I was Stupid, but can I be forgiven?

  • Thread starter Thread starter kluemaster
  • Start date Start date
K

kluemaster

Guest
I got scammed into downloading and running an exe. I really just wanted to see it more than use it. I realize that that's probably hard to believe, but oh well, it is the truth, and that's all I have. The file downloaded was matrix3-2.exe. When I ran it, of course my account was stolen. I chalked it up to being stupid, and as a learning experience.

Sadly, last night my new account was stolen. I did NOT re-run the program, and it's not showing up in my processes. I'm running xp, and if anybody knows what this is, or how to rid myself of it, I would greatly appreciate it.. 2 accounts is enough punishment... I hope.
 
It installed a trojan or virus, I'd suggest running a system scan/removal utility.
 
any other ideas?

I've run my personal virus checker... As a matter of fact, i ran it on the file before running it. I've also tried the housecall.antivirus.com, and both say that i'm clean.. yet the fact remains that I had another account stolen from me yesterday. A freind saw "me" going into the same game names (or close) that my last account did when it was stolen, so I'm pretty sure it's the same (insert multiple curse words here) person who got me the first time.

Has anyone run across matrix3-2.exe? if anyone would like a copy of the exe, i'd send it to you, but i DO NOT recommend running it, unless you are a bonified expert in these things.
 
If this program was specifically written to steal Diablo 2 accounts, then most scanners won't detect it, because it is so isolated.


Was your account stolen immediately after? Did you get this .exe file from someone/somewhere somehow connected with the Diablo community?
 
yes.. and no!

I did get the virus from a source directly related to the diabloii community, but i did download tds-3 from the site listed above, and upon downloading the newest signature files, it found a RAT Net-Devil file in kernel32.dli (notice last letter is i). it was located in the sysytem directory. I'm now doing a second scan and hoping it comes up empty. If you would like a copy of the original exe, i can provide it.

In answer to your second question, YES. The account was stolen within 15 minutes of running the program.. The second theft occured aprox. 2 weeks later.
 
TDS is a killer program
however
try www.pandasoftware.com also and try their free online scan or use the freedownload one .
and if my emailing is working correctly blizzard will take down the site coz i reported it .
i saw it bin posted in OTS (the chat channel not the site) a few times . gave him/she a warning
 
You must log in or register to reply here.
General chit-chat
Help Users
  • No one is chatting at the moment.
  • The Helper The Helper:
    this is the fix I get from that yeah this is hard to control. disabling bots is pretty much necessary as ai and other bots would push really old threads to the top. reduce weight of view count. disable guest view tracking if you really want to push active threads to the top. a bit of tinkering for a few days with the weights and other settings should get you a decent trending widget box.
  • Ghan Ghan:
    I changed the settings a bit.
  • Ghan Ghan:
    Narrowed it to 7 days for the half-life and set views to 0 weight.
  • The Helper The Helper:
    I dont think Trending would work for this forum it would be better to just have the last 5 posts from anywhere
  • Ghan Ghan:
    Probably will have to give it some time to update.
  • Ghan Ghan:
    I'm guessing it is not retroactive.
  • Ghan Ghan:
    Next on the punch list: Update the server to Ubuntu 24.04.
  • The Helper The Helper:
    Mad Lads is new I see it displays original post date
  • The Helper The Helper:
    as long as it changes it is good - it is good now it updated and its new stuff
  • The Helper The Helper:
    One thing I have noticed and I dont know if it is by design but like 1 out of 3 times I come to the site the Anubis screen just hangs open, if I refresh it will go away but sometimes it hangs
  • Ghan Ghan:
    I've seen that as well.
  • The Helper The Helper:
    Wow - the change in the stats are major. I kind of knew it was all bots but wow, to see the effect. Why the social media sites cant do something like this I have no idea.
  • Ghan Ghan:
    Probably inflates their numbers so they look better to advertisers.
  • The Helper The Helper:
    Yeah google does not filter those bots. I remember when Apex was doing Google ads I saw the same IPs in there as I was seeing here - google is totally tracking all those bots as traffic and most google traffic, at least ours, was all bots
  • The Helper The Helper:
    oh wow, i bet i can post x links now and do the webp pics now giggity
  • The Helper The Helper:
    ahh anubis blocks anyone that has javascript turned off
  • The Helper The Helper:
    Robot: HTTP client library - i love the new robot :)
  • The Helper The Helper:
    New Science News Forum and it starts out with 420 threads :)
  • The Helper The Helper:
    Technical Support forum name changed To Technology News, there is now a Tech, sci/tech and science forums now :)
  • The Helper The Helper:
    Happy Saturday! Hope everyone has a fantastic weekend!
  • Ghan Ghan:
    We are now on Ubuntu 24.04. Had some issues with the style after the OS/PHP upgrade but now resolved.
     +1
  • Ghan Ghan:
    PHP 8.3 now live
     +1
  • The Helper The Helper:
    Weekend went by too fast. Next weekend I am going to try to do a nature thing - buddy of mine lives by the Colorado river and has some kayaks and invited me to do some kayaking from a place he knows to get on the river.
  • Ghan Ghan:
    That sounds like an adventure.
  • The Helper The Helper:
    400 users all online all looking at latest content

The Helper Discord

Members online

No members online now.
Online now:
99 (members: 0, guests: 99)

Share this page

Affiliates

Hive Workshop NUON Dome World Editor Tutorials
Back
Top