So today when I selected "Members - Click here to play" It lead me to runescape.com/loginform.PHP where it asked for my bank pin and shit. I typed in some fake data, and it said my account was locked I figured that runescape was redirected to another site somehow, even though it said runescape.com all the time. So I checked the hosts files, and it turns out alot of ip's have been redirected to other urls.. Including localhost to sythe.org, virus.org and scionbot.com -.-" And yeah, runescape.com was directed to some other phising shit.. So if this happened to any of you guys, please respond. And does anyone know where I eventually got this virus from? Didn't download anything, except for the newest version of rsbot Thanks.
It is a pharmer. Easily made and virus scanners won't find it. If you still have the host file and the phishing ip's, go spam the shit out of their logs.
A chinese one? Anyways, thanks, and do you have any idea where I could've gotten this virus from? Oh, and I deleted everything in that file. Although I think it was something with runescape.net ..
