(BlueStone) Found mining virus in Citizens

[daring dagger]

Could u give me a reasonable explanation?
It may be not your fault, but we found the virus in citizen's working directory.

[plucky jolt]

(BlueStone) Found mining virus in Citizens

Hi I'm AutoThreadBot! Don't mind me, I'll just be adding the helper team to this thread so they can see it. A human will get to you soon.
You can block this bot if you don't want to see these messages, I won't mind.
<@&525394568410038282>

[daring dagger]

files will be uploaded soon

[floral trench]

"mining virus" ?

[marble mirage]

probably just that plugin claiming it again

[daring dagger]

It seems like it is mining eth.

[floral trench]

link me? missed that

no I'm not downloading this file

[marble mirage]

please delete that

[daring dagger]

our gpu is 100%

[floral trench]

sorry, to protect our users we cannot allow you to upload random zips

[marble mirage]

that's your basis on something being a virus...?

[floral trench]

maybe post your logs, might help

!logs

[marble marsh]

Info: logs

Please post your full latest log file.

Background Info: One of the most helpful tools to identifying the source of a problem is your server logs file! Logs contain all sorts of important information like server and plugin versions, any error messages, and a lot more important information (More Info).

How To: Your log can be found in the logs folder within your server folder. The most recent log is a text file labeled latest.log. To get help using these logs, please open that file in a text editor and copy all of the text, then open https://paste.denizenscript.com/New/Log and paste the text into the box on the page. Then click "Submit" and copy the URL and paste that back into this channel.

Please do not upload the file to Discord or to other pastebin services, use the log pastebin linked above.

[daring dagger]

user：pancake233.bukkit92301
url：stratum+ssl://etcssl-asia.f2pool.com:8180
commandd：./core -a etchash -o stratum+ssl://etcssl-asia.f2pool.com:8180 -u pancake233.bukkit92301 -RUN -reboot-times 0

[marble mirage]

what

[daring dagger]

this is the info of the virus

[marble mirage]

now where are you referencing it to Citizens

[floral trench]

(also, why do you have a windows server?)

[daring dagger]

this virus is running in citizen's plugin folder

[daring dagger]

it is ubuntu, bro

[marble mirage]

then you have a virus unrelated to Citizens. You should consider running an actual virus scan

https://github.com/CitizensDev/Citizens2
https://api.github.com/repos/CitizensDev/Citizens2
"created_at" "2012-02-17T17:36:29Z"
to start, as a repository that:

• has been up for over a decade
• has always been public
• is used by thousands of users
  credibly, as it's against Discord's, Spigot, and GitHub's ToS, we could never get away with something silly like that.

everything has always been and is open source - it's completely transparent.
you have a virus you obtained somewhere else and we'd recommend you do a virus scan

[zealous ferry]

@daring dagger egrep all the plugin files for mention of eth. that should narrow it down to which plugin.

[daring dagger]

It may be not your fault, ive said. I want to know if you can provied any help and why this virus appears in citizen's plugin folder

[floral trench]

maybe let's move this to #1027976885520584814

[daring dagger]

ok, i will upload all plugins and latest.log later

[floral trench]

no, you should not upload your plugins

it is not safe for us to download your server

[marble mirage]

don't upload anything here if you have a virus. before you proceed with anything you should do a virus scan.
aaaaand then move to #1027976885520584814 if you need help with that / anything after

[primal oasis]

Thread Closing Reminder

Has your issue been resolved, or your question been answered?
If so, please use the </resolved:1028673926114594866> command to close your thread.
Or </invalid:1028673926898909185> if it's not possible to resolve.

If not yet resolved, please reply below to tell us what you still need.

(Note that if there is no reply for a few days, this thread will eventually close itself.)

@daring dagger

[daring dagger]

well

[primal oasis]

Thread Closing Reminder

Has your issue been resolved, or your question been answered?
If so, please use the </resolved:1028673926114594866> command to close your thread.
Or </invalid:1028673926898909185> if it's not possible to resolve.

If not yet resolved, please reply below to tell us what you still need.

(Note that if there is no reply for a few days, this thread will eventually close itself.)

@daring dagger

[primal oasis]

Marked Invalid

Thread closed as invalid.

[primal oasis]

Thread Reopened

Thread was manually reopened by @fringe garden.

[marble mirage]

this thread was wrongly opened in favor of #1216163370399694929