please i need help

[cranke]

so ok basicly, one day i log on my old main account and discovered it cleaned (had like 30M-ish) so i changed password immediatly but then i kept noticing each day that the last log in IP was not mine so i kept changing my pass and then today heres what happened

his big demoniac plan to get me banned was to change my name to "fackblack" the only thing that this will achieve is get me to change my name when jagex discovers right? should i write to jagex or something, idk how he kept getting my password :x

what should i do

 

[Sartana]

Keylogged most likely. Do a virus scan and change your password on a different computer.

 

[cranke]

also malware byte blocks something

i checked and it is somewhere in Missouri ..

 

[Brendan]

also malware byte blocks something

i checked and it is somewhere in Missouri ..

Do you set system restore points on your PC? You could go back a few days or weeks, but you will lose all the data you got on your PC in that time. Other than that, I'd recommend going to AVG.com and getting the free 30 day trial which should scan your computer and remove the Keylogger.

Also, make sure you have taken all necessary precautions with your RuneScape account. Including changing the recoveries, resetting the password, etc.

 

[cranke]

i think i found the guilty..

 

[cranke]

well i got the Avast! paid version is that ok anti virus?

 

[Brendan]

well i got the Avast! paid version is that ok anti virus?

As long as all the malware on your computer is getting caught it should be fine

 

[TxT]

I guess you deleted the trojan you showed in the above picture. If you still keep getting hacked, i suggest googling how to remove a RAT. They dont get detected by most antiviruses

 

[SmperFidelis]

Avast! is a great AntiVirus, I use it myself. But I suggest PMing a Mod and ask them to run that IP and see if someone from Sythe is doing this. If you are still being compromised, I suggest you do a System Restore to a few days before this started happening.

 

[KerokeroCola]

I'll run the IP for you.

Avast! alone is not enough. It looks like you have the Malwarebytes internet protection. You need to download their Anti-Malware program, since no other free software is better at finding and removing viruses. Avast itself is actually pretty bad at removing viruses.

Also, you can get the name changed back by posting in the RS Forums. Just explain how you were hacked, and they can easily tell by what IP was used to change the name.


EDIT: A variant of that IP address belonged to somebody who posted a driveby link some time ago. That is probably how you were infected. He is already banned.

 

[cranke]

I'll run the IP for you.

Avast! alone is not enough. It looks like you have the Malwarebytes internet protection. You need to download their Anti-Malware program, since no other free software is better at finding and removing viruses. Avast itself is actually pretty bad at removing viruses.

Also, you can get the name changed back by posting in the RS Forums. Just explain how you were hacked, and they can easily tell by what IP was used to change the name.


EDIT: A variant of that IP address belonged to somebody who posted a driveby link some time ago. That is probably how you were infected. He is already banned.

thank you kero! but how can i get keylogged the last thing i downloaded was the "taco limey" combat xp guide and its some1 trusted that posted the link?

http://sythe.org/member.php?u=323002

edit: the guy went back on the account and dropped my chaotic longsword -_-

i do have MalwareBytes Anti-Malware on my PC, i ran a full scan and it found nothing
i also got SuperAntiSpyware

the guy that hacked me is katmana from sythe, proof: he just msg'd me "you just lost your chaotic...."

 

[Herman Li]

Also a small tip - When logging in, type each character for the username and password separately or in a weird way.

Example:

Username - Bacon64
Password - googleplex2

Type - "Bac" in the username slot, then "go" in the password slot, then "o" in the username slot, then "oglep" in the password slot, and so forth.

 

[just un dude]

Pm me your msn I'll find this virus for you and delete it, if you have one ;]

Btw the blocked thing from Malwarebytes is not a threat, it's a false positive if you actually have Avast installed.

 

[kill dank]

why not just scan with malwarebytes? and superanti is good too..


But the account is yours, you're fine.

 

[Zerkerfist]

Wow dude that fucking sucks... I would highly recommend taking all the advice in this thread to heart, and doing everything the guys above said.

Once you are positive that your PC is secure, change your RS password, recovery questions, bank pin etc. to prevent this kid from getting on your account anymore.

If you still want to contact Jagex, you could try writing to their [email protected] e-mail or whatever it is (that address may not be correct), or posting on the forums in the hijacked accounts section, and explaining your situation. It sucks to lose RSGP and/or items, but if he got your account banned that would be VERY unfortunate

Good luck man, I really hope you get this all sorted out. What a douchebag.

 

[griffdog22]

just do a virus scan, make sure ur computers clean, if htat dosent work at all try a system restore that should work