Too many private servers!!

[wojtron]

Not sure if you are into Mu Online Development, but any viruses inside the main.exe are not viruses, but false positive Trojan signature or whatever virus. The reason that is detected as a virus is because inside the main.exe are happening some "Illegal" changes into the memory, such as loading libraries, functions being hooked or detoured, etc.. so the game can be adapted to the server administrator needs without having the main source code.

It's safe to play on most servers I would say, but yes, most players do have an antivirus and maybe they don't wanna disable it.

There's no MAIN source code, so no one can develop a correct main.exe without false positive antivirus reaction.

NOPE thats not the case. I play MU Online from season 1 on global and i remember when almost every client was virus free now its almost impossible to find a client without viruses.

It comes not only to main.exe which sometimes is virusfree but then many DLLs have trojan.wacatac or trojan.zexaf trojan.zedaf or another backdoors! And dont tell me its false positive cause when you reverse engineer them they are trojans cause i tried it many times on virtual machines !
Provide a MUOnline Server link and I will prove you theres a VIRUS not a falsepositive there, otherwise i could even pay to play VIRUS FREE server! Thanks

PS. Old CLEAN clients mostly on IGC had only IGC.dll which gave any alerts on virustotal which was IGC.Pua which really isnt a virus, but its impossible to find such one today!

If You are able to provide any server using CLEAN CLIENT give link and I will post results of my check here, THANKS

 

[PollySoul]

First 4 mu onlines that are in top, are administrated by same admin , same LAME CONFIG,no idea about administration and IT , same bugs,same errors. COpy-paste.

Server are alive for about 2-4 weeks, then dies...then he opens another one,and another one... just for money.

proof>

You are absolutely correct about this. Unfortunately this same owner or owners must have around 10-15 muservers, once one of them stops making money, they close it and open a new one with different name.

They are either cheating votes or paying a lot of money to xtremetop100 where the first 3 top muonline places are servers from this same owner. What he or they do is, once one of those 3 servers stops making money, they close or abandon it, open a new one and change the xtremetop100 listing to reflect to the new server. That's why you will notice those 3 top servers that change name very often but keeping the same site id (they are just changing url and info on the same account).

Sadly, xtremetop100 staff is doing nothing about it, which means that they are probably paying them a good amount of $$ or they just don't care and let them cheat votes with bots.

Also another note is, they always use e-mail for player support in the form of [email protected]. They are never using a ticket support system because they can't handle the tickets due to owning 10-15 muservers at the same time. So they prefer to redirect all e-mails to a single source so it can be easier to manage.

Apart from that, it might also be just a single man business or 2 at max. They only care about money, the servers are configured like a noob is behind it, most settings are left default. Almost all their servers have the same style, copy-paste stuff just with different exp/drop.

Another note is, if you play in any of those servers you will notice that most of the time the actual player base inside is very small and has NOTHING to do with what their online count shows in website. Of course they put fake online numbers to make people think their server is crowded.

Finally, they never put paypal or any other payment method where the customer can see their real name because they want to hide all their personal info to make it as anomynous as possible. If you notice they choose only payment methods that are taken care of third parties etc.

Well if you ask me, i wouldn't call them criminals but they are certainly fooling players by opening and closing servers like they were suits, just to make easy money by doing pretty much nothing since they managed to secure their placement on topsites by unfair means.

Proof (from one of the servers that was top 1 on xtremetop100 a few months ago)

 

[Ooo Yee]

NOPE thats not the case. I play MU Online from season 1 on global and i remember when almost every client was virus free now its almost impossible to find a client without viruses.

It comes not only to main.exe which sometimes is virusfree but then many DLLs have trojan.wacatac or trojan.zexaf trojan.zedaf or another backdoors! And dont tell me its false positive cause when you reverse engineer them they are trojans cause i tried it many times on virtual machines !
Provide a MUOnline Server link and I will prove you theres a VIRUS not a falsepositive there, otherwise i could even pay to play VIRUS FREE server! Thanks

PS. Old CLEAN clients mostly on IGC had only IGC.dll which gave any alerts on virustotal which was IGC.Pua which really isnt a virus, but its impossible to find such one today!

If You are able to provide any server using CLEAN CLIENT give link and I will post results of my check here, THANKS

no one will release free unpacked main, because people will sell it, its extremely huje job to unpack and make it fully working, wz are making traps and making developer life harder. u saw legend.mu recently just gave up

 

[zipper20032]

no one will release free unpacked main, because people will sell it, its extremely huje job to unpack and make it fully working, wz are making traps and making developer life harder. u saw legend.mu recently just gave up

Dreams But would be great to have a main source code xDD.

 

[007jodex]

Dreams But would be great to have a main source code xDD.

Not really. Even webzen know´´´´´s that main source is sh*t. Proves? Compare old version vs Season 6 Thai with .map vs IDA Season 7 or higher pseudo deco. 3 diferents main, 3 diferents teams code types, 3 diferents decades, same un-optimized problems. Any real developer, with experience & time, wouldnt waste time on webzen main source. Is better to work on Unity/Unreal or any 3d Engine, trying to replicate everything, like MuLegend did.

------------> Back to thread ideas.
Is obvious that keep working on webzen base just gave them problems. So much work, so much time, so much legal problems? so much ideas for develop(Win-Win).

There are many muonline clones on Android, even webbrowsers clones. Virus problem on MuOnline? Sure. Every developer wants to protect his own job(False Positive) & if any person got any viruses playing muonline, were cuz someone want it; specially from public repacks(Lot of noobs & pseudo-coders trying to make money).

About Same Admins with same servers with same config, with same names-> Same history from 2006, same from 2012. No one can fight agaisnt that. MuOnline players did not notice that type of info, they just wanna play a bit.

MuOnline history tells a lot of things.
1 - Webzen appears didnt care mutizens. Check official forums. (If they dont care players, did anyone think that would care us xD?)
2 - Webzen started to make ther own versions of actual customs.
3 - Game changed to Pay to Win & no one can reverse it. So players prefers balanced P2W.
4 - Admins not read any tutorial for settings or study how really work any system.
5 - Most Admins are young people..... the didnt lived *Gold Era*, dont know all new systems and how to use.(Did webzen do?)
6 - Real developers code for private use, & public Developers share for make reputation.
7 - Story Lore were lost after Season 2.(Maybe translation problems).
8 - Game take mecanics from others MMORPGS and maybe lost her essense(Talking about nostalgic players)

I belive that, this isnt other "Who is better team, who has better files" thread, so i would not talk about this; cuz having any team files, any version or any antihack, will not be any server successfull..

I think a real server is one word. "Market". Without that, is just any repack with a lot of custom that no one uses. Real servers have a big team, have "logic" drops & mobs, have dinamyc market for renovate players, have stability, use special events on cyclic times, generate social interactions.

Others, are just "one more.

 

[zipper20032]

Yeah, I agree. It's easier to rebuild the game from scratch and make a "new MMO" based on Mu using a nowadays game development engines. But yeah, the main sources I've checked under IDA are not even coded by the same team, which made me think that WebZen is hiring game development companies who are making this main based on what WebZen gives them. Not sure WebZen is having more than the Mu trademark and just owning intellectual property of these, but surely, from Season 6, those are not developed by WZ anymore.

Yes, most of the servers and even WebZen went to P2W. I'm not a P2W fan, never was. I am fan of in-game economy. Sure, paying for things like VIP maps which can boost you a bit, or 10-20% more XP boost, it's alright, but having full option items or things like that, it's a no-no for me. That's a "IWantYourMoneyAndDontCareAboutYou" kind of server.

Yes, that's true with the viruses. Most of them are like bitcoin miners integration and hooking on main from some shitty DLL from a stupid repack, but not in every cases. People who are reporting viruses are not developers(probably 70% of them or more aren't) and they can't know about what code alteration could mean for an antivirus which is identifying that portion of code with a Trojan signature.

 

[Severithe]

Do you mean the new servers with like 500-1000 players that have been popping up this couple a few years now? yeah I've been thinking that they're being run by the same people as well, but there are also some people me who returns to MU once in a blue moon and not care about the player count but still wants to try and run a server just for nostalgia or just a hobbyist administrator, I'd reckon at this point for me personally MU has become like creative-mode Minecraft in terms of the building aspect since it's simple to configure if you just public files/non-coding.

But back to the topic at hand, so far from what I've been seeing these couple years when I return to MU, they always somehow use the same style of advertising banners even (some character attacking a monster whilst showing damage numbers).

 

[lubo55]

Don't be angry that there are many servers. Make one to prove that you are better!

 

[commandcom]

Don't be angry about that there are too many servers. Make one to prove that you are better!
What the hell is there to cry about?
Every single noob think he can do better... (usually he cant)
And so they try to make their own noobservers and come here to cy for help how to do this and that, before even reading just abit of quides...
Most of these end with max 1 month timeline...
To know if server is done by love and knowledge you just read their intro, it must not contain words: pro, mega, super, best , bestest, top etc.
Most antivirus warning's come from free(non licence'd) packers and incorrectly cracked server files and its the top reason ii dont like "free" server files.
I still remember my first mega bad one that i got from 97d+99... chernobyl (

To view the content, you need to sign in or register

)
About legacy... who cares about that just be careful and dont abuse webzen's trademark by some wrong way...
Also be careful about 1 or 2 post "too good to be true" servers (look at online characters count or bar few times to see if it change) also see if server have forum/discord first and see activity(can be false aswell).
Never donate or buy something before you have been ingame and seen what's going on there.
Never buy items or stats for real money from players(mostly scam and its not allowed by servers rules).
Before you buy some server files be sure you buy it from some known developers(they have websites...)
and search seller id. (google it.) to see if he have(had) some issues previously.
Ask from friends or communities first about files that someone try to sell you.
Otherwise it is your money you loose by being stupid and you have nowhere to go to cry.

 

[Bakuya]

Funny thread, but i don't think there are any good private servers. The last 10 servers I played were made by cash-grabbers or by people who don't know anything about MU.

I'm trying to play a Season 17 non-reset server, with drops that are either checked map by map or the admin knows how to add them if missing.
All the servers had fake online counters.

Some of them were:
-Divine MU
-World Wide MU
-Universe MU
-Lemuria MU
-Empire MU

Currently waiting for 3 new servers that might be ok:
-Darkside of MU
-Veneno MU
-Mu Online Europe

I have to also give merits were merits are deserved:
- Teba MU (Divinity Network) - the only admin that knows what he is doing , the server has more than 10 years (with some DB wipes)
- MUX Legend (just tried this, and i like how you can see they don't have IGCN files)

I would play on any of those two but they have resets.

If you know any S16EP2 or S17 non-reset servers that i might wanna try , let me know.

 

[commandcom]

@Bakuya go check Noblemu there's plenty of different servers with different configs...
All those are similar but work different ways...
Also its pretty hard to say it like "this server is good and this server is bad" as there's tonz of different players who like different configs
like exp and shops and drops and shops and so on....

 

[BAVKAMU]

Too many private servers with a TOO MANY Fake Players (OFFTrade OFFATACK) on it i can say ... 50% of the mu private servers going offline after 3-4-5 months ...

 

[musoul]

Not sure if you are into Mu Online Development, but any viruses inside the main.exe are not viruses, but false positive Trojan signature or whatever virus. The reason that is detected as a virus is because inside the main.exe are happening some "Illegal" changes into the memory, such as loading libraries, functions being hooked or detoured, etc.. so the game can be adapted to the server administrator needs without having the main source code.

It's safe to play on most servers I would say, but yes, most players do have an antivirus and maybe they don't wanna disable it.

There's no MAIN source code, so no one can develop a correct main.exe without false positive antivirus reaction.

Has anyone actually analyzed the MU server releases and main.exe here? If it really is just a false positive, like proper malware analysis would suggest, it kind of makes sense—main.exe connects to the server, so it can look like malware. Still, it would be better if someone actually checked it to confirm that it’s clean and truly free of malware.

 

[zipper20032]

Has anyone actually analyzed the MU server releases and main.exe here? If it really is just a false positive, like proper malware analysis would suggest, it kind of makes sense—main.exe connects to the server, so it can look like malware. Still, it would be better if someone actually checked it to confirm that it’s clean and truly free of malware.

Absolutely. That would be a great thing, but I'm afraid is also time consuming for many of us.
Many players are non-technical players, so it's not really feasible to have a malware analyze each time there's an update of Main.exe or Main.dll.
Actually, 90% of the servers are using the Main.DLL client injection system which grants access to Main.exe memory at runtime (cause that's the easiest way to have a bit of control of the Main.exe and consider it like "client source". But this system can access your RAM memory from kernel processes and functions which is dangeours. For an antiviruses, some patterns could be pretty much safe. There's even MHP with "Spyware" system, getting your process list, USBs, data, desktop screenshots, which, of course, violates many things regarding privacy.

It's very hard to make an analysis for malware for each server. Pretty sure there are bad people which administrate this kind of game servers for any kind of MMO/game. The MU community is going for trust when it comes to MU servers, so, very hard to say which server could be a spyware, malware, etc

 

[musoul]

Absolutely. That would be a great thing, but I'm afraid is also time consuming for many of us.
Many players are non-technical players, so it's not really feasible to have a malware analyze each time there's an update of Main.exe or Main.dll.
Actually, 90% of the servers are using the Main.DLL client injection system which grants access to Main.exe memory at runtime (cause that's the easiest way to have a bit of control of the Main.exe and consider it like "client source". But this system can access your RAM memory from kernel processes and functions which is dangeours. For an antiviruses, some patterns could be pretty much safe. There's even MHP with "Spyware" system, getting your process list, USBs, data, desktop screenshots, which, of course, violates many things regarding privacy.

It's very hard to make an analysis for malware for each server. Pretty sure there are bad people which administrate this kind of game servers for any kind of MMO/game. The MU community is going for trust when it comes to MU servers, so, very hard to say which server could be a spyware, malware, etc

I understand you, but almost all MU Servers specifically the GameServer.exe, JoinServer, and all the other .exes in their files—have over 30+ detections on VirusTotal. This is a massive red flag unless a malware analyst examines it via VM monitoring; if they confirm it's just a false positive, only then can we say it’s truly clean and safe. Then, we will include the hashes of the original files verified by the analyst. By providing these hashes (MD5 or SHA-256) with every download link, users will know if the files are still the clean originals or if they have been tampered with by someone else.

 

[zipper20032]

I understand you, but almost all MU Servers specifically the GameServer.exe, JoinServer, and all the other .exes in their files—have over 30+ detections on VirusTotal. This is a massive red flag unless a malware analyst examines it via VM monitoring; if they confirm it's just a false positive, only then can we say it’s truly clean and safe. Then, we will include the hashes of the original files verified by the analyst. By providing these hashes (MD5 or SHA-256) with every download link, users will know if the files are still the clean originals or if they have been tampered with by someone else.

Regarding server files, yes, server files could be infected by something, and my advice is to have the source code for all of the server files so you can actually check them. Of course, the advice is for technical users. For non-technical users, most likely, you need to run those on a Virtual Machine so you won't have trouble infecting your PC.
That thing with hashes, it's the same as trying to analyze each Main.exe/Main.dll separately. The problem is not many know how to check with hashes or what's a hash. Pretty hard to cover every file as updates to those files may come from someone. At the moment, file sharing for server files is from other people's PC, which some are reliable source and real developers. Knowing the community is a must if you don't trust some files.

 

[musoul]

Regarding server files, yes, server files could be infected by something, and my advice is to have the source code for all of the server files so you can actually check them. Of course, the advice is for technical users. For non-technical users, most likely, you need to run those on a Virtual Machine so you won't have trouble infecting your PC.
That thing with hashes, it's the same as trying to analyze each Main.exe/Main.dll separately. The problem is not many know how to check with hashes or what's a hash. Pretty hard to cover every file as updates to those files may come from someone. At the moment, file sharing for server files is from other people's PC, which some are reliable source and real developers. Knowing the community is a must if you don't trust some files.

Yeah, you’re right—it’s better if there’s source code. For now, the only source code I know is SSEMU Season 1. Do you have anything else you can suggest? Most of the already compiled releases from Season 1 onwards shared here often get virus detections. Some JoinServer.exe files even get flagged by Microsoft Defender as a backdoor, so they’re really risky.

 

[zipper20032]

Yeah, you’re right—it’s better if there’s source code. For now, the only source code I know is SSEMU Season 1. Do you have anything else you can suggest? Most of the already compiled releases from Season 1 onwards shared here often get virus detections. Some JoinServer.exe files even get flagged by Microsoft Defender as a backdoor, so they’re really risky.

Yes. LouisEMU, LTPTeam, Emershow for Season 6.

For Season 1, DarksTeam I think is the most appreciated at the current moment (as they are pretty old in MU development). Didn't personally test the files.
Yeah, you can use the SSEMU, sure. These are pretty new files/modern files, so most likely are better optimised.
Anyway, any Season 1 source code is based on very old things optimized for modern days.

You can get a JoinServer source code and downgrade it to support Season 1, so this way you are pretty sure that isn't a backdoor or thing.
JoinServer is just a protocol which bridges the client from connect server to get into the game server. Windows Defender will trigger because it was made with very old VS Tools. Like VS 2005. Those compiled files can trigger the antivirus as the compilation pattern is different from modern compilation/compression algorithms, but also, yes, could have a backdoor left there by someone.

These days, many are interested in Season 6+ server/client files as these are the files which was introduced the Rage Fighter. Most likely you have to test them out.

 

[Dode]

Yes. LouisEMU, LTPTeam, Emershow for Season 6.

For Season 1, DarksTeam I think is the most appreciated at the current moment (as they are pretty old in MU development). Didn't personally test the files.
Yeah, you can use the SSEMU, sure. These are pretty new files/modern files, so most likely are better optimised.
Anyway, any Season 1 source code is based on very old things optimized for modern days.

You can get a JoinServer source code and downgrade it to support Season 1, so this way you are pretty sure that isn't a backdoor or thing.
JoinServer is just a protocol which bridges the client from connect server to get into the game server. Windows Defender will trigger because it was made with very old VS Tools. Like VS 2005. Those compiled files can trigger the antivirus as the compilation pattern is different from modern compilation/compression algorithms, but also, yes, could have a backdoor left there by someone.

These days, many are interested in Season 6+ server/client files as these are the files which was introduced the Rage Fighter. Most likely you have to test them out.

These days you can downgrade Season 6 files to basically season 1...
Ofc it will not feel the same as original Season 1, but close, some things are missing:
Defense sucesss rate works only vs monsters
Reflect damage doesn't work the same
You cannot be killed by enemy reflect in PVP if they are already dead.

Which for example to me is, most fun and best stuff of old seasons... and webzen ruined it.

 

[zipper20032]

These days you can downgrade Season 6 files to basically season 1...
Ofc it will not feel the same as original Season 1, but close, some things are missing:
Defense sucesss rate works only vs monsters
Reflect damage doesn't work the same
You cannot be killed by enemy reflect in PVP if they are already dead.

Which for example to me is, most fun and best stuff of old seasons... and webzen ruined it.

Very true. But most people have no idea how to downgrade from S6 to other lower versions. It's tricky to do that if there's no experience.