PDA

View Full Version : hacked



bmitch5150
05-20-2013, 09:33 PM
I have had no problems at all till after using Catherby_fisherV0.4 [http://villavu.com/forum/showthread.php?t=102569&page=10]
came back on and well i was at lumby with all my cash gone.

I already logged in so i lost the screen for ip of last log in:/ anything i can do?

I was also using in the passed days
1)http://villavu.com/forum/showthread.php?t=100028
2)http://villavu.com/forum/showthread.php?t=101676


those were the other ones i used over the passed 5 days.

all i remember was the ip started with 104. which does not tell a lot
any way of finding the rest of the ip?

EDIT: went to change email password just incase and found this
http://i.imgur.com/bpGlXq4.png?1


EDIT 2:https://mega.co.nz/#F!e0hBUajb!fgsdmmWSTBNNDcwKdVq2qA
these are the scripts i have if anyone wants to go through them.

Edit 3: I'm not blaming any script here i just listed what I have used. i took the risk with botting in the first place.

The Mayor
05-20-2013, 09:46 PM
All 3 of those scripts are clean. You must have got infected from another source.

Just incase it is someone from these forums, Justin or Hobbit can check the ip 109.75.167.42

kocke
05-20-2013, 09:50 PM
The ip 109.75.167.42 is from the United Kingdom, but it looks dead.

bmitch5150
05-20-2013, 09:58 PM
The ip 109.75.167.42 is from the United Kingdom, but it looks dead.
Yea, I am assuming they are smart enough to use a vpn.


All 3 of those scripts are clean. You must have got infected from another source.

Just incase it is someone from these forums, Justin or Hobbit can check the ip 109.75.167.42
Thanks and could i put up the other scripts i used too see if any of those were it
I only used one script from osbots im going to ask one of their moderators too

Haxz
05-20-2013, 09:59 PM
So many cases of people using Catherby fisher and got hacked, weird lol. Could you paste your Catherby fisher script here with Simba Tags?

bmitch5150
05-20-2013, 10:01 PM
So many cases of people using Catherby fisher and got hacked, weird lol. Could you paste your Catherby fisher script here with Simba Tags?

What do you mean by simba tags?

grats
05-20-2013, 10:02 PM
yea it's some server in the UKs static IP.. so a vpn or proxy someone used.

Haxz
05-20-2013, 10:04 PM
What do you mean by simba tags?

Click "Go Advanced" on reply, paste your script, highlight the script and click the Simba icon above the reply message box.

grats
05-20-2013, 10:05 PM
It's running lighttpd which is pretty damn rare, I have only seen people that like it, on this website.. and those that I know like it.. vs nginx, aren't people I would suspect to actually steal stuff
other than that I haven't seen that web server used in many years

bmitch5150
05-20-2013, 10:12 PM
Click "Go Advanced" on reply, paste your script, highlight the script and click the Simba icon above the reply message box.

ahh alright i see what you mean
I just did this before i saw your post if this works. this is all the scripts i've had downloaded which 3 are osbots and rest is simba if this works
forgot two scripts Edit.
https://mega.co.nz/#F!e0hBUajb!fgsdmmWSTBNNDcwKdVq2qA

IF you need me to do what you said i will, just had this already ready.

Haxz
05-20-2013, 10:15 PM
ahh alright i see what you mean
I just did this before i saw your post if this works. this is all the scripts i've had downloaded which 3 are osbots and rest is simba if this works
https://mega.co.nz/#F!e0hBUajb!fgsdmmWSTBNNDcwKdVq2qA
mistak
IF you need me to do what you said i will, just had this already ready.

Can't scan through the scripts for you, don't have Simba installed on this laptop :p

But since the "hacker" is somewhat an expert in doing these stuff, I doubt he will do any mistake that eave traces to him.

bmitch5150
05-20-2013, 10:18 PM
Can't scan through the scripts for you, don't have Simba installed on this laptop :p

But since the "hacker" is somewhat an expert in doing these stuff, I doubt he will do any mistake that eave traces to him.
very true, it was only 1500k so it didn't hurt that bad but it still sucks. i wish i knew which script it was so i could delete it.

happy hippo
05-20-2013, 10:22 PM
very true, it was only 1500k so it didn't hurt that bad but it still sucks. i wish i knew which script it was so i could delete it.
Well at least you Lost Chump change instead of a bank worth 500m:)

Justin
05-20-2013, 10:31 PM
All 3 of those scripts are clean. You must have got infected from another source.

Just incase it is someone from these forums, Justin or Hobbit can check the ip 109.75.167.42

http://puu.sh/2XGLr/35aab7d3f0.png

Sorry dude

grats
05-20-2013, 10:38 PM
Can't scan through the scripts for you, don't have Simba installed on this laptop :p

But since the "hacker" is somewhat an expert in doing these stuff, I doubt he will do any mistake that eave traces to him.

.simba files are clear text, textedit on mac.. notepad on windows.. gedit/vi/nano on linux all should open them fine (FYI)

Haxz
05-20-2013, 10:47 PM
.simba files are clear text, textedit on mac.. notepad on windows.. gedit/vi/nano on linux all should open them fine (FYI)

Never knew that. Thanks for the info.

Btw, script is clean. And I realize the catherby fisher script is so well written lol.

Peanuts
05-21-2013, 12:17 AM
Yea, I am assuming they are smart enough to use a vpn.


Thanks and could i put up the other scripts i used too see if any of those were it
I only used one script from osbots im going to ask one of their moderators too

Countless years of using countless scripts from here (including cath fish) and never got hacked..(over 150m on main bot)
Honestly man.. This place seems to safe to me.. After 5 years hack free n botting hard.

That one script you used from osbot prob got your details... n at some point the person decided to log onto your acc n take your bank.. perhaps a while after getting your details.. I dunno, not sure how scammers work.

rebeltjeh
05-21-2013, 07:16 AM
Maybe it was the partyhat duplicator I sent you yesterday :redface:

I seriously doubt that it came from Simba mate, been using (almost) all the scripts & never had a strange IP appearing. Too bad thou, these days there are many ways to get keylogged..

kocke
05-21-2013, 02:02 PM
I always use the extension security, just to stay safe.