1. There is no such thing as a "pending" ban or Steam admin. Anyone threatening your account is a scammer trying to scare you. Read more.

Accepted 76561198058294287 (Grandpa Sniper)

Discussion in 'Archived Reports' started by Markers, Apr 27, 2013.

Thread Status:
Not open for further replies.
  1. Markers

    Markers New User

    Messages:
    57
    Steam:
    STEAM_0:1:35807771
    Scammer

    |steamID: Grandpa Sniper
    |steamID32: STEAM_0:1:49014279
    |steamID64: http://steamcommunity.com/profiles/76561198058294287
    |customURL: http://steamcommunity.com/id/maggotmachine
    |steamrepURL: http://steamrep.com/profiles/76561198058294287


    Victim
    |steamID: Markers
    |steamID32: STEAM_0:1:35807771
    |steamID64: http://steamcommunity.com/profiles/76561198031881271
    |customURL: http://steamcommunity.com/id/markers34
    |steamrepURL: http://steamrep.com/profiles/76561198031881271

    This guy added me and said if i could help him.Answering him that it depends,he sent me a link to a so-called "bunch of photos" i downloaded,and saw there was 4 so-called photos,which are .src executable files that can download worms & viruses to your computer.(Happened to me before),i ask him about this and he just lies on his feet,saying its the mac osx default picture format,which is most certainly not true according to my research,indicating he was indeed trying to get me a virus injected.Chat and my research is below,last call is yours.I havent opened them,but i'll have you know .scr files look like pictures and act like executables,from my experience.

    URL SHORTENER ANALYTICS SHOW THAT HE MADE 52 PEOPLE CLICK THE LINK ON JUST 43 MINUTES.ACROSS 10+ DIFFRENT COUNTRIES
    http://MALWARE-SUSPECTED-GOO-GL /#analytics/MALWARE-SUSPECTED-GOO-GL /2lZWW/all_time

    What is .scr extension? http://filext.com/file-extension/SCR
    Quote:"The SCR file type is primarily associated with 'Script'. In November 2007 the SCR file extension started to be used to transmit a Trojan. As a script or a screen saver this file can execute other files which carry the Trojan
    Use caution if you receive a screen saver file via E-mail. These files can contain executable code and can be worms or viruses. Note: This file type can become infected and should be carefully scanned if someone sends you a file with this extension."
    "Someone sent me a .scr file?" http://uk.answers.yahoo.com/question/index?qid=20110521130729AA3b5aI
    http://virusscan.jotti.org/tr/scanresult/89b8a129d7e388621a3fd0da65eaade67624fd2e
    [​IMG]
    2013-04-27 Trojan.PWS.Stealer.2111

    Screenshots
    [​IMG]
    [​IMG]
    [​IMG]
    VenGanZa likes this.
  2. Derpy -PoN³-

    Derpy -PoN³- New User

    Messages:
    12
    Steam:
    STEAM_0:1:42969545
    I've just been hijacked via this guy. I have no access to my steam account via the client but I can log in to sites like this cause it remembered my credentials. Submitted a support ticket to get my stuff back, but this guy needs to get banned pronto.

    This account is under his control as of now.
  3. Cloud Chiller

    Cloud Chiller New User

    Messages:
    1
    Steam:
    STEAM_0:0:17600859
    I helped Derpy out by managing to get some of his items for him (and had a nice talk with the hacker) so here is my share of advice for avoiding this (and tons of other worms/viruses):

    Step 1: Disable hidden extensions. This allows you to see that images actually are .PNG and .JPG's.
    [​IMG]
    Step 2: Send the suspicious files to the anti-virus vendors. Most vendors have a dedicated site or email where you can send samples. For example, Avira has https://analysis.avira.com/ and [email protected]!
    Step 3: If you get infected, don't assume anything. Boot into Safe-mode (by smashing F8 while booting) and run a complete scan. These files for example downloads a RAT and a few Trojans that you will have a hard time removing while booting normally.
    A Filthy Streetrat and VenGanZa like this.
  4. Thomas Matthias

    Thomas Matthias Retired Staff

    Messages:
    4,659
    Steam:
    STEAM_0:0:36213483
    Thank you. I have marked this thread as ready for review. A SteamRep admin will continue processing it shortly.
  5. Xenophobia

    Xenophobia Retired Staff

    Messages:
    4,336
    Steam:
    STEAM_0:1:20973413
    Sorry for the wait.
Thread Status:
Not open for further replies.