NEW SCAM/HIJACK PLEASE READ

[josh]

WAY TO SOLVE ISSUE
http://pastebin.com/V2qjF6Xj
THIS VIDEO MADE BY MY FRIEND APPLEHELPER



There is a new scam that hijacks your account that I have recieved 3 times so far. My friends will send me a message saying, "OMG WTF DUDE and a link to a website" under any circumstances NEVER CLICK THIS LINK. IT IS A TROJAN VIRUS THAT WILL HIJACK YOUR STEAM ACCOUNT. Your friend sent it to you because their accounts got hijacked and it is a continious cycle. PLEASE BE AWARE AND SPREAD THIS TO EVERYONE YOU KNOW.

NEW INFO: WEBROOT and NORTON SEEM TO BLOCK THE SITE. PLEASE BE CAUTIOUS

[Space Coward]

Първоначално публикувано от NitroBlivion:

Първоначално публикувано от crunchyfrog:

Simple - because if you don't do it in that order, it's as I've said - remnants or the whole thing will be left.

If you don't run the antimalware, you'll have likely only removed viruses (you'll note this when you run the antimalware AFTER the antivirus that it will normally still remove other stuff, proving this).

If you don't reboot your PC and then scan again, it won't remove anything further, most likely, but the changes won't have "fixed" unless you reboot. So it gives entirely the wrong impression that things are fully dealt with.

And of course, you change your passwords at ANY time before it's all been squarely dealt with, and all you'll do is tell the phisher your new details, rendering all the work useless.

Okay well my primary program is windows defender, but i tried using it and it takes so freaking long. So i downloaded malwarebytes and did a full scan on that, restarted my computer and did another full scan. Is there another anti-virous program that you recommend besides windows defender, since i am rerunning it again and it has been 2 hours and found nothing yet. Also i changed my password on a noninfected computer btw.

In this case, Norton Power Eraser. When you're almost 100% sure that there's a virus deep in your system, use it once to clear your computer. Free of charge on Norton's website (us.norton.com).

[failure face]

Първоначално публикувано от crunchyfrog:

Първоначално публикувано от YourBuddyBill:

Question. I accidentally opened a link to one of these "wtf dude" things, but so far, my inventories haven't been touched. The webpage that had been opened told me that the infected site (some fake screenshot site) DNS lookup failed. What does this mean? Did I somehow not get infected?

Nope, you've been infected. Tip for the future - if you're not sure ALWAYS assume you are.

YOu need to follow these steps if you haven't lost inventory.
(1) Run your antivirus suite's INTENSIVE scan, and let it remove any nasty stuff. When it's finished, download and run Malwarebytes' Antimalware and let that do it's thing too.
(2) When finished, reboot your PC.
(3) Run them both again, and IF they come back with nothing further removed, you can NOW change your passwords. If it still removes anything, repeat from step (2).

You need to follow these steps precisely and in the correct order, otherwise changing your passwords serves NO purpose - you'll still likely be infected.

I'm actually not sure about this one. Information suggests that the site is varying between being up and being down. My friend who got hit told me that his Chrome client visibly downloaded a file, but my own chrome client has not visibly downloaded anything, suggesting that I'm not hit unless they stepped up their game since then. Still scanning, of course.

[failure face]

Just a quick heads up, some folks down on Reddit seem to know more about it than this thread does. http://www.reddit.com/r/Steam/comments/2m4jtr/psa_beware_of_image_links_in_steam_chat/

On that note, while my scan didn't come up with anything downright malicious, I DID find some adware buried in my dad's account on this computer. Scanning ain't exactly a bad idea under any circumstances, eh?

[crunchyfrog]

Първоначално публикувано от YourBuddyBill:

Първоначално публикувано от crunchyfrog:

Nope, you've been infected. Tip for the future - if you're not sure ALWAYS assume you are.

YOu need to follow these steps if you haven't lost inventory.
(1) Run your antivirus suite's INTENSIVE scan, and let it remove any nasty stuff. When it's finished, download and run Malwarebytes' Antimalware and let that do it's thing too.
(2) When finished, reboot your PC.
(3) Run them both again, and IF they come back with nothing further removed, you can NOW change your passwords. If it still removes anything, repeat from step (2).

You need to follow these steps precisely and in the correct order, otherwise changing your passwords serves NO purpose - you'll still likely be infected.

I'm actually not sure about this one. Information suggests that the site is varying between being up and being down. My friend who got hit told me that his Chrome client visibly downloaded a file, but my own chrome client has not visibly downloaded anything, suggesting that I'm not hit unless they stepped up their game since then. Still scanning, of course.

There's a number of online virus scanners that are good, and unless you're going to change your antivirus suite on your PC it is not wose to download another - more than one antivirus suite can be EXTREMELY problematic (they don't tend to play nice together).

But the Norton one as suggested should do the trick.

Just make sure you reboot afterwards, then run it again, and ONLY if that then reports nothing back, shouldl you go about changing your passwords.

Oh and by the way, changing your password of a non-infected machines is usually OK, but as you don't know what level of access the phsiher has NOW, it's best to err on the safe side and change Steam's password and your email password once again once all the procedures have finished.

Final tip -if you're EVER not completely certain that you don't have a virus, ALWAYS assume you have. If you have to spend a bit of time doing scans, you lose nothing. If you assume wrongly and your are infected, then you stand to lose a lot.

[crunchyfrog]

Първоначално публикувано от YourBuddyBill:

Just a quick heads up, some folks down on Reddit seem to know more about it than this thread does. http://www.reddit.com/r/Steam/comments/2m4jtr/psa_beware_of_image_links_in_steam_chat/

On that note, while my scan didn't come up with anything downright malicious, I DID find some adware buried in my dad's account on this computer. Scanning ain't exactly a bad idea under any circumstances, eh?

Yes, the Reddit thread was apparentl very on the ball with this some days ago - they've apparently tracked down the originator too. I don't personally go to Reddit - without any offence it's a bit, well, "young" for me.

And you hit the nail on the head with your final paragraph there - scanning NEVER hurts. It should be done regularly as a matter of course. I'm careful where I go browsing the web, but even so the odd bit of adware can creep through, and even though they might not be as dangerous as stealing info, they can still bugger about with performance. There's also a Bitcoin mining malware that's going around at the moment too - really saps your resources.

[ezwip]

I've never heard anyone refer to reddit as for young before. Maybe you are confusing them with something else. I can't even say what that is because the word is censored.

[Napoleon Bonerfart]

I have found a way to fix the problem if interested message me and ill tell you i too was a victim of this new virus

[Plaid]

Първоначално публикувано от Antivirus Dude:

I have found a way to fix the problem if interested message me and ill tell you i too was a victim of this new virus

Yeah, this doesn't sound suspicious at all, lol. :D

[Hûvy]

I was stupid and clicked the link. Although everything is fine,it still sent the spam links, but the 2 people who did click it before i could warn them are also fine. I changed passwords and everything. Do you think steam have gotten to the problem? The spam bots are still a problem though.

[5-Knuckle Zimbabwe]

Първоначално публикувано от crunchyfrog:

Първоначално публикувано от NitroBlivion:

Okay i am redoing it this time but in your order. But why this method? If you use alot of scans and full scans then apply extra protection for spybots, and also restaert your computer. Whats the harm? Not trying to start an argument, just trying to understand why can't use more then one method. But thanks for telling everyone a safe method by the way!

Simple - because if you don't do it in that order, it's as I've said - remnants or the whole thing will be left.

If you don't run the antimalware, you'll have likely only removed viruses (you'll note this when you run the antimalware AFTER the antivirus that it will normally still remove other stuff, proving this).

If you don't reboot your PC and then scan again, it won't remove anything further, most likely, but the changes won't have "fixed" unless you reboot. So it gives entirely the wrong impression that things are fully dealt with.

And of course, you change your passwords at ANY time before it's all been squarely dealt with, and all you'll do is tell the phisher your new details, rendering all the work useless.

Okay well i redid the method that you told everyone to do.

Yesterday/Todays Steps
1)Full scaned pc with norton
2)Restarted my pc
3)Did a full threat scan with malwarebytes
4)Also for extra measures i changed my steam password on a noninfected pc again
5)Everything should be fixed if i'm right but norton does have another thing that is completely free that also scans for threats, i just don't know if i should use it.

Day Before Yesterday Steps I Did
1)I full threat scanned using malwarebytes
2)Restarted my computer
3)Did another malwarebytes scanned
4)Changed my steam password 3 times on a non-infected computer
5)Installed spybots and did all the steps on that program, it ended up finding cookies so i blocked them.

[Space Coward]

Първоначално публикувано от ^0B^3u^0m^3b^0l^3e ^0B^3e^0e:

Why the name, OP?

[crunchyfrog]

Първоначално публикувано от Kill-Cam Celebrity:

Първоначално публикувано от ^0B^3u^0m^3b^0l^3e ^0B^3e^0e:

Why the name, OP?

I think it's meant to be control codes to spell "Bumble Bee" in special text or colours or something. He probably used it in the past and it stuck.

I still remember my control codes from my BBC Micro off the top of my head.

[5-Knuckle Zimbabwe]

Is my computer safe yet?

[crunchyfrog]

Първоначално публикувано от NitroBlivion:

Is my computer safe yet?

How long's a piece of string?

Depends entirely what you mean by that, and what you've done

[josh]

Първоначално публикувано от crunchyfrog:

Първоначално публикувано от Kill-Cam Celebrity:

Why the name, OP?

I think it's meant to be control codes to spell "Bumble Bee" in special text or colours or something. He probably used it in the past and it stuck.

I still remember my control codes from my BBC Micro off the top of my head.

Correct my dear friend! The colors still work in Call of Duty Modern Warfare 2 so I was having a bit of fun!:)