Edit History

On 4/1/2024 at 7:12 PM, thealmeida said:

Boas pessoal, o server chamou-me à atenção mas estou com algumas preocupações relativamente à segurança dos jogadores e como não percebo nada disto, decidi vir questionar aqui a ver se alguém me esclarece:

 

Inicialmente após sacar corri o Malwarebytes que acusou um trojan ( Trojan.MalPack, C:\GAMES\SHIVA_CLIENT_29.03.24\CSHIELD.DLL)

Após isto fui ao VirusTotal e está aqui o report ( https://www.virustotal.com/gui/file/a9569d1bbc4dcd7ceb60d8399ff24efb7f1fe0b887778a880cb24c36d6d955ee/detection )

Como acusou tanto num lado como noutro fui ao discord do sv questionar e o que me responderam foi o seguinte:

Ou seja, do pouco que eu percebo, de momento o keylogger do servidor não serve nenhum propósito nefário, mas isso pode mudar com uma simples atualização do patcher certo?

Desde já muito obrigado pela atenção,

TheAlmeida

Hi.

1. Our DLL and shiva.Exe were manually checked by Windows Defender Team and rated as safe.

2. With major Cshield updates, we may have to request a new check from Windows Defender. Which usually takes 1-2 days. During this time, Windows Defender detects it as a keylogger or other viruses. Large anti cheat systems log significantly more and intervene much deeper in the system, but because they have an official certificate they will be recognized as clean by all anti-viruses.

3. We are not an official company and therefore we cannot apply for a certificate which would ensure that every antivirus would whitelist us.

4. Every official anti cheat system uses things that are even worse than keyloggers. But the certificate shows them in all antivirus system clean.

5. What should we use a keylogger? Hack accounts? Guys, we have a whole database where your accounts are stored. The accounts are stored completely encrypted but we could change this option. Accordingly, keylogger is total nonsense.

6. We have been online for over a year. We have over 5k active players and there have never been any complaints about account hacking or anything like that.

7. Apart from that, our goal is to be a long-term server so we can't afford such strange fun.

Accordingly, don’t worry, it’s not a keylogger. Even if few antivirus recognize it as a keylogger. Yes, we log things like client crashes, client manipulation, debuggers, and even if cheats are started, that is also logged.

Otherwise no personal information will be logged.

On 4/1/2024 at 7:12 PM, thealmeida said:

Boas pessoal, o server chamou-me à atenção mas estou com algumas preocupações relativamente à segurança dos jogadores e como não percebo nada disto, decidi vir questionar aqui a ver se alguém me esclarece:

 

Inicialmente após sacar corri o Malwarebytes que acusou um trojan ( Trojan.MalPack, C:\GAMES\SHIVA_CLIENT_29.03.24\CSHIELD.DLL)

Após isto fui ao VirusTotal e está aqui o report ( https://www.virustotal.com/gui/file/a9569d1bbc4dcd7ceb60d8399ff24efb7f1fe0b887778a880cb24c36d6d955ee/detection )

Como acusou tanto num lado como noutro fui ao discord do sv questionar e o que me responderam foi o seguinte:

Ou seja, do pouco que eu percebo, de momento o keylogger do servidor não serve nenhum propósito nefário, mas isso pode mudar com uma simples atualização do patcher certo?

Desde já muito obrigado pela atenção,

TheAlmeida

Hi.

1. Our DLL and shiva.Exe were manually checked by Windows Defender Team and rated as safe.

2. With major Cshield updates, we may have to request a new check from Windows Defender. Which usually takes 1-2 days. During this time, Windows Defender detects it as a keylogger or other viruses. Large anti cheat systems log significantly more and intervene much deeper in the system, but because they have an official certificate they will be recognized as clean by all anti-viruses.

3. We are not an official company and therefore we cannot apply for a certificate which would ensure that every antivirus would whitelist us.

4. Every official anti cheat system uses things that are even worse than keyloggers. But the certificate shows them in all antivirus system clean.

5. What should we use a keylogger? Hack accounts? Guys, we have a whole database where your accounts are stored. The accounts are stored completely encrypted but we could change this option. Accordingly, keylogger is total nonsense.

6. We have been online for over a year. We have over 5k active games and there have never been any complaints about account hacking or anything like that.

7. Apart from that, our goal is to be a long-term server so we can't afford such strange fun.

Accordingly, don’t worry, it’s not a keylogger. Even if few antivirus recognize it as a keylogger. Yes, we log things like client crashes, client manipulation, debuggers, and even if cheats are started, that is also logged.

Otherwise no personal information will be logged.

On 4/1/2024 at 7:12 PM, thealmeida said:

Boas pessoal, o server chamou-me à atenção mas estou com algumas preocupações relativamente à segurança dos jogadores e como não percebo nada disto, decidi vir questionar aqui a ver se alguém me esclarece:

 

Inicialmente após sacar corri o Malwarebytes que acusou um trojan ( Trojan.MalPack, C:\GAMES\SHIVA_CLIENT_29.03.24\CSHIELD.DLL)

Após isto fui ao VirusTotal e está aqui o report ( https://www.virustotal.com/gui/file/a9569d1bbc4dcd7ceb60d8399ff24efb7f1fe0b887778a880cb24c36d6d955ee/detection )

Como acusou tanto num lado como noutro fui ao discord do sv questionar e o que me responderam foi o seguinte:

Ou seja, do pouco que eu percebo, de momento o keylogger do servidor não serve nenhum propósito nefário, mas isso pode mudar com uma simples atualização do patcher certo?

Desde já muito obrigado pela atenção,

TheAlmeida

Hi.

1. Our DLL and shiva.Exe were manually checked by Windows Defender Team and rated as safe.

2. With major Cshield updates, we may have to request a new check from Windows Defender. Which usually takes 1-2 days. During this time, Windows Defender detects it as a keylogger or other viruses. Large anti cheat systems log significantly more and intervene much deeper in the system, but because they have an official certificate they will be recognized as clean by all anti-viruses.

3. We are not an official company and therefore we cannot apply for a certificate which would ensure that every antivirus would whitelist us.

4. Every official anti cheat system uses things that are even worse than keyloggers. But the certificate shows them in all antivirus system clean.

5. What should we use a keylogger? Hack accounts? Guys, we have a whole database where your accounts are stored. The accounts are stored completely encrypted but we could change this option. Accordingly, keylogger is total nonsense.

6. We have been online for over a year. We have over 5k active games and there have never been any complaints about account hacking or anything like that.

7. Apart from that, our goal is to be a long-term server so we can't afford such strange fun.

Accordingly, don’t worry, it’s not a keylogger. Even if few antivirus recognize it as a keylogger. Yes, we log things like client crashes, client manipulation, debuggers, and even if cheats are started, that is also logged.

Otherwise no personal information will be logged.