U
Unregistered|R|ahman
Guest
Okay in relation to this - http://ww2a.sythe.org/showthread.php?t=1321933
Yes I did take accept an order for 500k STR XP. I got paid 10M and promised that it would be done in ~24hours.
After doing about 170k at bandits I logged off to shower. But after I returned I found out I could not log-back into my clients account. At this point I ran MalwareBytes Premium which is shown at a screenshot below. At this point in time I immediately attempted to contact the user. If you check my records there is a PM sent from me to [da1one1] asking if he changed the password. I also contacted him on MSN, which is not time stamped like his instant messenger.
It was left in a message when he was 'appearing' on 'away' mode.
He then returned and I asked him if whether or not he changed the password, and if it wasn't him I expected the worst. I then prompted him to check the last logged IP when he recovered his account.
Then there is more of us conversing over this situation shown in the next screenshot.
We talk more, I ask him again to check the last IP when he recovers it which is shown in the following screenshot.
I tell my client I have Avira Av Premium and MalwareBytes, Proof that I actually do:
The log from MalwareBytes:
I offer to compensate approx. half the total wealth which may or may not have been lost due to this unfortunate situation and finish off the remaining EXP owed which at the time should be approx 350k. This is shown in the following screenshot:
The next part of the conversation I ask him if after he recovers it he wishes for me to continue off the EXP. I even offer to pay for 15M or the 20M as I actually provided back onto the account and finish leveling as that is all I remember. Since his account was a very high cb, the best way to level his account is to train at bandits, that way I could semi-afk, ie. watch a movie while playing. This is confirmed in the following screenshot:
We continue talking about the situation. I ask how much was in it exactly, he quotes a number but ironically there is no proof. He also confirms that there was 23M + SGS + SS on the account. As a trainer, I requested the SS as it is the best STR Training weapon. He openly admits to mistakenly placing a SGS as he assumed it was the same thing, but it was not so he instructed me to buy one. Unfortunately I have no screenshot evidence of this. I offer to compensate 20M, and guess what? He accepts. This is shown below:
We talk more, I ask him to meet me at w108 Lumbridge Bank. This is shown in the next screenshot:
We then meet, I send him 20M, and he confirms by saying 'ty'. The user asks me for more money to compensate, But even here the user offers to give me his new password with approx 15m wealth on the account to finish off the order. The exact words are once i give u new pass, ill transfer and u can buy. This is all shown in the screenshot below:
We talk more, he talks about his max cash pile -.- . I talk about how I am only outsourcing my services to get extra pocket money and he talks about recovering his account. This is shown below:
In the next part of our conversation I directly instruct him on faster methods to recover accounts, such as "Membership Information" as only the true owner has access to that. He replies that he has one from 4 days ago and I tell him to use it in the recovery process. If I was to 'scam' him and 'steal' his account, why would I tell the user how to recover his account.. This part is shown in the following screenshot:
He finally recovers the account with 'my' help.. Then starts accusing me that I personally dropped his stuff... This is shown below:
We continue talking... more screenshots of it...
He accuses me more...
We talk more, I talk about my current order which I received which was worth approx 65M for leveling and the account had another 30-40M in items. This is shown below:
I prove that account is not mine and does not have ANYTHING missing. The account is actually Kingsword123's by showing the quote he actually posted...
I offer to show him stats of the account which isnt mine, He tells me to use imageshack to show him...
We talk more, I give him a imageshack link about the stuff on Kingsword123's account..
I talk about Kingsword123's order and the costs associated with it..
The user asks for an extra 20M otherwise he wont be 'quiet' about it. Im thinking 'wtf'. This is shown in the next screenshot:
He wants to check my IP, which I am completely fine with so I told him where I am located and my ISP in this part of the conversation:
We talk more, I talk about how another client cancelled their order but I was still willing to fully repay for the skills i haven't leveled... This is shown below:
I talk about why the order was 43M...
We talk more.. I explain how accounts passwords can be changed even though you are still logged in.. He also asks where in Australia I live in..
He asks what state I am from and I reply, I cant hide this and mods/admins can check what IP I am connected from so I told him...
This is where it gets interesting.. He claims that the last login IP was from Sydney? It comes to me as a big surprise that this is only after:
A) I tell him where I am located
B) He has no screenshot proof that it is the last logged IP.
He continues saying I hacked his account, when you as admins know that 'free' IP Checks are vague. Very vague. They are an approximation of where a user is located.
We talk more..
He claims I scammed him for an excess of 70M, I find it hard to believe since I am not currently viewing any screenshots of his bank in his report against me. Not one.
We talk more, I tell the user I need to go to sleep since its early morning.. Plus the end of the conversation.
Okay and now my response to Clashfan and n4n0 as they personally replied on that thread.
My IP is static. It doesn't change. If you check records while I have been on Sythe all the logged IP's are either the current one which will be showing in the next screenshot or a mobile broadband IP provided by a telecommunications provider.
In response to Clashfan, Yes, I have siblings and as a older sibling I introduced them to play Runescape in the leisure time. As a Global/Ex Admin I am sure you are well aware of the deceitful tricks individuals on the internet put up on the internet to steal another person's virtual items. I cannot restrict my brother to what he can view or cannot, I am not his parent, I am merely a role model that I hope he can look up to. Youtube hosts many RS related scams and you cannot deny this fact. It is evident in the world in we live today that people want to make life easy, but in truth, life is an eternal struggle and you must work hard to achieve goals. Examples of current RS related scams on you tube include x3 zeal and cracked copies of bots. Even with a good AV it has been PROVEN that hackers can make tools which are undetectable. Govind has proved this, a fellow respectable Sythe Administrator.
The link of the thread Govind posted - http://sythe.org/showthread.php?t=1308828
On this thread he explains how he created a basic keylogger and gave it to you and n4n0. You downloaded the item. Yet both your AV did not pick it up.
I will include N4n0's post:
Thank You,
|R|ahman
Yes I did take accept an order for 500k STR XP. I got paid 10M and promised that it would be done in ~24hours.
After doing about 170k at bandits I logged off to shower. But after I returned I found out I could not log-back into my clients account. At this point I ran MalwareBytes Premium which is shown at a screenshot below. At this point in time I immediately attempted to contact the user. If you check my records there is a PM sent from me to [da1one1] asking if he changed the password. I also contacted him on MSN, which is not time stamped like his instant messenger.
It was left in a message when he was 'appearing' on 'away' mode.
He then returned and I asked him if whether or not he changed the password, and if it wasn't him I expected the worst. I then prompted him to check the last logged IP when he recovered his account.
Then there is more of us conversing over this situation shown in the next screenshot.
We talk more, I ask him again to check the last IP when he recovers it which is shown in the following screenshot.
I tell my client I have Avira Av Premium and MalwareBytes, Proof that I actually do:
The log from MalwareBytes:
We talk more...Malwarebytes Anti-Malware (Trial) 1.60.0.1800
www.malwarebytes.org
Database version: v2012.01.16.01
Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
Tonmoy :: RAHMAN-PC [administrator]
Protection: Disabled
16/01/2012 9:52:38 PM
mbam-log-2012-01-16 (21-52-38).txt
Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 399367
Time elapsed: 1 hour(s), 6 minute(s), 6 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
I offer to compensate approx. half the total wealth which may or may not have been lost due to this unfortunate situation and finish off the remaining EXP owed which at the time should be approx 350k. This is shown in the following screenshot:
The next part of the conversation I ask him if after he recovers it he wishes for me to continue off the EXP. I even offer to pay for 15M or the 20M as I actually provided back onto the account and finish leveling as that is all I remember. Since his account was a very high cb, the best way to level his account is to train at bandits, that way I could semi-afk, ie. watch a movie while playing. This is confirmed in the following screenshot:
We continue talking about the situation. I ask how much was in it exactly, he quotes a number but ironically there is no proof. He also confirms that there was 23M + SGS + SS on the account. As a trainer, I requested the SS as it is the best STR Training weapon. He openly admits to mistakenly placing a SGS as he assumed it was the same thing, but it was not so he instructed me to buy one. Unfortunately I have no screenshot evidence of this. I offer to compensate 20M, and guess what? He accepts. This is shown below:
We talk more, I ask him to meet me at w108 Lumbridge Bank. This is shown in the next screenshot:
We then meet, I send him 20M, and he confirms by saying 'ty'. The user asks me for more money to compensate, But even here the user offers to give me his new password with approx 15m wealth on the account to finish off the order. The exact words are once i give u new pass, ill transfer and u can buy. This is all shown in the screenshot below:
We talk more, he talks about his max cash pile -.- . I talk about how I am only outsourcing my services to get extra pocket money and he talks about recovering his account. This is shown below:
In the next part of our conversation I directly instruct him on faster methods to recover accounts, such as "Membership Information" as only the true owner has access to that. He replies that he has one from 4 days ago and I tell him to use it in the recovery process. If I was to 'scam' him and 'steal' his account, why would I tell the user how to recover his account.. This part is shown in the following screenshot:
He finally recovers the account with 'my' help.. Then starts accusing me that I personally dropped his stuff... This is shown below:
We continue talking... more screenshots of it...
He accuses me more...
We talk more, I talk about my current order which I received which was worth approx 65M for leveling and the account had another 30-40M in items. This is shown below:
I prove that account is not mine and does not have ANYTHING missing. The account is actually Kingsword123's by showing the quote he actually posted...
I offer to show him stats of the account which isnt mine, He tells me to use imageshack to show him...
We talk more, I give him a imageshack link about the stuff on Kingsword123's account..
I talk about Kingsword123's order and the costs associated with it..
The user asks for an extra 20M otherwise he wont be 'quiet' about it. Im thinking 'wtf'. This is shown in the next screenshot:
He wants to check my IP, which I am completely fine with so I told him where I am located and my ISP in this part of the conversation:
We talk more, I talk about how another client cancelled their order but I was still willing to fully repay for the skills i haven't leveled... This is shown below:
I talk about why the order was 43M...
We talk more.. I explain how accounts passwords can be changed even though you are still logged in.. He also asks where in Australia I live in..
He asks what state I am from and I reply, I cant hide this and mods/admins can check what IP I am connected from so I told him...
This is where it gets interesting.. He claims that the last login IP was from Sydney? It comes to me as a big surprise that this is only after:
A) I tell him where I am located
B) He has no screenshot proof that it is the last logged IP.
He continues saying I hacked his account, when you as admins know that 'free' IP Checks are vague. Very vague. They are an approximation of where a user is located.
We talk more..
He claims I scammed him for an excess of 70M, I find it hard to believe since I am not currently viewing any screenshots of his bank in his report against me. Not one.
We talk more, I tell the user I need to go to sleep since its early morning.. Plus the end of the conversation.
Okay and now my response to Clashfan and n4n0 as they personally replied on that thread.
My IP is static. It doesn't change. If you check records while I have been on Sythe all the logged IP's are either the current one which will be showing in the next screenshot or a mobile broadband IP provided by a telecommunications provider.
In response to Clashfan, Yes, I have siblings and as a older sibling I introduced them to play Runescape in the leisure time. As a Global/Ex Admin I am sure you are well aware of the deceitful tricks individuals on the internet put up on the internet to steal another person's virtual items. I cannot restrict my brother to what he can view or cannot, I am not his parent, I am merely a role model that I hope he can look up to. Youtube hosts many RS related scams and you cannot deny this fact. It is evident in the world in we live today that people want to make life easy, but in truth, life is an eternal struggle and you must work hard to achieve goals. Examples of current RS related scams on you tube include x3 zeal and cracked copies of bots. Even with a good AV it has been PROVEN that hackers can make tools which are undetectable. Govind has proved this, a fellow respectable Sythe Administrator.
The link of the thread Govind posted - http://sythe.org/showthread.php?t=1308828
On this thread he explains how he created a basic keylogger and gave it to you and n4n0. You downloaded the item. Yet both your AV did not pick it up.
I will include N4n0's post:
If you require any further information, please do not hesitate to contact me via email. But I am personally making myself available for the next 12 hours to help resolve this issue.I can vouch for this. Govind wrote a simple keylogger that records keystrokes and uploads the .txt to a ftp server. I tested it out for him, and this all went undetected by my personal antivirus program.
Following these tips can help ensure your system stays safe and the integrity of your system remains intact.
Thank You,
|R|ahman




