ive been attacked, in need to fight back.

ok i know that this isnt the kind of stuff that should be asked on this site but i have no where to turn. well it all sounds pretty stupid because its about a stupid game called runescape, my little bro got a keylogger somehow and this guy stole all his passwords and everything my brother is really upset and so am i. i reported it to the game staff (who just said they were sorry), i have the ip-address of the person who did this
because when you log in the game it says, "you last loged in from (ip-address)" i need to get back at this person somehow, my brothers been playing for 4 years and this dude took everything he spent his time on. pls dont flame me i really need help E-mail or pm me with any advice or to lead me in the right direction, like websites that could help me out cause i know this website is about security not revenge. any help is appreciated, thank you.

It's not something you can learn overnight. That requires the skills of someone who knows what they're doing, and that would take a lot, lot, lot of time studying and learning for you. There's really nothing we can do to give you an easy step-by-step "this is how you get them" answer. It just doesn't work that way.

of course, i know a little but not enough to do anything, should i port scan this guy look for weaknesses or what? i tried but the port scanner didnt show any open ports or anything i think i need a new one, the one i have is called port scan 3.0 by cyrus its from hackoffice 2001 ive had it for a while do u think i need a new one?

What makes you think you know his IP address..................it may well be someone else's, after all he managed to put a keylogger on your box?

He might be using a proxy?.

He might be using an unsecured WiFi link.

He might be using a dynamic IP address, so someone else gets it as soon as he logs off?

Anyway, if you can still log into the game, how come you cannot change your login/password?

How do you know that it was a keylogger rather than a backdoor or trojan? did you find it? have you checked for backdoors and trojans? I wouldn't trust anything on that machine now.

In short...............forget it.

the ip address looks like a road runner ip im pretty sure its not a proxy i have roadrunner too and its not dynamic ip, i can log in the game but he took all my brothers things. i know its a keylogger cause i scaned my bros computer, with nortan it couldnt delete it i dont know why so we did a system restore, nothing important on the box anyways

Bite the bullet........

At LEAST format disc and re-install.
If you have neither the skills or the discs, it only leaves you plan B.

Buy a new[er] PC ?
Start this one with strong security from day one.
ALL users use ctl-alt-del to login AND STRONG passwords.

Only allow users on AS users.
NO ONE has access to the admin bar you ............
No exceptions no excuses.

Lurk here and pick up as much as you can with regards to keeping your PC AS your PC.

Is the accused PC still useable?
Have you given it a one over with ANY security tools ?

Try THIS
It's a thread to help you clean out your PC, and it has a link to another good thread too.

From earlier post........

How DO you know it was key logger ?

At the very least you should answer these posts, and give info as requested.
I'm afraid that in regards to your 'attacker'.
Let it go
move on

make it harder, if not impossible to get in again...............

[edit]
Damn.
but I've GOTTA learn to type QUICKER :)

Quote:

---

pls dont flame me

---

snicker
:cool:

Quote:

---

i have roadrunner too and its not dynamic ip

---

the only time roadrunner gives static IP addresses is if its a business accoutn, so if this guy has static then he either is paying some money for it or is on a company network...if its the latter and you try and attack you will get burned for it. RR ip addresses are mostly dynamic, although they do stay the same for quite a bit of time.

ok, and lets say this is not o business account, how do you know he is not bouncing his connection throgh another computer that he "owned".

attacking this guy is just plain stupid, especially over a game. think about it. revenge for steal bits of data in a virtual game and possibly going to jail, getting fined, losing your ISP, etc... or taking it as alesson learned and moving on.


also...have you ever toyed with the idea that MAYBE your brother GAVE him the un/pw becasue they were "friends" or becasue he was supposed to have access to the other guys account also. I know alot of people who do crap like that in online games and in return get screwed over. and the "keylogger" you found may have very well been a coincidence, becasue this seems like a whole lot of work and risk for a stupid game password.

the computer isnt mine its my little brothers. it has norton firewall, scanner. i dont know how he got the keylogger because he doesnt download anything he just plays his game. im sure it was a keylogger unless norton was lyng. i gave the game admin the persons ip and told them he was violating game rules and my rights, but they wont even look into it, oh well i guess they're busy spending thier money or something. its not that bad the computer is gonna be fine it just frustrates me that someone is geting away with all my brothers stuff. oh well its just a game i know, i just wish i was capable of taking revenge.

Quote:

---

Originally posted here by XTC46
the only time roadrunner gives static IP addresses is if its a business accoutn, so if this guy has static then he either is paying some money for it or is on a company network...if its the latter and you try and attack you will get burned for it. RR ip addresses are mostly dynamic, although they do stay the same for quite a bit of time.

ok, and lets say this is not o business account, how do you know he is not bouncing his connection throgh another computer that he "owned".

attacking this guy is just plain stupid, especially over a game. think about it. revenge for steal bits of data in a virtual game and possibly going to jail, getting fined, losing your ISP, etc... or taking it as alesson learned and moving on.


also...have you ever toyed with the idea that MAYBE your brother GAVE him the un/pw becasue they were "friends" or becasue he was supposed to have access to the other guys account also. I know alot of people who do crap like that in online games and in return get screwed over. and the "keylogger" you found may have very well been a coincidence, becasue this seems like a whole lot of work and risk for a stupid game password.

---

your right im on probation alreadly lol but hey im a juvinile and juvie is day-care compared to the pen. i know my brother didnt exchange passwords hes not that retarded, at first we thought someone just figured it out by brute-force or guessing so we just changed the password and moved on, but then they would log on any charactor that anyone loged into on that certain computer so i logged into one of the charactors he just logged off and got his ip, i dont think he faked the ip or anything i think he is probly a script kiddie who knows how to use a keylogger, but i gotta give him credit cause he got us.

Quote:

---

Originally posted here by rcgreen
snicker
:cool:

---

:D :D Love it

not for nothing but you sound full of **** to me...

""i know its a keylogger cause i scaned my bros computer, with nortan it couldnt delete it i dont know why so we did a system restore, nothing important on the box anyways""

keylogger don't have the the capability to stop AV unless they've been installed BEFORE the AV

what was the name of the "keylogger" you've had??

why would the game admins NOT help you to get the last IP logged in that account??

noone here will help you install loggers on other's boxes or attack them in any way.

Quote:

---

why would the game admins NOT help you to get the last IP logged in that account??

---

becasue they know its a wild goose chace tryign to track stuff like this, they confirm he is owner and give him back access (a friend of mine was a GM in one of the Biggest MMORPGs ever, and I actually asked him this, lol)

Quote:

---

keylogger don't have the the capability to stop AV unless they've been installed BEFORE the AV

---

unless it is packaged in with other things, so this isnt exactly true.

Quote:

---

not for nothing but you sound full of **** to me...

---

I agree...

hey man im full of no ****. it was in windows network.dll or something like that i cant check anymore because we did they system restore.

OK ok

Maybe you did have a keylogger....

What you are not getting is that

Nobody is gonna help you fight back.!!!!!! :eek:

Its a GAME!!!!!! for krist sake!!! :rolleyes:

Get a new username\password and move on...learn from your experience and be more carefull.


Jeez :rolleyes:

MLF

XTC46

"why would the game admins NOT help you to get the last IP logged in that account??
becasue they know its a wild goose chace tryign to track stuff like this, they confirm he is owner and give him back access (a friend of mine was a GM in one of the Biggest MMORPGs ever, and I actually asked him this, lol)"

BUT if I had a logger and lost my WoW account (fat chance) other things on my system would be affected (every pwd I'd type including SS#'s, CC#'s) therefore it's not really ethical for them to just say that it's a wast of "their" time. I guess some level 1 tech-desk monkey gets the call from a 15 year old in "Juvie" (yeah right... I'm a RAMBO too) he wouldn't care either.


""keylogger don't have the the capability to stop AV unless they've been installed BEFORE the AV
unless it is packaged in with other things, so this isnt exactly true.""

true ... there are ways, but do I really have to get into metaphysics of C code to call a skidde's crap

You didn't by any change read the rules or anything? No?? just asking. We are not here to help you attack someone just because he got a password.
First of al: If you still have your runescape account and your password, why are you so upset. I have played the game myself and you can get your EQ back verry quick. I know that it stinks but you should be happy that you can still acces your ac. I know people who weren't so lucky.
Second: Hacking is illegal. Why don't you report him to the police, go to the right division.
Third: You don't learn to hack so easy. What you want is an easy program. Try google and enter something with script easy and remote dekstop. But shhh don't tell any1 i told you this :rolleyes: ;)

This goes down as another Ghey, teach me how to hack Skiddie thread.



K-Rad................................ Go to school, pay attention, and do something productive with your life. :rolleyes:


Jeezuz!

The only person who made any sense in this whole thread, was, rcgreen

Quote:

---

Its a GAME!!!!!! for krist sake!!!

---

Quote:

---

K-Rad................................ Go to school, pay attention, and do something productive with your life.

---

:p (Anxiously awaiting K-Rads response) :p

Tell your stupid brother to read this several times:

http://runehq.com/RHQSpecialReportsView.php?id=00218

And I do mean stupid ........................keyloggers don't just "happen" either you have inadequate physical security and/or you are running an insecure setup, and/or generally coupled with unsafe internet usage practices.

Then read the security tutorials and posts on this site and learn how to secure the machine and install appropriate countermeasures.

;)

I was wondering when the reds were gonna start flying... :D

MLF

Well if all your little bro does is play games I dont think the keylogger got any vital info on him. Just remove the logger and change all your passwords. Little kids dont have credit card info like what this guy is looking for. How do you know it was this guy in the first place and not a buddy or another Hacker? Hell could have been mommy and daddy making sure there child isnt getting into trouble on the internet. I would do that to my kids computers.

Keyloggers suck, but this smells like some lame social engeneering thing to me...

how often have we seen this on AO (and all over the place)?
"Help me, someone hacked me and bla bla bla, can u hack him back, i got an IP and bla bla bla"
(i know being suspictious about everyone sucks but hey...its the www :p )

BUT STILL...
considering that it happened, i sugest you do all the steps mentioned above (including letting it go ), plus this one:

- most of the ppl that use the web download *.exes from p2p,warez and other type of sites, but what they don't often know is that most of the things you dl from doubtefull sources is piggybacked with FTP servers that don't show up as virii, that share your intire HDD and that have faux-amis (false friends) names to lure you into thinking it's a system proggie and letting it through your firewall (if you have one...).

Who knows if the attacker didn't send your gamme-addict brother the latest_super_<enter-game-name>_patch.exe and voila'.

Only to say that without a good security, IDS and logs it's hard to know for sure how he got in, and not knowing is leaving the door opened for others.
I'd go with format c:\ :brickwall