PDA

View Full Version : !!Warning!!


tacoX
2003-07-11, 04:40 PM
Battle.net connection problems caused by a recent Diablo II Hack program
WARNING: A recent Diablo II hack program was released and may be very dangerous to your computer system. One symptom of this Trojan virus is an extremely long "Checking Versions" dialog box when connecting to Battle.net finally followed by an "Unable to connect to Battle.net." message.

This hack installs a Trojan virus on your system that has the known abilities:
- Logs your account name and password
- Modifies your system's hosts file so your computer has problems connecting to Battle.net
- Spams the Battle.net channels without the text appearing on your screen - causing Battle.net to block your access

Other possible abilities include:
- Steal your CD-Key - causing a "CD-Key in use by ___" message
- Steal your account name and password - causing an invalid password message
- Give a malicious person access to your computer and all the files contained on it

You cannot get this virus by connecting to Battle.net. This problem is the result of third-party software being installed on your machine.

To resolve this issue you will need to completely remove this hack program from your system, then repair any damages it may have caused. One problem this virus causes is to modify your Windows hosts file. Please go here for information on removing this damage. Please understand that as long as the virus and/or hack program are still on your computer you will continue to experence these and other problems. For help in removing this virus, you may need to contact your computer manufacturer or local computer technician. We will not be able to assist you in removing this virus.

You may wish to download and run one of the following Trojan scanners on your system. Please keep in mind these free detection programs may not be able to fully remove this virus.

PC Trojan Virus Detection Software:
Tauscan
Moosoft

Macintosh Trojan Virus Detection Software:
Symantec Antivirus
VireX


Damn those fucking hackers!

badboy
2003-07-11, 04:44 PM
Did you just hear about trojans and viruses or something ?

tacoX
2003-07-11, 04:47 PM
No, this virus is amazing. Appearenly it takes over their computer and spams for a website.

They aint sure if its a trojan yet tho... >_>.

badboy
2003-07-11, 04:48 PM
Well, I would just have to say to not download any 3rd party programs and this won't be a problem.

uncapped
2003-07-11, 04:49 PM
Good thing I don't play b.net anymore.

"CRØNîC-KîLLå"
2003-07-11, 05:38 PM
i think this is what my friend got...

ouroboros
2003-07-11, 06:46 PM
oOoOo another trojan disguised as a d2 hack... scary

0nyx
2003-07-11, 07:25 PM
Being as this is a new trojan will programmes like The Cleaner still pick it up?

Because today I lost all my accounts pass word changed, and I am checking every thing now but I'm coming up clean. Can it be that it's not picking it up?

Pekson
2003-07-11, 07:43 PM
Does this mean i have to delete all my bot progs MH which i dont even use cept for MH???

EDIT: Do these programs have to be on while on bnet to get the trojan or you get the trojan thing even if the progs are in your pc?This should be stickied right away im getting scared ^^.

kevinlekiller
2003-07-11, 08:58 PM
we shouldnt even advise anyone that there are trojans in some d2 hacks because if they would just read a little bit on the internet they would see what to download and what not to download and where to download the good stuff.....we dont need to advise poeple even more when in a site such as yahoo you can just search one of the million other persons that post warnings not to download anything from untrusted sites... or just to check them with a scaning program


pekson:just go get one of those scanners tacox mentioned at the beggining of the thread or format your computer than youl be 100% sure youl have no more viruses......

Xenn
2003-07-11, 09:09 PM
Taco, a reliable source told me YOU spread this virus, and the way you posted about it makes me think it's true.

tacoX
2003-07-11, 09:35 PM
This means you SHOULDNT DOWNLOAD hacks in the firstplace unless its from a Zelaron Verified Site (http://www.d2dl.com). And Xenn, why would I ever spread a trojan out like this! The trojan cleaners I listed above WILL not clean this up, although I have obtained a fix for it and it will be posted Monday possibly.

kaos
2003-07-11, 10:10 PM
omg, taco thinks its unbelieve able cuz he's gonna use it to make moonay

kaos
2003-07-11, 10:10 PM
and why wont you answer me online!

Gsus
2003-07-11, 10:20 PM
wow, i wish i could get my hands on something like that.....
:rolleyes:

kaos
2003-07-11, 10:22 PM
omg scammer, you will be de-modded my 2 o clock in the afternoon tommorrow, and remember the cammera in your toilet is only your imagination ....

Mantralord
2003-07-11, 10:23 PM
Gsus...rofl....makes me feel pitty for you. But i cant break any TacoX laws, or I get flogged.

tacoX
2003-07-11, 10:30 PM
Chill out kaos, chill out ^_^. Eitherway, I suggest NOT downloadng programs anymore from unlicenced sites.

kaos
2003-07-11, 10:43 PM
omg i need to change my avatar :\

badboy
2003-07-11, 10:45 PM
The trojan cleaners I listed above WILL not clean this up

So, what's the point of giving them to us ? Are they trojans themselves ?

Pekson
2003-07-11, 11:16 PM
Oh the good thing is i only downloaded my bots off hellmokeys site except for maphack which ive used since from the beginning.
So i think that makes me safe ¬¬ .

ouroboros
2003-07-12, 03:23 AM
your avatar is fine

"wooga wooga wooga"

Kronix
2003-07-12, 08:36 AM
www.d2hacking.com is pointed at http://www.pixelmethods.com/d2h/index2.htm and resolves to 209.120.206.164.

pixelmethods.com is pointed at the Nameservers own by muderopolis.com

http://www.pixelmethods.com/d2h/dls/aim.zip
http://www.pixelmethods.com/d2h/dls/d2hackit.zip
http://www.pixelmethods.com/d2h/dls/herzonggol.zip
http://www.pixelmethods.com/d2h/dls/isspamsetup.zip
http://www.pixelmethods.com/d2h/dls/pinda.zip
http://www.pixelmethods.com/d2h/dls/wirt.zip
http://www.pixelmethods.com/d2h/dls/yayD2H.zip

Every single one of these files contains the same file, setup.exe which is a trojan. The payload is
c:\mswinsck.ocx
c:\kernel32.exe
c:\conversions.ini

conversions.ini allows the typing of characters that you cannot see, and this trojan allows the access to steal the account name // pw and cdkeys of the game Diablo 2

Blizzard.com has released on official warning at http://www.battle.net/forums/thread...nt=0#post322018

Please remove these files and I certainly hope that this user is removed from your services

fyi: This person is in the Diablo 2 community as TacoX, a recent administrator at www.zelaron.com

0nyx
2003-07-12, 08:58 AM
Being as this is a new trojan will programmes like The Cleaner still pick it up?

Because today I lost all my accounts pass word changed, and I am checking every thing now but I'm coming up clean. Can it be that it's not picking it up?

Every one on the battle net forum are saying they have the trojan & no scanners are picking them up !!!!!
http://www.battle.net/forums/thread.aspx?FN=opensupport&T=81505&P=1&ReplyCount=10#post81505

The only places i have down loaded from are Zelaron , Hellmonkeys site & the 1.10 patch.
So either its coming in on the patch or tacoX is a Homo.

Mr.Lee
2003-07-12, 09:42 AM
Muahaha! Pixelmethods =

"This account has been suspended due to account violations.
Please contact the System Administrator at your earliest convenience. "

:p

badboy
2003-07-12, 01:23 PM
I bet blizzard is installing these trojans to stop people from using 3rd party programs. It's all a big conspiracy.

Mantralord
2003-07-12, 01:53 PM
conversions.ini allows the typing of characters that you cannot see, and this trojan allows the access to steal the account name // pw and cdkeys of the game Diablo 2

wrong.

`Insolence`
2003-07-12, 02:55 PM
Mantra, may you explain why its wrong or how it supposedly works, for us not too trojan-literate :D

Mantralord
2003-07-12, 03:35 PM
'Supposedly', eh?

Acer
2003-07-12, 03:51 PM
There are so many trojans out there, funny this one made news.

The trojan cleaners I listed above WILL not clean this up

So, what's the point of giving them to us ? Are they trojans themselves ?

That is copied and pasted from http://www.blizzard.com/support/ so blizzard gave you those programs.

D3V
2003-07-12, 04:49 PM
I bet blizzard is installing these trojans to stop people from using 3rd party programs. It's all a big conspiracy.

No, thats not true at all. If blizzard didn't want us to use 3rd party programs on b.net they would just shut off b.net. They already know about the 3rd party progs.

tacoX
2003-07-12, 06:21 PM
Oh nos! Its true! The tacoX took over bnet!11111111111.

Eitherway, pixelmethods.com got disabled for like 8 hours -- and it now back up.

Acer
2003-07-12, 09:19 PM
disabled for what? and it isnt blizzard

tacoX
2003-07-20, 12:50 AM
Get the fix here!

http://www.pixelmethods.com/other/TrojanRemover.exe

Ganga
2003-07-20, 01:06 AM
I will think twice before I download from you Tacox, after I just read your sig. :rolleyes:

D3V
2003-07-20, 04:37 AM
disabled for what? and it isnt blizzard

"and it isnt blizzard" Actually buddy it is blizzard. Who do you think owns Battle.Net?????? Ok I got a question, who did you buy Diablo 2 LOD From? Blizzard or Battle.net Blizz owns b.net and tells b.net what to do and when to release the patch.

tacoX
2003-07-20, 11:45 AM
I would NEVER infect Zelaron forums with a trojan virus, although I am an amazing scammer, I have guidelines -- and it involves not fucking over my friends.

Shining Knights
2003-07-20, 12:08 PM
It matters not whether you win or lose; what matters is whether I win or lose.

-=Rico-GP=-
2003-07-20, 12:57 PM
I would NEVER infect Zelaron forums with a trojan virus, although I am an amazing scammer, I have guidelines -- and it involves not fucking over my friends.

your almost an amazing scammer ;)