New steam hack going around

[angel]

This is just a warning a hack is going around, it infects your steam when you click a link called screen lighting .com. Then it sends all your friends links to infect their steam, just a warning be careful of links.

[аdvicebanana]

There are loads of those. These are fake image hosters I got. I removed the TLDs.

easyscreen-shot
fastimg
imagehack
imgur (not imgur.com but a fake one)
imgurdownload
imgur-life
lightscreen
lightscreen-shot
light-shot
Lightshot
momentscreen
picture
picture-hoster
pixtr
printscr
printscrn
prnrtscr
prnscr
prntrscr
prntscr
s3s
saveimage
savepic
saveplc
screen4you
screen-hoster
screen-lighting
savepic
screen-hoster

[angel]

Very odd I, i got one sent to me but i didnt click it i searched up screen-lighting.com first on google nothing came up thats how i knew the one sent to me was fake

[TeKraken]

Then don't click links.

[Nuclear Toast]

i have gotten 4 of these in the past 20 minutes

[Ryle]

I just made a thread about this actually.
It spams itself to all of your friends, and it trades all of your items to "You is LOOZER"
I lost all of my items to this virus and ended up infecting 2-4 of my friends. I made a ticket and sent it to Steam with a screenshot of my trade history showing me sending all of my items to You is LOOZER.

[Robot]

EDIT: ITEMS ARE BEING SENT TO THIS ACCOUNT IT MAY NOT BE THE ONLY ONE THOUGH: http://steamcommunity.com/profiles/*REMOVED*/inventory/#570


Ive posted this on a few other fourms and so hopfuly this can help some people before its too late, if you lost items head steam support with infor on who and when.

I too had downloaded the file and managed to get rid of it before it send messages. A few of my friends weren’t so lucky. After opening the virus I panicked and ended my explorer process which I don’t know if it stopped, delayed or did anything to the virus...


IMPORTANT, what I know of this:
- The file appears to be a windows screen saver file but of course isn’t, it is a script file of some sort, you can tell if your internet browser asks you to download it and it will give the real file type.

- THE PROGRAM RUNS IN THE BACKGROUND, use task explorer and try to spot any processes that look similar to the file name you have opened, worst comes to worst and it has renamed its self (not sure if it does or not) but end all processes and the main windows ones will restart automatically.



BASICS FOR TRYING TO SAVE YOURSELF
- Delete the file, end process, check to make sure firewalls are still up, run a whole computer scan for any dodgy files and go into "msconfig" to make sure no random applications are opening on startup.

- If you do send this virus around or know of a friend doing so, WARN PEOPLE, tell anyone and everyone about this and not to open any odd looking links and send them to this discussion page.

- Change your steam password and lock your account*!!! Do this by going into settings, account and then go into "Manage Steam guard and account security" and deauthorise all devices.

**THIS WILL STOP YOUR ACCOUNT FROM TRADING FOR 7 DAYS AND WILL REQUIRE A STEAM CODE TO LOG ON FROM ALL OTHER DEVICES WHICH WILL BE SENT BY EMAIL.



That is all I have to say for now, good luck for everyone.

[Kusoikore]

Well i just checked the guy accounts (the hijacker) he have about 1,000 items, and 600 global offensive items... he got many people.

[Robot]

Originally posted by I'm a parrot:

Well i just checked the guy accounts (the hijacker) he have about 1,000 items, and 600 global offensive items... he got many people.

This guy wouldnt happen to be called "You is LOOZER" would he? Otherwise we gotta collect ALL names to make sure these accounts get shut down.

[Kusoikore]

Yeah, he is called You is LOOZER. i don't think he have any alts... sadly.

[Robot]

Originally posted by I'm a parrot:

Yeah, he is called You is LOOZER. i don't think he have any alts... sadly.

Yeah, best we can so is mass report him and head to steam community before he sells most of the items.

His account: http://steamcommunity.com/profiles/*REMOVED*/inventory/#570

[Kusoikore]

Pretty sad, i got fooled on it, but i closed it really quickly, and it didnt worked on me.

[Robot]

Originally posted by I'm a parrot:

Pretty sad, i got fooled on it, but i closed it really quickly, and it didnt worked on me.

Most of my friends fell for it but got lucky... Best thing to do is head to steam support and give them the date, time if possible when you lost your items and any/all details about this guy. and hopefuly you'll get you stuff back. :\