Accepted Report: 76561198007389595 (Doc Scratch)(Hijacked)

Not sure if this is the right format to report... Myself? But, I've been hacked and my account is currently being used to scam people via Paypal.

Victim:

steamID: Doc Scratch
steamID32: STEAM_0:1:23561933
steamID64: http://steamcommunity.com/profiles/76561198007389595
customURL:
steamrepURL: http://steamrep.com/index.php?id=76561198007389595

Scammer:
steamID: Doc Scratch
steamID32: STEAM_0:1:23561933
steamID64: http://steamcommunity.com/profiles/76561198007389595
customURL:
steamrepURL: http://steamrep.com/index.php?id=76561198007389595


Screenshots:
Hacked Profile: http://imgur.com/gPxtH
Outpost Profile: http://www.tf2outpost.com/user/2215
Stolen Goods: http://tf2tp.com/trade.php?trade=5722829
Stolen Goods: http://tf2tp.com/trade.php?trade=5713443


Description: So, as it stands, I was hacked on Febuary 14th, 2012. I was first notified of the situation when I received a Skype call from a good friend of mine, Transcendent. Transcendent mentioned that he felt something was wrong and that I was out of place by messaging him. Confused, I asked him what he meant. To my horror, Transcendent told me that I had messaged him via Steam chat and asked him if I could buy his unusual via Paypal. Well, Transcendent knew that was out of place because the fellow lacked my normal typing style and lacked the familiarity with one another that Transcendent and I shared.

Following this revelation, I checked my Steam inventory. All my earbuds, unusuals, hats, and other miscs had been traded off of my account and my inventory left public. Outside of that, all of the Steam games within my inventory were gone. When I tried to log in, it rejected my password.

Yup, I'd been hacked.

Immediately, I filled out a ticket to Steam and sent information to verify it was my account. After that, I made a new, secondary, Steam account and began to reach out to good friends to try and get an idea of what to do next. Obviously, I put out the word to my friends that the hacker was impersonating me and trying to buy unusuals via Paypal by the good will of my name. Within the confusion of the moment, I all but forgot to turn to one of the most important resources ever. SteamREP. So, here I am, today, turning to you and hoping for a bit of help.

For the moment, my profile is controlled by a scammer. A fellow who is hitting up my friends and asking for them to sell via Paypal.

Outside of that? I've tracked down several of my unusuals and who they belong to. I plan on composing a different topic on one, maybe two, of the owner's however.

I've also found the profiles of those who laundered the unusuals.

Profile 1:
http://steamcommunity.com/profiles/76561197992809744
Profile 2:
http://steamcommunity.com/profiles/76561197994420228

Profile 1 Trade:
http://tf2tp.com/trade.php?trade=5722911
http://tf2tp.com/trade.php?trade=5722413
http://tf2tp.com/trade.php?trade=5722829

Screen Shots of Profile 1 Trade:
http://imgur.com/cOxkr,QoU0P,B0vWt

Profile 2 Trade:
http://tf2tp.com/trade.php?trade=5713443

Screen Shots of Profile 2 Trade:
http://imgur.com/n1xfw

Composed List of Found Unusuals:

http://www.tf2items.com/profiles/76561198045459332​

Contains my Burning Honcho (Lvl 44), Burning Honcho (35,) and Stormy Storm Samureye (Lvl 37)​

http://www.tf2items.com/id/Adrian17​

Contains my TF2 Logo Samureye (Lvl 75)​

http://www.tf2items.com/id/blaster210​

Contains my Stormy Storm Team Captain (Lvl 80)​

http://www.tf2items.com/profiles/76561198033759340​

Contains my Searing Plasma Magistrate's Mullet (Lvl 70) and Bubbling Counterfeit Billycock (Lvl 10)​

Unusuals Not Found:​

Ghost Blighted Beak (Lvl 80,) Scorching Grimm Hatte (Lvl 66,) Green Fetti Slug (Lvl ??,) Purple Fetti Slug (Lvl ??)​

​

Misc Items Found: ​

Several hats and miscs​

Genuine Merc's Pride Scarf​

Earbuds (Lvl 1)​

​

Games Not Found:​

Defense of the Ancients 2 (2x,) Skyrim (1x)​

Thank you.

Serious question, though. Why wasn't both added? I can try to scrounge up more screenshots.

Ah, I see. Thank you very much, Mattie. I hope I can get as quick and dedicated a reply to my other thread as this one.

I'm back!

We might have a problem here, I think you've been hijacked for the second time. Found all your stuff on tf2tp.

Here's some screenshots I managed to get, with your medic combo for 7 buds; bivak ("deny") bought it like he does on every single hijack yet again.

http://imgur.com/B2Sex,5UHme,M2imb

Hijacker account: http://steamcommunity.com/profiles/76561198004508545

You got to be f✿✿✿✿✿✿ kidding me... Yup.

All I did yesterday was change my password and sign into Steam and play some TF2. I only went onto two servers.. and now this.

http://steamcommunity.com/profiles/76561198059272158 Currently has some of my unusuals, obvious laundering account.

Have you scanned your computer first for any keylogger?

I have. I've scanned both of the computers I commonly use and have done a full system scan on each.

I used Avast!, yet I'd take any recommendations used.

The following is known:
I had Steamguard on
I had my inventory on private so NO ONE would know I had my items back except for a select few I told
My email has been compromised, the password changed. Password was vastly different from my Steam account.
Steam Support account has been compromised, the password changed. Password was different from both Steam account and email.

I also went and removed several people from my friends list in an attempt to cut it down to people I only commonly dealt with. As for what I did yesterday in regards to Steam;

I spent roughly two hours on TF2, in TF2 Trader Server 1. During said time, I was mainly speaking to Anti-Protest and Longfellow.
I logged onto TF2Outpost via Steam.
I logged onto SteamREP via Steam.

Additional information on keylogger:
Running another scan now on both computers. Will post if any results come up.

Laundering account found:
Proof: http://tf2tp.com/trade.php?trade=5863758
Profile: http://steamcommunity.com/profiles/76561197997229634

Kyzer87 is a listed friend, aka the last launderer found. Likewise, a second friend: http://steamcommunity.com/profiles/76561198018461416

Noticed something odd. New friend was added to my account, I've never met this fellow, ever.

http://steamcommunity.com/profiles/76561198058324214

Was added by the hacker, I presume. Additionally? Zidane is once again on one of the laundering account's friends list. Possible hacker?

Doc, having inventory private isn't enough, since TF2Items will still pick up your items iirc.

Well, my account is once again under my control.

Not sure if this can help at all, but I have the IP of the person who hacked me.

76.167.43.86​

Side note, I need the scammer tag lifted from my profile. Do I need to open up a formal appeal? ​

You are not marked as scammer...

Ah, I see. Earlier tonight it still had me marked as an SR Scammer for reason "Hijacked." I guess someone lifted it without me noticing. My bad.