Njgrizzly Posted April 25, 2015 Share Posted April 25, 2015 (edited) Earlier, I needed help setting up the mirror client, and Elena told me to download Teamviewer. We got into a Teamviewer Session, and all I see is something that says 'File/Data Transfer" and Elena quickly gets rid of that box, and I was like "huh?" Then I get a Trojan warning, and I immediately end the session. I then run Malware Bytes..... https://gyazo.com/575bba8188e3e07f568a737ca19f67c0 DO NOT trust ElenaQueen with ANYTHING. Thanks to my girlfriend, my computer is totally safe now, and I changed my passwords. ElenaQueen will likely make another account, but he paid for VIP and possibly a couple scripts, so at least those are wasted if he can't be trusted in trades,etc. Edit: Elenaqueen has changed name to h8erswillh8 Edited April 26, 2015 by Njgrizzly 2 Link to comment Share on other sites More sharing options...
Kami Posted April 25, 2015 Share Posted April 25, 2015 You should file a dispute with more evidence such as skype chat logs Link to comment Share on other sites More sharing options...
Orange Posted April 26, 2015 Share Posted April 26, 2015 Hopefully this scum bag gets 'd 1 Link to comment Share on other sites More sharing options...
Njgrizzly Posted April 26, 2015 Author Share Posted April 26, 2015 I unfortunately did not even get on Skype with him; and I didn't record the TeamViewer Session, so this is kind of all I can do right now... As the file sharing page or whatever popped up in Teamviewer, he did something really quickly and it disappeared, and all of this happened... Link to comment Share on other sites More sharing options...
Zebrafon Posted April 26, 2015 Share Posted April 26, 2015 If you can't setup mirror client by yourself I don't know what to tell you. There's literally a video guide about it with easy steps to follow. 1 Link to comment Share on other sites More sharing options...
Qubit Posted April 26, 2015 Share Posted April 26, 2015 (edited) TV is only file transfer thus the user can only add files or remove files from your computer. It's probably too late but what I would have advised or what i would advise for other people if this is to happen to you. Look at your desktop icons and find what programs they open. From a "friend I know" a tactic is to add an FUD exe to the computer and change the destination of something like a chrome icon on the desktop to open that exe.... If you know your executable is safe follow the rest of the instructions Download adware cleaner, emsisoftemergencykit, hitmanpro,malwarebytes, and tdsskiller. These are great for removing viruses and specifically RATS. Make sure you scan as much of your computer as you can. Stay up to date with your antivirus programs. FUD exe are bound to be detected after a certain amount of time. If your lucky the host will be lazy and wont update their exe and through time your antivirus software will detect it and remove it. Edited April 26, 2015 by javant Link to comment Share on other sites More sharing options...
Njgrizzly Posted April 26, 2015 Author Share Posted April 26, 2015 Thanks for the info, Javant- will do! Zebra, the Mirror Client thing happened really quickly, because I Haven't been on osbot in over a year, and someone told me about it, so I bought it, and tried to boot it up quickly... I also do not see the point in your post. Link to comment Share on other sites More sharing options...
Qubit Posted April 26, 2015 Share Posted April 26, 2015 If this were to happen to me. I would open up wireshark look for open ports. Find that douchebags dns. Call the dns back for the ip that user is using. Call them up report the issue to authorities. If they are using a vpn I would call the service provider up threatening them a lawsuit , get the logs report to authorities Link to comment Share on other sites More sharing options...
Superman_ Posted April 26, 2015 Share Posted April 26, 2015 thats sad Link to comment Share on other sites More sharing options...
Rhodry Posted April 26, 2015 Share Posted April 26, 2015 elena sounds scary Link to comment Share on other sites More sharing options...
Fade Posted April 26, 2015 Share Posted April 26, 2015 Open a dipute on her Link to comment Share on other sites More sharing options...
crazykid199 Posted April 26, 2015 Share Posted April 26, 2015 DAMN YO CAN A MOD BAN THIS BITCH Link to comment Share on other sites More sharing options...
Njgrizzly Posted April 26, 2015 Author Share Posted April 26, 2015 Javant, if I knew how to do that, that's the FIRST thing I'd do. Link to comment Share on other sites More sharing options...
Xerion Posted April 26, 2015 Share Posted April 26, 2015 The folder created created "dclogs" in "C:\Users\Adam\AppData\Roaming" is used by a RAT that is pretty common. The only thing that I can say is that you were ratted. If I were you I would still manually check the registery. People encrypt their RAT most of the time and don't think that Malwarebytes has detected the encrypted file. That file could still execute if the reboot your pc. 1 Link to comment Share on other sites More sharing options...
h8erswillh8 Posted April 26, 2015 Share Posted April 26, 2015 lmao this is ridiclous, this guy right here needed help to open hes "osbot" and then i laughed abit and said how can you not be able to open osbot? he had no idea what the issue was so i tried to find a solution when he could not fix it, i asked if he has a teamviewer. so i went on the teamviewer searched for "jdk 8" on his "yahoo searchbar" if you want proof ask him for hes download logs on hes google chrome. i downloaded the file officaly from http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html. i even asked him which "bit" he had on hes pc, he had no idea and said "i usually use 64" so i downloaded the 64 bit and after that i open up his bot which was sucsesfully then he says "oh my mirror client is the issue" i said hold on i can try fix that one aswell (was busy because i was buying gold) and he said "i brb" and he asked me how to exit teamviewer, so i told him right click and exit lol. after that he went viral and said hes "antivirus" popped up and said there was a virus. after this for like 5 hours he been talking trash. Link to comment Share on other sites More sharing options...
