Potential harmful mod

[Red_baron]

I have used your modpacks for over a year now and am a contributor. I have never had an issue like this until yesterday. I just installed the latest modpack 1.11.1.3 yesterday and after a few matches, VERY strange things started happening. While in a match, my keyboard started acting possessed. In chat it said "arty loves me". ??? Then it would go into sniper zoom. I would try to turn left and it would go right. Like someone else was controlling my keyboard. I immediately rebooted and all was well again until several more games and it started up again. I did a virus scan and see no viruses. Each time a reboot would stop it temporarily. I have since renamed the folders in res_mods and the problem has gone away.

 

I can only guess that maybe one of the modpacks has a script that is kicking off. I did capture a screen shot of my chat that I did NOT type that says, "wel shit, Just like that we lost". I will attach  the res_mod files if you would like them to review to see if you can see what on earth could cause it. I seriously doubt you would condone that behavior. Please let me know as I'm adicted to your mods and will greatly miss them until we know what is going on.

configs.bad.zip mods.bad.zip 1_11.1.3.bad.zip

[Aslain]

I don't see anything wrong in files you attached. I don't have any mods that says "arty loves you", maybe it was different message? Would be good if you can show it on screenshot or video and also attach logs properly like it says in my signature.

[Red_baron]

Had I thought this screen shot would provide any help, I would have included it. All it shows is what appears that I typed. I did NOT type it. It has spammed the map with locations. It has acted like it is being controlled by someone else. I feel confident that my firewall is good. I'm using Opnsense and no other strange behavior is happening. It only happens with the modpack installed.

 

There is no way that I am reactivating this modpack until answers are found. At least that is my thought process until convinced otherwise. Is there a possibility that what ever got installed is in another directory? I do see remnants of the modpack still in the game even though I renamed the directories and replaced them with blank ones.

[Quaksen]

It's highly unlikely that only one user would be affected with your mod selection shown in logs.. 

[Red_baron]

Meaning what? It IS happening to me. Like I said, I've used these modpacks for a couple of years and never had anything like this. But if that is all I'm gonna get back, I guess I'll move on.

[Aslain]

@Red_baron You still didn't attach the logs...

but... I don't think that your issue is mod related. To me it looks like someone "hacked" your computer, or remotely controling it with some software. If I were you I'd check the PC for such software.

[Red_baron]

Oh man. I'm sorry, my bad. Totally missed the part about the logs! Here they come:

World_of_Tanks_NA.zip

And I have to agree with you that it certain

l

[Aslain]

Can't you just run the logs archiver app so it can collect all required logs automatically? I woud like to see all of them.

 

2021-02-10 13:32:44.494: WARNING: [root] [XFW/Actionscript] getMods: directory: res_mods/mods/xfw_packages does not exists

 

Have you tried to manualy delete some mod files? Because either you deleted this directory, or you didn't install the mods as admin, so the mods cannot access to their own files.

 

I don't see anything in python that I haven't seen before from time to time. Except for this warning above.

 

Either way check your PC against suspicious software and connections. To me it looks like someone is pranking you, if this all is real. Probably someone you know.

[Red_baron]

Sorry... we can stop. It is not apparently anything to do with Aslains modpack I'm happy to say. After 24 hours of no issues all of a sudden I started getting a runway keyboard while typing to you in the browser here. So sorry to have bothered you, truly. I suspect the wireless keyboard at this point. Perhaps it is doing some sort of keystroke macro recording and playing back and I have no idea how or why. I'll remove it and see if that solves it. GAH what a PITA.

 

Thanks for your efforts.

[Aslain]

Thanks for letting know :)