SRL Archive - RuneScape News and General

My account just got hjacked for the first time. i honestly dont know how. i lost 100m+ and it was everything i had. The hjacker also droped/destroyed all the items in my bank. i have no quest items or anything. i have searched my computer and i think i have found a keylogger, but i dont understand how as i never really download anything stupid.

i have sent a report into jagex and am waiting for a response that they caught him. anyways now i cant get the keylogger off my computer. everytime i start my computer there is a small cmd that pops up and goes away fast and i have tried using Avast!, Mcafee, and spybot search & Destroy to remove it with no luck.

anyone ever get keylogged, or have any ideas of how to get this thing off my computer before i change my password.

also does anyone have any suggestions for starting with 0gp and nothing in the bank?
im surprised i dident go raging :P

Get some sort of dagger, start autoing… Work your way up again :P

From: 77tontos
My account just got hjacked for the first time. i honestly dont know how. i lost 100m+ and it was everything i had. The hjacker also droped/destroyed all the items in my bank. i have no quest items or anything. i have searched my computer and i think i have found a keylogger, but i dont understand how as i never really download anything stupid.

i have sent a report into jagex and am waiting for a response that they caught him. anyways now i cant get the keylogger off my computer. everytime i start my computer there is a small cmd that pops up and goes away fast and i have tried using Avast!, Mcafee, and spybot search & Destroy to remove it with no luck.

anyone ever get keylogged, or have any ideas of how to get this thing off my computer before i change my password.

also does anyone have any suggestions for starting with 0gp and nothing in the bank?
im surprised i dident go raging :P

Please reply with a comment of every script/download you have done in the last week or so.. Some can be found in AppData..

For Keyloggers/Rats, go to the following locations:

Startmenu -> Search for %AppData% press enter.. look for any .exe's and anything suspicious.. Can even be in folders/hidden folders.

Startmenu -> %Temp% and do the same..

Startmenu -> Regedit.. press enter. HKLM/Software/Microsoft/Windows/CurrentVersion/Run.. List all things in there..

Same thing for the RunOnce key in the same location. Run rootkit remove and Process Explorer to view any hidden processes that start without notice. If you do find it, get a batchfile from google that will "TakeOwn" the file then run the RM "FilePath" command on it..

Sounds like you got hit with a DarkComet Rat with Injection or something from hackforums.. Yes I used to live there.. Only time the CMD pop's up is if the person is stupid enough to enable injection on any Viruses/Rats made.. If you have the knowledge or a friend who does, let them reverse it. I forgot what the term is called for reversing them but yeah.. Speak to a whitehat on hackforums or something if my tips didn't help.

hmm speaking of that.. my friend (IRL) sent me a vpn link from the hack forums… What i dont understand is why the hjacker dident target my Paypal, or bank account…

From: 77tontos
hmm speaking of that.. my friend (IRL) sent me a vpn link from the hack forums… What i dont understand is why the hjacker dident target my Paypal, or bank account…

Those are actually worth being backtraced, and therefore more likely for him to get caught.

From: 77tontos
hmm speaking of that.. my friend (IRL) sent me a vpn link from the hack forums… What i dont understand is why the hjacker dident target my Paypal, or bank account…

Because they're clearly NOT experienced enough.. The CMD windows is a dead give away.. that rat is using a Server.. Usually "NO-IP.com".. An attack on your personal shit is going to definitely get some attention from cops.. Think about it.. when a bank is owed 1$ from a user, they will NEVER forget.. the interest will accumulate. Imagine what happens if he/she robs you.

If you have friends that are sending you links like these as jokes I'd say you need to watch your back. As for a VPN link from hackforums.. WTF?! really? A VPN? -___- I don't even.. That's probably the most retarded thing I ever heard of.. No offense to you or yourfriend or anyone reading.. but a VPN or any computer related stuff that is NOT hacking stuff should NEVER come from hackforums..

Anyway your probably going to need a good bit of knowledge/ a do it yourself reformat.. OR get a whitehat to clean your computer.

well i asked my friend to find me a vpn for accessing a server i was ipban on for minecraft. but if its easy to trace should i try getting the server rather then deleting it right away. Currently i am running a scan with the hardrive in an external hub on my laptop. if i have to reformat my computer ima be real pissed..

Ps, get rid of Avast, use Malwarebytes. Avast is terrible.

I like Avast, I don't know what you're talking about.

From: XxX Toxin XxX
Ps, get rid of Avast, use Malwarebytes. Avast is terrible.

Umm are u kidding? Those are two different things -_____- One is anti-virus the other is anti-malware.. Why would u get rid of your anti-virus to replace it with antimalware when you can have both working side-by-side?

Btw.. I use Avast.. It's perfect.. never had an infection before so Iunno about it being terrible.. Just hope you don't recommend norton.

AFAIK esetnod32 and avast are the two best ones..

From: ggzz
Umm are u kidding? Those are two different things -_____- One is anti-virus the other is anti-malware.. Why would u get rid of your anti-virus to replace it with antimalware when you can have both working side-by-side?

Btw.. I use Avast.. It's perfect.. never had an infection before so Iunno about it being terrible.. Just hope you don't recommend norton.

AFAIK esetnod32 and avast are the two best ones..

Lol, malwarebytes isn't strictly an anti-malware tool. It has it's own integrated anti-virus software and has a proper database which is updated daily if not every two days. I've never had a problem with it either. Malwarebytes Pro(which is what I am currently using on my computer), is what I am talking about and not only does it take care of malware, it's an anti-virus (has the ability of performing scans…etc), and if I am not mistaken, also takes care of reg keys (this I haven't bothered to use at all).

this wasent suppose to be a fight about which is better…

I got keylogged twice and got hacked twice, for a total for 3.2b..
I factory resetted my computer. That way I make sure everything is deleted off my computer.

i jsut did that to my laptop to have a nice clean feeling, but if i did that to my desktop backing up over 500gb of stuff is not fun…

ok so i went through an hour or so scanning it on another computer… found some things but the cmd still shows up on startup… i finally looked into my appdata and there is 2 wierd files. one that is named "logs" its a hidden file and the text in it contains this

ufHIl_IOk
####

and another not hidden named
SQLight3.dll
are these suppose to be there or could they be part of it? also i tried malwarebytes and it found nothin… im lost on what to do next…

From: 77tontos
ok so i went through an hour or so scanning it on another computer… found some things but the cmd still shows up on startup… i finally looked into my appdata and there is 2 wierd files. one that is named "logs" its a hidden file and the text in it contains this
and another not hidden named
SQLight3.dll
are these suppose to be there or could they be part of it? also i tried malwarebytes and it found nothin… im lost on what to do next…

SQL is from a server.. could be that microsoft installed it there.. viruses are usually .exe.. that dll shouldn't do you any harm. Text files can't harm you either.. your looking for an executable.