HACKED AGAIN... Looking for Answers.

[Elvey]

Whats up guys,
So I have two accounts... one noob that rc bots to help double the profit of my main rc botting. The FIRST account to get hacked was the Noob account... for sake so story telling we will call this Account 1, and my Main account, Account 2.

btw for those wondering... I'm running a Macbook Pro, fairly new as well... is there any good way to monitor my security? Also if this aids to anyone figuring this out. If you need screenshots of specific things, U can tell me and I can try to get them for you... I'm really stumped and not to happy about 400m walking out the door over night.

First off, I know don't trust your friends with your password, don't make your password 1234, and don't go to sites people tell you to go to, and end up getting Phished. Im not that stupid, and im pretty careful with my accounts.
I bot using rs bots and rsbuddy's Dungeonpro or w/e the good one is... but had changed my password after using rsbuddy... and account 1 never used rsbuddy, just auto runecrafter pro. Basically saying, rsbuddy is not to blame, and I doubt that rsbots hack accounts.

Account 1 (The Noob)
Now with that being said, I just got home for the summer... account 1 has about 150m and account 2 has about 250m. The night after i got home, I went to get set up my bot, and my entire bank was stripped of any value, all my cash, p ess rings of duel and pouches were all sold and taken. I was thinking WTF??????? wasn't too mad cuz its not the end of the world, but i was pissed cuz now i had to lend some rc supplies to start back up again... anyway he's been doing alright almost 99 RC and has like 40m Bank.

Account 2 (The Main)
So on May 14th, I bought a power leveling service from a site I have trusted for years now. Guy4game.com... very good site, always get the job done... never scam or hack you. They don't even sell accounts. Anyway... I order 60 farming for those new lunar spells... gets to about 55 farming... I get an email... "you need to supply more gold on the account before we can continue training..." aka "all your money is gone bitch." Now before this purchase, I changed my password, I liked my original password and didn't want to change it, so i figured while they level me up ill make it something else. I change it, make the purchase and they start working. Somewhere in between like Sunday and Today the wiped me clean. I checked my gmail, for emails from runescape, I have a bunch that are Jagex Ltd... just normal billing ones... and then one little fucker "Jagex Ltd." notice the period? anyway its some email giving a BETA key for a new game they are releasing... opened it to see what it was... after i opened it didn't click any links in it, x'ed out of it, deleted it perm from my email... reset safari, emptied catch, deleted all cookies... etc... basically everything I could think of at the time that mac's have. Then... I went to RS website... went to see if i could report the hack, they ask for the username and then the email... I entered the email address that I know for sure I had registered to the account, and it told me i gave the wrong email... so i reregistered my email. Also said I had 2 tries to put the right email in... don't know if that means anything. I took a pic of the last IP address to log in... but theres a good (99.99999%) chance that was guy4game's IP and not the hacker.

Never Clicked any Links.
So the question is.... HOW DID I GET HACKED?
Any Help at all would be so SO greatly appreciated. I don't really see a point in playing RS and rebuilding my bank over and over and over again if I'm going to keep getting fucked like this.

 

[Varmey]

Well, based off what you've said and my experience with botting, I HIGHLY doubt it was rsbuddy or rsbot, and if you say you trust guy4games and it sounds like you haven't given your password out to anyone else id say it was guy4games, but I don't know the whole story you may have downloaded something and not known and it ended up being a key logger or whatever it may be. Your best bet is to delete everything on your computer and reset all your passwords at hope not to get hacked again. Best of luck figuring it out.

 

[Sillymonkey]

I would just bet at you having a keylogger or other malicious software on your computer.

From your post, I am happy to see that you aren't misguided enough to believe a Mac cannot get viruses

In situations like this, I always just reinstall. It's the only sure-fire way to get rid of everything bad on your computer.

Sure you could dig through all your registry and miscellanious files trying to find a virus, replications of the virus clinging onto other programs/key parts of the operating system, and replications of the virus in random locations, but that is tedious and even just missing 1 trace can mean it coming back up in full that same day.

Tl;dr You getting stuffed on multiple accounts leads me to think your system is compromised, and I would just reinstall to save time/hassle.

 

[Scarlet_Blade]

I've heard alot of good things about guy4game I highly doubt they would try and ruin their reputation by doing this

Probably a keylogger or something :\

 

[Xasero]

Seeming as your new here, not a real good idea to post stupid shit like this.
Not that it's going to matter once you get banned in 1-2 months for scamming someone anyways.

OT: I would be pretty confused as well. Would make sense if you downloaded a keylogger or something of that nature. But I would be just as annoyed. I would give you advice on what to do, but I know nothing about macs.

I think it's pretty funny actually:laugh:

 

[Jinko]

Some keyloggers are undetectable. Wipe out your hard drive completely, and re-install your OS, that is the safest option. That way, you'll be virus free, guaranteed.

 

[ye olde ruiner]

Seeming as your new here, not a real good idea to post stupid shit like this.
Not that it's going to matter once you get banned in 1-2 months for scamming someone anyways.

OT: I would be pretty confused as well. Would make sense if you downloaded a keylogger or something of that nature. But I would be just as annoyed. I would give you advice on what to do, but I know nothing about macs.

Funny i have more reputable vouches than you with my newcomer status. I'm an asshole but an honest asshole. The ones you have to worry about scamming you are people like you who try play nice and innocent until they get a big trade.

 

[Siinep]

It sounds to me that you have been infected with a FUD (fully undetecable) RAT or keylogger. Seeing as your account has been "hacked" multiple times.

Tue only way to fix this is to reformat your computer from scratch. The file is somewhere on your computer, however undetectable. So backing up some of your files and putting them on after reformatting may not be a good idea. Just my thought though. Good luck.

 

[AlexServices]

best bet is to quit runescape

 

[Punjabi3]

I would recommend reformatting your computer. Back when I got keylogged on my old computer my virus protection couldn't find it but I kept getting hacked. Then I reformatted my computer and I haven't been hacked since then.

 

[CroCopLhK]

How did they get into your bank, don't you have a pin?

 

[The Only Carney]

Funny i have more reputable vouches than you with my newcomer status. I'm an asshole but an honest asshole. The ones you have to worry about scamming you are people like you who try play nice and innocent until they get a big trade.

Reputable vouches? It's all you going first how is that a reputable vouch? LOL

 

[Wolfdog]

You very likely have a keylogger or RAT. First of all, put pins on ALL your accounts. Then do the following:

Download MalwareByte's anti Malware (Here - http://www.malwarebytes.org/ )

Run scans.

If this does not help, I recommend posting on www.Bleepingcomputer.com and tell them you have reason to believe you may be infected.

They're staff/mods are among the best I've found.

 

[Warjunkie]

After you scan with Malwarebytes, download Avast! Antivirus and run a boot-time scan.

http://download.cnet.com/Avast-Free...0019223.html?part=dl-85737&subj=dl&tag=button <---Download Link.

To do that;

Click on the scan tab on the Avast main page.

On the far left under the Scan Computer tab, it'll say Boot Time Scan.

Click Settings on the right hand side

Set it to scan all harddisks, set sensitivity to high, and set it to move infected files to chest in the bottom drop down menu.

Click Schedule Now, then reboot your computer.

It will load into a DOS looking mode, and just follow the onscreen steps.

The scan took me well over a few hours, it's incredibly thorough.

This will catch most, if not all, keyloggers or RATs on your system.

Then head over to bleepingcomputer like wolf said.

 

[Elvey]

Why didn't you have a pin?
1) Set Pins
2) Recov. Questions
3) Registered Email

4) I guess try reformatting your hard drive because you may have a logger.

I have all of these set... no pin.. as i deleted it when rsbots got fucked over from the pin update. I think your confused. they didn't take my accounts... they just took all the money on them

 

[Elvey]

Also, I am very able to wipe this bitch clean of everything... got my reinstall disk and everything... what about files... like files that i wanted to keep. is it safe to put the important ones... word documents... music files... onto an external without getting the virus back when i reupload?

 

[Elvey]

Alright im going to bed... thanks everyone except that troll... lol always has to be one damn troll. anyway i read everyones comments, thank you guys I'll see where this goes

 

[Warjunkie]

I wouldn't reformat unless absolutely necessary.

God knows, if you're like me, you'll leave some important file behind and feel like a dumbass.

Virus is probably deep within your system files, so it should be safe to move important data to an external. Assuming it's not one of those ones that spread onto removable media devices.

If you do reformat and you leave any data behind you just can't live without, PM me. Chances are, I'll be able to help you get it back.

 

[Mikencloud]

Funny i have more reputable vouches than you with my newcomer status. I'm an asshole but an honest asshole. The ones you have to worry about scamming you are people like you who try play nice and innocent until they get a big trade.

Try not to rage too hard, and as for me being nice? I certainly am not nice. I have way more vouches, but do i put them down? No. I don't do much buying/selling on sythe anymore, and I only put down about 1/10th of what vouches I could have had, I usually tell them not to bother. But it's cute/ironic to see you get so offended. Go to bed.


OT: Yea, I wouldn't start deleting everything until you are truly know the cause.

 

[Sillymonkey]

People telling him to scan and go to this website and that website are funny...And so are the people saying he needs to find out what is going on before he wipes his drive.

Any half decent virus is not going to be found on traditional scans, and people trying to help you find it will be pointless. As I said before, even leaving a single trace of something can result in it replicating back to what it was before you went cleaning.

I wouldn't really advise you to save things to an external source and put them on your computer again at a later date. This could result in you being infected again.

If you really need the word documents or whatever, of course I am not going to tell you too bad get rid of them. I am just letting you know that there is the "possibility" that your external drive can get infected either directly by the virus (via your computer having access to said drive), or indirectly by infected files.

When you do end up getting your computer sorted out, and after you have installed THE BASIC PROGRAMS YOU USE EVERY DAY (not when you have reinstalled everything!!!!!!!!!!!!), I STRONGLY RECOMMEND making an IMAGE of your CLEAN COMPUTER and putting it on an EXTERNAL HARDDRIVE that is NOT attached to the network.

I don't know if Mac has quick ways to do this, but Windows 7 has a built-in feature that will do this for you. It's not as "1 click" for other operating systems.

This way, if you ever have something like this happen again, or just want to reinstall, you can reinstall everything (including your entire operating system!!!) in about 5 minutes MAX.

Good luck. Let us know how you go.