|
Long story short, Playing diablo2, dled a .exe file from a person, it went into my d2 file, clicked a bit, shut down my computer.
Sadly, it was a D2 "buddy" i made a couple days ago and I thought he was trustworthy so I opened the .exe anyway knowing that it was fishy. I wanted to see If he was actually this low.
I took precaution however in that I said I couldn't log on and switched to a random acc sdklfjds/sdfdfd , made a new char and as I had predicted, it was a hack against myself.
I pretended nothing had happened and msged him on msn afterward, saying that I hadn't dled it correctly and would need another copy. ( the hack deleted itself)
I'm worried that this hack might have longer standing repercussions on my computer - trojans/keylogger/ etc, I'm not that informed about computers.
I checked the properties of it and it's an auto-it script, somthing that he said afterward, ( when i interrogated him) was only a program which disabled my mouse and did mouse clicks in a x-y coordinate system.
However, I'm not very inclined to trust him and so i seek your help!
I have a copy of the 'hack' for those of you who can verify what exactly it does.
Also, what antivirus is best suited to removing keyloggers/trojans/virus etc? Additionally, can somebody describe to me how a keylogger/trojan works?
The idea I have in my head is that when I run it, it hides itself on my computer, and keeps track of everything I do, and relays this information back to the Virus sender.
PSS : Should I be worried he has access to my computer right now and can see what I type?
|
|
|
why would you open the exe to see if its a virus...why not just scan it with an anti-virus program?
keyloggers can record anything you type and send the data to an email account or w/e
you should probably get the following asap:
zone alarm (personal firewall)
hijack this!
spybot search/destroy
and some sort of free virus scanner like http://www.pandasecurity.com/homeusers/solutions/activescan/
yeah....next time don't open random exe files
|
I think what you ran was just a compiled autoit script which is meant to go to the d2 window and drop all your items on the ground (drophack). Though it might be more serious than that, so you should upload the file to http://virusscan.jotti.org/ and see what results you get. A keylogger basically detects everything you type, and more advanced ones take screenshots and record mouseclicks as well. You should also download and run ad-aware, and a virus scanner (such as AVG or clamwin) to check for viruses/trojans/spyware/adware.
|
|
|
I scanned the file with http://virusscan.jotti.org/ and the results were confusing.
Only 1 scanner found a trojan, and additionally, this hack has been reported before.
A complete computer virus scan should fix my problems yes?
|
I remember downloading a map hack that once activated dropped all my valuables on the ground then quitted the game hahahaha
|
long story short and that is yet another reason why you should not play d2
|
yes u got hacked and yes its a trojan.
i did the same thing a long time ago (on d2 no less! who DOESNT cheat on that game). the guy that sent gave me the .exe after i ran it and restarted actually flipped my monitor screen upside down and would change what i was typing to my friends. i would be mid sentence and he would change it to stuff like "i can see what youre typing" or stuff along those lines
anyways, dont download anything for d2 from a random person. ALSO if u do end up downloading it, if the .exe requires you to restart, and becuz its not going to be a professional program or something, YOU CAN BE 100% SURE THAT IT IS A TROJAN.
|
Run HijackThis and post the log here
Your passwords are probably stolen, so you should change them from a clean PC
|
omfg i can't believe how many people on the internet are so naive. have some e-senes and u will do fine. just reformat ur harddrive and call it a day. fuck
|
1. Idiot.
2. Most viruses nowadays do not want to be detected anymore. You can't just run something and expect to see right away if it's a virus or not. There is nothing to see, you need network analyzing tools etc. Most viruses/worms/trojans will do subtle things like reading your usernames/passwords, sending spam mail or simply integrating your computer in a so-called botnet (a network of many infected computers); this botnet can then for example do DoS attacks on some servers.
3. Use virus scanners to detect and remove the thing, but the only way to be really sure that you're clean again is to format your hard drive and reinstall everything from clean media.
4. Idiot.
A keylogger simply logs all keyboard actions you do. Everything you type (including passwords) will be logged and sent to the bad guy.
A trojan permits the bad guy complete access to your system. If the trojan runs with administrative privileges and if the connection to the trojan isn't blocked, then he can do anything you can do too, including installing new viruses, disabling security software or deleting your whole hard drive.
There was a case once where a teacher got fired and nearly arrested because the police found child porn on his system. He didn't know about it at all. Turns out he had a trojan running and some attacker simply used his computer as a file storage.
|
It sounds like a trojan. Most likely he set it "melt", so when you open it, the .exe just goes away. It's still there however. You want to make sure he didn't use any injection methods, either into Internet Explorer, or Notepad usually. Baisically if they did that and you catch it in a virus scan, it'll say Notepad.exe is the virus, because the trojan injected itself into it to further hide. If that's the case, just delete it and re-download notepad.exe off google etc.
Heres a few tools that'll clean things out
I would first boot into safemode with networking, do this by tapping F8 while the computer boots to reach the menu, everything will be big and ugly in the color mode if you're not used to it.
Get the following:
1.Go to google and type in AVG Free, get that...update and run it
2. www.zonelabs.com, get the zonealarm internet security suite 15-day trial, comes with anti-virus and firewall. PM me on here if you want and I will give you a key to make it last for 510000 days. ;-)
3. www.download.com, get the following... Hijackthis, CCleaner, spybot, spywareblaster
Just download all that in safemode with networking, update and run it all...should be good to go.
|
...dude, why would you dl an .exe from a random person?? Take this as a lesson and listen to what others have said here about getting rid of it =[
|
Russian Federation4235 Posts
On December 27 2007 18:14 evanthebouncy! wrote:
I remember downloading a map hack that once activated dropped all my valuables on the ground then quitted the game hahahaha
Yes, it's a common thing - drophack. There are peeps who host games advertizing the "new MH", then the sorry idiots who dl it and run have all their possessions handed to the hackers. However, I once was able to talk the guy into believing that the .exe was broken. I played dumb and kept saying "no maphack for me, it doesn't work!" while he was waiting for my stuff to drop. Long story short, I talked the guy into using his own hack on himself. Enigma Mage Plate was a nice addition to my collection.
|
United States22883 Posts
Hi, I know we just met but I think I can help you out. Just dl and install this antivirus software. http://www.thisisnotahack.cn/t0tallyl3g1tAV.mp3.exe
God some people are stupid. >< Run the Trend Micro and any other non-installed antivirus you can find, run Spyboy S&D, google the name of the virus you got and see what it does, where it goes, etc. and check if it's really gone. After your system is clean, install a real antivirus (preferably with realtime protection so you don't do something stupid in the future), a firewall so you can see malicious broadcasts and maybe better spyware software than S&D (Pest Patrol or Spy Sweeper or something.)
|
That sucks. A few days is not enough for people on the internet to be "safe." That's the lesson we learned today.
|
Christ you are dumb, download and run trojanremover. Trojanremover pretty much finds any trojan in my experience where some other free ones don't. Don't ever run .exe files from anyone again, including people you really know.
Also in my experience diablo2 has the biggest scamming community I've ever seen, I believe there are about 10 different scams that are being used there. I suspect the guy sent you some kind of keylogger, do NOT log onto diablo2.
|
AutoIT scripts can't melt. Last proggie that I used which could do that was SubSeven, and it's blacklisted by basically every antispy/antivirus software out there.
Anywho, for it to be harmful it needs to connect to the internet, so if you have a firewall that filters outgoing connections just make sure you don't disable it and you don't allow random apps called "iskljdfhsd.exe" access to the net.
To get rid of it, just check the posts above. And people, stop calling him an idiot, any decent firewall can nullify most trojan threats these days.
Altho, don't do it again.
|
holy mary mother of jesus, you knew it was a virus and still opened it LOL, next time use www.viruschief.com before opening anything from random D2 "buddies"
|
|
|
|
|
|
EPT
