
HENCE HENCE
i like that word :)
HENCE
:lol: I DEMAND A REFUND

[Cpp]

Originally posted by Super Saiyan
Looser, Ive found out who it was :P Its some guy called Neo3 or Meo3 something like that. Its at tha j2hg Message Board.

That was EO3 and it was a joke.
Ask Link if you don't belive me.

[Super Saiyan]

Strange Joke huh :mad:

[JZBlue]

¬_¬ EO3.. I will eat you alive

[the WINNER]

EO3 is called "OMEGA 3". Go to J2HG site (http://link.idlegames.com/j2hg) and go to the forums. After that, find the topic. Because the site is OFFLINE, I can't link you to the topic but I will link you straight to the topic when the site goes back online. Cuz I dunno the link to the Topic in the J2HG forums :( I will edit the post when the site is online.

[Super Saiyan]

Oh well, You didnt read the whole thread I think, anyway we also know it isnt a virus, but we just call it so.

[the WINNER]

waking up old thread...

[Stijn]

I would give a warning for this. Too bad Im not an admin.

[Electric Ir]

Indeed. Also, it doesn't make sence and it's just to get your imaginary post count up.

[Blackraptor]

This whole topic was even better than a movie, I wish to see more breathtaking topics like this. Goodjob ppl, and im glad the virus is over.

[Trafton]

Originally posted by Blackraptor
This whole topic was even better than a movie, I wish to see more breathtaking topics like this. Goodjob ppl, and im glad the virus is over.
The virus, which was not actually a virus, was over last June. ;-P

Anyway, to make this post have a point:
No one has been infected with this Trojan since it originally appeared. The mass-mailing was the only spread there was, other than for testing reasons. The Trojan, which was more or less non-damaging, is now pretty much obsolete. While no antivirus program detects it, there is a very low chance that this Trojan will ever appear again. The only remaining copies are controlled ones and the Trojan probably is not active on anyone's computers any longer. Yay.

[KRSplat]

This is a revived topic. There was no reason for you to just say that you wanted to wake up an old thread.

As for the virus itself, as Trafton said, it is gone.

[Tubz]

Boy the virus lasted 2 months, that's crazy.

[Trafton]

Originally posted by JJ Tublear
Boy the virus lasted 2 months, that's crazy.
It lasted for a lot less time than that...it's just that it took a while to note the behavior of the Trojan. It was only a threat for a week, maybe less.

[<Crono>]

This "virus" has been going around for a looooooonnnnnnnggggg time, it was originally distrubuted via an email from someone called Worlord inside a TSF/1.23 Megawarp. Once run the "virus" is copied into your c:\windows dirctory it could be yours %system% folder but I'm pretty sure its Windows. it then makes two files of itself, one, which does sll the memory editing has a random 4 character (plus .exe) name, the other is called mscdlg.exe or somthing along those lines (its been a long time), this one restarts the first program if it is ended(in win98/me the first program will appear in the task menu as Initcent) and remakes a new randomly named copy if it is deleated. To get rid of this "virus" you must deleate the mscdlg.exe file. I'm not sure if you need to end its task or not (it may only run on startup or when the other file is unloaded). I beleive you can stop it from starting up by unchecking it in the startup tab of msconfig (choose run from the start menu and type in msconfig).
This "virus" does a variety of extremly annoying things to JJ2 but seems to effect nothing else. Here is a list of what it is known to do:
Randomly warp you to a random location in the level occasioanlly.
Occasionally change the ammount of roasts/points/gems needed to win a game.
Occasionally LOCALY rename other players in a game to innapropreate words/phrases.

I hope this information hopes you get rid of the "Virus," Initcent.

BTW, SSB CC Piccolo IS the original and true piccolo, the others are the copycats :P

[ßúññ¥€lmérTbtCC]

Originally posted by Trafton
The virus, which was not actually a virus, was over last June. ;-P



Yea i agree, i know it exactly, since it happened at the times of JDC. Evil topic revivers.

[Trafton]

Originally posted by <Crono>
This "virus" has been going around for a looooooonnnnnnnggggg time, it was originally distrubuted via an email from someone called Worlord inside a TSF/1.23 Megawarp. Once run the "virus" is copied into your c:\windows dirctory it could be yours %system% folder but I'm pretty sure its Windows. it then makes two files of itself, one, which does sll the memory editing has a random 4 character (plus .exe) name, the other is called mscdlg.exe or somthing along those lines (its been a long time), this one restarts the first program if it is ended(in win98/me the first program will appear in the task menu as Initcent) and remakes a new randomly named copy if it is deleated. To get rid of this "virus" you must deleate the mscdlg.exe file. I'm not sure if you need to end its task or not (it may only run on startup or when the other file is unloaded). I beleive you can stop it from starting up by unchecking it in the startup tab of msconfig (choose run from the start menu and type in msconfig).
This "virus" does a variety of extremly annoying things to JJ2 but seems to effect nothing else. Here is a list of what it is known to do:
Randomly warp you to a random location in the level occasioanlly.
Occasionally change the ammount of roasts/points/gems needed to win a game.
Occasionally LOCALY rename other players in a game to innapropreate words/phrases.

I hope this information hopes you get rid of the "Virus," Initcent.

BTW, SSB CC Piccolo IS the original and true piccolo, the others are the copycats :P
That is useful information...too bad we did not have it when we were searching for the person who sent it. ;-P

[Tubz]

Trafton, Crono already said everything you just said in the quote. Hmm, well I never play JJ2 that much anymore, guess i've lost my interest. So I was probably away from JJ2 the time of this virus.

[Blackraptor]

I was a way as well. Also, this virus is a part of history of jj2, people should read it and see what happend at jj2 in the past. ITs very fun to read actually.

This is the 200th post here btw. I claim page

[FQuist]

Don't revive old threads the Winner. If this behaviour lasts I will have to give a warning.

[Cpp]

Haha this topis is one of the topics with the most replies in General Jazz 2 Talk.

[Xion]

This is just somebody having fun with C4. Enough said.