Fucking with a Steam hacker

[gray-fox]

I just glanced over the topic quickly, but..

something else you could try... https://www.piriform.com/ccleaner  CCleaner

..until this, everyone was talking about malware and you're like "try this" and next "you got me wrong , I wasn't talking about what EVERYONE else was talking." If everyone has been talking about cleaning off malware and you offer someone a softaware for clening. You don't see how it seems that you are offering it as a way to clean malware?  Gee, I wonder why Deque got you wrong(as you claim).

Seriously, do you think Linux would even exist, if Linus Torvald, used what all the "Reputable Communities" used?

Well, basically Linux exists because Torvalds didn't have money for what all the "Reputable Communities" used(unix).

Besides, maybe you should check some of her other posts  also and realise which one, she or you, is going to be taken as skid here. I know she is not the one, maybe you're not skid either but in your case there's nothing that would prove otherwise.

So just shut the fuck up( I will also now) and let someone who certainly knows what she is talking about to help the op .

[iTpHo3NiX]

@BurnTheFaggotWicked
Post MRIs and proof farbar used shit learned from you.

Don't talk shit that your ass can't cash

What do you do? Post retarded shit online? Deque is a malware analysis at a very reputable anti-virus company.

[khofo]

@BurnTheFaggotWicked
Post MRIs and proof farbar used shit learned from you.

Don't talk shit that your ass can't cash

What do you do? Post retarded shit online? Deque is a malware analysis at a very reputable anti-virus company.

^ This

And yes if Deque ever proposed to help with a malware problem, I'd be forever thankfull. And when it comes to malware, Deque is the best on this forum. So @BurnTheWicked I'd suggest not going into troubled waters.

Just noticed this:

And one last thing... Malware, is not the only thing that can be cleaned out; skid...

^Deque, a skid ? U clearly have brain problems

What I suggest you do:

- Disappear for a month or two
- Read this: https://evilzone.org/general-discussion/for-those-who-think-that-they%27re-too-good-to-be-considered-noobs/

your situation now:

<m0rph> that's like walking into a karate dojo for the first time in your life, and challenging the 15-dan Grand Master Black Belt to a battle of death

[Kulverstukas]

Some wall of butthurt shit

Ok, I can't stand it when people get so fucking hurt when they get called wrong and starts to throw around insults. You got no right to call a reputable member like Deque a skid, being a mere member here for a day.

@People: stop derailing this thread, ohlawd.

[0E 800]

How is Ccleaner not a skid tool?

BTW -

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space.

@OP

Do you or have you ever installed or ran crack/keygen software or downloaded pirate-soft?

Does anyone else have your logmein info?
Review: http://community.logmein.com/t5/Miscellaneous/email-Hacked-or-Sold/td-p/129602

Have you responded to any emails from Steam asking your to verify your account?
I just recently got an email saying that my Battle.net account was flagged for illegal activity in War Craft - that I needed to login to verify my account. The login page looked like Battle.net, but it was hosted on another site. Plus, I dont play War Craft.

Do you have anyone else living with you that would have access to your computer? Its quick and simple to run software that would dump your stored web browser credentials.

You have a lot of games installed.
You have remote access software installed.
When in doubt - format/re-partition/reinstall-os

You might want to try HitmanPro, (http://www.surfright.nl/en/hitmanpro)
 you can use it for 30-days free, I suggest just running one time. I still think you ought to blow away your system and start over. Just to clear your conscious.

[defalt]

How is Ccleaner not a skid tool?

BTW -

@OP

Do you or have you ever installed or ran crack/keygen software or downloaded pirate-soft?

Does anyone else have your logmein info?
Review: http://community.logmein.com/t5/Miscellaneous/email-Hacked-or-Sold/td-p/129602

Have you responded to any emails from Steam asking your to verify your account?
I just recently got an email saying that my Battle.net account was flagged for illegal activity in War Craft - that I needed to login to verify my account. The login page looked like Battle.net, but it was hosted on another site. Plus, I dont play War Craft.

Do you have anyone else living with you that would have access to your computer? Its quick and simple to run software that would dump your stored web browser credentials.

You have a lot of games installed.
You have remote access software installed.
When in doubt - format/re-partition/reinstall-os

You might want to try HitmanPro, (http://www.surfright.nl/en/hitmanpro)
 you can use it for 30-days free, I suggest just running one time. I still think you ought to blow away your system and start over. Just to clear your conscious.

I used to use cracked games before I reinstalled my OS recently to put it on my SSD. No one else used this computer. What software is the remote access
software and how do I get rid of it? After I made sure my Steam account was secured, I did a sweep with Bitdefender and HitmanPro. According to them, it looks fine. Also reinstalled the Steam client. No one else should have my Logmein Hamachi info, I just used it for Terraria but now that it has official Steam multiplayer support, I'm going to uninstall it. No sketchy emails from Steam.

[Deque]

@BurnTheWicked If you are interested to continue the discussion I will get back to you in another thread (just throw in a yes and I will open one). Otherwise we will leave it as is. You already got a lot of heat here and I want stay on topic while assisting defalt.

@defalt: The good news is that the FRST logs look clean. I just see one potentially unwanted program called Hotspot Shield. It could be a leftover. Did you have it installed at some point? Is it there on purpose?

Step 1: Disable Windows Defender. It is enabled on top of your actual antivirus software, which is not necessary.
Type services.msc in the run box of your start menu, then double-click on Windows Defender and change the startup type to disabled.

Step 2:

• Download aswMBR.exe.
  
• Right click aswMBR.exe to run as administrator.
  
• Click Scan
  
• Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix.
  
• You will also notice another file created named MBR.dat. You can ignore that for now.
  

[Deque]

The rootkit scan is clean too, which is great.

Java 8 Update 45 --> this version is vulnerable. Update it: https://java.com/en/download/

And if you want to remove the Anchorfree VPN copy and paste the following lines from the code box below and save as fixlist.txt <-- the name is important!

Code: [Select]

start
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-06-03] (Anchorfree Inc.)
C:\Windows\System32\DRIVERS\taphss6.sys
EmptyTemp:
end

It's important that both files, FRST64.exe and fixlist.txt are in the same location or the fix will not work.

Notice: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST64.exe and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log in the same folder (Fixlog.txt). Post the contents here.

[proxx]

Let me just add that for anyone who does not know this fine young lady above , she is to be trusted.
We are not some skidcentral but a community where we trust certain people , this is one of them.

[th31nitiate]

Zane, next time use PM to send sensitive files, here any one can see quit a lot of information that they can use to build a picture on exploiting you. Why do you have hard drive's called ebola and aids ?


This tool look's like a really good, the amount of information it give about a system is amazingly detailed tool. My dad called me the other saying the computer was giving virus warnings, if i new about this tool then and with my limited knowledge of malware analysis. I get a more in-depth look at what was going on. All i had was event logs and netuser and avast static's. Which didn't accomplish much, i didn't really know what i was doing to be honest.

[defalt]

Zane, next time use PM to send sensitive files, here any one can see quit a lot of information that they can use to build a picture on exploiting you. Why do you have hard drive's called ebola and aids ?


This tool look's like a really good, the amount of information it give about a system is amazingly detailed tool. My dad called me the other saying the computer was giving virus warnings, if i new about this tool then and with my limited knowledge of malware analysis. I get a more in-depth look at what was going on. All i had was event logs and netuser and avast static's. Which didn't accomplish much, i didn't really know what i was doing to be honest.

Thanks for the heads-up, m8.

The rootkit scan is clean too, which is great.

Java 8 Update 45 --> this version is vulnerable. Update it: https://java.com/en/download/

And if you want to remove the Anchorfree VPN copy and paste the following lines from the code box below and save as fixlist.txt <-- the name is important!

Code: [Select]

start
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-06-03] (Anchorfree Inc.)
C:\Windows\System32\DRIVERS\taphss6.sys
EmptyTemp:
end

It's important that both files, FRST64.exe and fixlist.txt are in the same location or the fix will not work.

Notice: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST64.exe and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log in the same folder (Fixlog.txt). Post the contents here.

Here's the file, with a tad bit of editing. 

Staff note: Do not double post. Use the modify button if you have more to add.

[BurnTheWicked]

@Deque - I apologize for the overreaction; I was tired, and in pain, not trying to make an excuse, just saying. As for continuing; that's on you, if you would like to, sure... Though to be honest; if I'm really gonna explain why I called you a skid; that I would rather just be to you. But that has nothing to do with any "heat" I have here; actually it's entirely legal heat I have to worry about.

@0E800 - It's microshit; what isn't a skid tool?

@default - If you go into to the services; on top of looking at the Windows Defender; a couple other things to alter with that...
IP Helper - Disable
IPSec Policy Agent - Disable
Netlogon - Disable
Remote Access Auto Connection Manager & Connection Manager - Disable
Remote Registry - Disable
Server - Disable or Manual
Secondary Login - Manual
Terminal Services - Disable
Terminal Services Management - Disable
TCP/IP NetBIOS Helper - Disable
Windows Media Player Network Sharing - Disable
Windows Remote Management - Disable
Windows Event Collector & Log - Automatic
Workstation - Manual

@everyone else - It's a good thing you don't trust me; I was trained to lie, I tell the truth cause I can't stand pretending. Problem is, the truth is unbelievable. Mark Twain - "Fiction is often more real then truth; cause fiction has to make sense". Hell, I was crackin biometrics in the late 90s; I was dickin around in 10gigabit ethernet networks, years before gigabit ethernet become public domain. I may be a washed up has been; but everything you see in today's technology, either came from, or started in those days... Y'all new agers, seriously need a little lesson in Old School... Read this http://phrack.org/issues/7/3.html

[defalt]

@everyone else - It's a good thing you don't trust me; I was trained to lie

Holy shit, don't cut yourself on that edge.

But thanks for the link.

[Deque]

EmptyTemp: => 18.4 GB temporary data Removed. <--- (HOLY SHIT LOL)

 
Ok, are there any outstanding issues or any questions? Otherwise we are done now.

DelFix

• Download DelFix from here http://www.bleepingcomputer.com/download/delfix/
     
• Run the program via right-click as administrator.
• Place a checkmark next to the following items:
• Remove disinfection tools
  
• Click the Run button.
  

@BurnTheWicked I accept your apology. At least for me there is no need to discuss anything. If you feel the need, you can PM me or whatever you like.

[defalt]

Ok, are there any outstanding issues or any questions? Otherwise we are done now.

DelFix

• Download DelFix from here http://www.bleepingcomputer.com/download/delfix/
     
• Run the program via right-click as administrator.
• Place a checkmark next to the following items:
• Remove disinfection tools
  
• Click the Run button.
  

@BurnTheWicked I accept your apology. At least for me there is no need to discuss anything. If you feel the need, you can PM me or whatever you like.

Nah, I'm good. Thank you so much for all the help you provided, that was awesome.

Now if only Steam could get me my fucking account back now.