SRL Archive - RuneScape News and General

I was recently hacked. The hacker changed my registered email and I am still trying to recover my account. I have never been hacked before, so I have every reason to believe that it was caused by a script from this site.

Any help/advice would be appreciated.

Scripts I've used:
http://villavu.com/forum/showthread.php?t=34507 (This was the last script I used before I lost my account.)
http://villavu.com/forum/showthread.php?t=57454
http://villavu.com/forum/showthread.php?t=68636 (I don't think it was caused by this script.)

You can look source of those scripts. they are safe

Reformat your computer and reinstall Windows. THEN change all your passwords and stuff. You probably got hacked from a RAT from old Java bots you probably used. All those scripts are clean, and you can check the source code in them if you're not sure.

Well you weren't hacked by any of the SRL Members! That's for sure!

Maybe you went to a site which gave you a keylogger. Examples are site from people on runescape who say something like: "New dung glitch, search on youtube bla bla bla…". Often these links put a keylogger in your java directory. Also some tinychat links have this. Maybe you downloaded a keylogger somewhere else, but one thing is for sure it wasn't because of SRL. All the scripts are open-source and you can easily look through them to see if there is a keylogger whateva…

Anyway sorry to hear you got hacked dude

I have recovered my account and have the last Ip address that logged in with it. My bank was completely wiped out.

From: Harry
Reformat your computer and reinstall Windows. THEN change all your passwords and stuff. You probably got hacked from a RAT from old Java bots you probably used. All those scripts are clean, and you can check the source code in them if you're not sure.

These are the only bots I've ever used.

Post the IP here or PM a mod (I.E me) to have it checked against the SRL user database

From: Inception
These are the only bots I've ever used.

Then you went to a phish site, or used a fake Simba. There are fake Simbas on YouTube etc. Are you sure you only got it off wizzup.org/simba/ and nowhere else?

Go reformat and reinstall just to be safe. Or you will probably find yourself in trouble again, as no scripts here did it to you (at least not any you linked to, I checked all the code in them).

No results on IP-check. Hostname not found and the IP is located in china

I appreciate everyone's help. I'm not trying to accuse anyone, I just don't know where I could have picked a key logger up. I downloaded Simba from the correct site and haven't used or downloaded any bots apart from this site.

I plan on reformatting my computer. I am just really confused because I am computer savvy guy, so it's hard to believe that I could let something like this get by me..

There are many ways you could have gotten it such as drive-by download exploits, if you're using an outdated browser, etc. Such is life on Windows.

Good luck with your reformat, and might be wise to use a bankpin next time if you don't already.

From: Harry
There are many ways you could have gotten it such as drive-by download exploits, if you're using an outdated browser, etc. Such is life on Windows.

Good luck with your reformat, and might be wise to use a bankpin next time if you don't already.

I do use a bank pin. That's why it is strange to me. I wasn't aware that a key logger was able to detect your bank pin as you entered it.

That's pretty interesting then. Was it a common number? Part of your password? Some other relation they could have known? 100% sure you've never used any other "bots"? You not play for 3 days so they were able to choose "I forgot PIN"?

From: Harry
That's pretty interesting then. Was it a common number? Part of your password? Some other relation they could have known? 100% sure you've never used any other "bots"? You not play for 3 days so they were able to choose "I forgot PIN"?

No, no, no.

Yes I am 100% sure I haven't ever used any other bots. Also, my pin deletion is set to 7 days. And it happened last night after I started a script to run while I slept.

dude someone rating you, he can see what your doing on your PC and he was tracking you, and saw how you entered your bank pin. you could just play runescape server and when you use online client it can download lot of sht to your pc and store it somewhere and thats all you got rat'd.
format your pc and do a clean installation of windows 7 and do all updates.
optional: install avast antivirus, its good free antivirus, or just download any good cracked from torrents.
but be carefull cracked programs over torrent may contain viruses and all kind of shit. download from trusted sources.
hope i helped.


http://en.wikipedia.org/wiki/Remote_administration_software

…Was your PIN your birth year? :duh:

Ouch, that hurts. Seeing as the last IP was in China it was probably a RAT used by gold-farming sites to add to their stash. Be careful what you download.

From: Bad Processor
Ouch, that hurts. Seeing as the last IP was in China it was probably a RAT used by gold-farming sites to add to their stash. Be careful what you download.

Or they could have been on a VPN, which is much more likely. :P

From: okokokok
Well you weren't hacked by any of the SRL Members! That's for sure!

Maybe you went to a site which gave you a keylogger. Examples are site from people on runescape who say something like: "New dung glitch, search on youtube bla bla bla…". Often these links put a keylogger in your java directory. Also some tinychat links have this. Maybe you downloaded a keylogger somewhere else, but one thing is for sure it wasn't because of SRL. All the scripts are open-source and you can easily look through them to see if there is a keylogger whateva…

Anyway sorry to hear you got hacked dude

this is what exactly happened to me, i was talking live with the hacker, too.

luckily he didnt have my pin because i ran the rat java-drive by after i opened my bank, so he couldnt track it.
i disconnected the internet right away after he gave me a hint then i started reformat my comp.

@inception, make sure you change all your email password, runescape pass on a different computer ( and maybe nor your friend's comp either ) make sure its a clean one. then reformatt, recover ur pass.

@Inception
Did you save info with my form (in AK smelter)?

It's the people who do this kind of stuff, that ruins the game.

From: Narcle
@Inception
Did you save info with my form (in AK smelter)?

Yeah I did.

You can easily recover the account with your IP address - put it in the "other info section".
Useful IP's are not only the creation IP's (most useful imo), but also the most played on IP's.

From: Inception
I do use a bank pin. That's why it is strange to me. I wasn't aware that a key logger was able to detect your bank pin as you entered it.

If someone is using a good keylogger then u are screwed, because the best keyloggers nowadays make screenshots when u enter your bankpin. So that is a possibility too.

I just did a scan through all of my .ini files and I found one from an RsBot script. I must have tried to use that a while back and it slipped my mind. There is a good chance that's where I exposed myself to the hacker.

Sorry for getting everyone worked up, but I think an increase in security is something that should be looked at regardless.

Everyone blames the chinese :P

So much for SRL being the only "bot" you've ever used, eh :p

It wouldn't go past my mind that the older Java bots are now going into people's accounts they used before, and wiping them. How's gold4rs going to remain in business without their bots? Cleaning out their previous users.

From: Harry
So much for SRL being the only "bot" you've ever used, eh :p

Yeah, my mistake. :duh: