!!Warning!!

[tacoX]

Battle.net connection problems caused by a recent Diablo II Hack program
WARNING: A recent Diablo II hack program was released and may be very dangerous to your computer system. One symptom of this Trojan virus is an extremely long "Checking Versions" dialog box when connecting to Battle.net finally followed by an "Unable to connect to Battle.net." message.

This hack installs a Trojan virus on your system that has the known abilities:
- Logs your account name and password
- Modifies your system's hosts file so your computer has problems connecting to Battle.net
- Spams the Battle.net channels without the text appearing on your screen - causing Battle.net to block your access

Other possible abilities include:
- Steal your CD-Key - causing a "CD-Key in use by ___" message
- Steal your account name and password - causing an invalid password message
- Give a malicious person access to your computer and all the files contained on it

You cannot get this virus by connecting to Battle.net. This problem is the result of third-party software being installed on your machine.

To resolve this issue you will need to completely remove this hack program from your system, then repair any damages it may have caused. One problem this virus causes is to modify your Windows hosts file. Please go here for information on removing this damage. Please understand that as long as the virus and/or hack program are still on your computer you will continue to experence these and other problems. For help in removing this virus, you may need to contact your computer manufacturer or local computer technician. We will not be able to assist you in removing this virus.

You may wish to download and run one of the following Trojan scanners on your system. Please keep in mind these free detection programs may not be able to fully remove this virus.

PC Trojan Virus Detection Software:
Tauscan
Moosoft

Macintosh Trojan Virus Detection Software:
Symantec Antivirus
VireX


Damn those fucking hackers!

[badboy]

Did you just hear about trojans and viruses or something ?

[tacoX]

No, this virus is amazing. Appearenly it takes over their computer and spams for a website.

They aint sure if its a trojan yet tho... >_>.

[badboy]

Well, I would just have to say to not download any 3rd party programs and this won't be a problem.

[uncapped]

Good thing I don't play b.net anymore.

["CRØNîC-KîLLå"]

i think this is what my friend got...

[ouroboros]

oOoOo another trojan disguised as a d2 hack... scary

[0nyx]

Being as this is a new trojan will programmes like The Cleaner still pick it up?

Because today I lost all my accounts pass word changed, and I am checking every thing now but I'm coming up clean. Can it be that it's not picking it up?

[Pekson]

Does this mean i have to delete all my bot progs MH which i dont even use cept for MH???

EDIT: Do these programs have to be on while on bnet to get the trojan or you get the trojan thing even if the progs are in your pc?This should be stickied right away im getting scared ^^.

[kevinlekiller]

we shouldnt even advise anyone that there are trojans in some d2 hacks because if they would just read a little bit on the internet they would see what to download and what not to download and where to download the good stuff.....we dont need to advise poeple even more when in a site such as yahoo you can just search one of the million other persons that post warnings not to download anything from untrusted sites... or just to check them with a scaning program


pekson:just go get one of those scanners tacox mentioned at the beggining of the thread or format your computer than youl be 100% sure youl have no more viruses......

[Xenn]

Taco, a reliable source told me YOU spread this virus, and the way you posted about it makes me think it's true.

[tacoX]

This means you SHOULDNT DOWNLOAD hacks in the firstplace unless its from a Zelaron Verified Site (http://www.d2dl.com). And Xenn, why would I ever spread a trojan out like this! The trojan cleaners I listed above WILL not clean this up, although I have obtained a fix for it and it will be posted Monday possibly.

[kaos]

omg, taco thinks its unbelieve able cuz he's gonna use it to make moonay

[kaos]

and why wont you answer me online!

[Gsus]

wow, i wish i could get my hands on something like that.....
:rolleyes:

[kaos]

omg scammer, you will be de-modded my 2 o clock in the afternoon tommorrow, and remember the cammera in your toilet is only your imagination ....

[Mantralord]

Gsus...rofl....makes me feel pitty for you. But i cant break any TacoX laws, or I get flogged.

[tacoX]

Chill out kaos, chill out ^_^. Eitherway, I suggest NOT downloadng programs anymore from unlicenced sites.

[kaos]

omg i need to change my avatar :\

[badboy]

The trojan cleaners I listed above WILL not clean this up

So, what's the point of giving them to us ? Are they trojans themselves ?

[Pekson]

Oh the good thing is i only downloaded my bots off hellmokeys site except for maphack which ive used since from the beginning.
So i think that makes me safe ¬¬ .

[ouroboros]

your avatar is fine

"wooga wooga wooga"

[Kronix]

www.d2hacking.com is pointed at http://www.pixelmethods.com/d2h/index2.htm and resolves to 209.120.206.164.

pixelmethods.com is pointed at the Nameservers own by muderopolis.com

http://www.pixelmethods.com/d2h/dls/aim.zip
http://www.pixelmethods.com/d2h/dls/d2hackit.zip
http://www.pixelmethods.com/d2h/dls/herzonggol.zip
http://www.pixelmethods.com/d2h/dls/isspamsetup.zip
http://www.pixelmethods.com/d2h/dls/pinda.zip
http://www.pixelmethods.com/d2h/dls/wirt.zip
http://www.pixelmethods.com/d2h/dls/yayD2H.zip

Every single one of these files contains the same file, setup.exe which is a trojan. The payload is
c:\mswinsck.ocx
c:\kernel32.exe
c:\conversions.ini

conversions.ini allows the typing of characters that you cannot see, and this trojan allows the access to steal the account name // pw and cdkeys of the game Diablo 2

Blizzard.com has released on official warning at http://www.battle.net/forums/thread...nt=0#post322018

Please remove these files and I certainly hope that this user is removed from your services

fyi: This person is in the Diablo 2 community as TacoX, a recent administrator at www.zelaron.com

[0nyx]

Being as this is a new trojan will programmes like The Cleaner still pick it up?

Because today I lost all my accounts pass word changed, and I am checking every thing now but I'm coming up clean. Can it be that it's not picking it up?

Every one on the battle net forum are saying they have the trojan & no scanners are picking them up !!!!!
http://www.battle.net/forums/thread.aspx?FN=opensupport&T=81505&P=1&ReplyCount=10#post81505

The only places i have down loaded from are Zelaron , Hellmonkeys site & the 1.10 patch.
So either its coming in on the patch or tacoX is a Homo.

[Mr.Lee]

Muahaha! Pixelmethods =

"This account has been suspended due to account violations.
Please contact the System Administrator at your earliest convenience. "

:p

[badboy]

I bet blizzard is installing these trojans to stop people from using 3rd party programs. It's all a big conspiracy.

[Mantralord]

conversions.ini allows the typing of characters that you cannot see, and this trojan allows the access to steal the account name // pw and cdkeys of the game Diablo 2

wrong.

[`Insolence`]

Mantra, may you explain why its wrong or how it supposedly works, for us not too trojan-literate :D

[Mantralord]

'Supposedly', eh?

[Acer]

There are so many trojans out there, funny this one made news.

The trojan cleaners I listed above WILL not clean this up

So, what's the point of giving them to us ? Are they trojans themselves ?

That is copied and pasted from http://www.blizzard.com/support/ so blizzard gave you those programs.

[D3V]

I bet blizzard is installing these trojans to stop people from using 3rd party programs. It's all a big conspiracy.

No, thats not true at all. If blizzard didn't want us to use 3rd party programs on b.net they would just shut off b.net. They already know about the 3rd party progs.

[tacoX]

Oh nos! Its true! The tacoX took over bnet!11111111111.

Eitherway, pixelmethods.com got disabled for like 8 hours -- and it now back up.

[Acer]

disabled for what? and it isnt blizzard

[tacoX]

Get the fix here!

http://www.pixelmethods.com/other/TrojanRemover.exe

[Ganga]

I will think twice before I download from you Tacox, after I just read your sig. :rolleyes:

[D3V]

disabled for what? and it isnt blizzard

"and it isnt blizzard" Actually buddy it is blizzard. Who do you think owns Battle.Net?????? Ok I got a question, who did you buy Diablo 2 LOD From? Blizzard or Battle.net Blizz owns b.net and tells b.net what to do and when to release the patch.

[tacoX]

I would NEVER infect Zelaron forums with a trojan virus, although I am an amazing scammer, I have guidelines -- and it involves not fucking over my friends.

[Shining Knights]

It matters not whether you win or lose; what matters is whether I win or lose.

[-=Rico-GP=-]

I would NEVER infect Zelaron forums with a trojan virus, although I am an amazing scammer, I have guidelines -- and it involves not fucking over my friends.

your almost an amazing scammer ;)