Zelaron Gaming Forum

Zelaron Gaming Forum (http://zelaron.com/forum/index.php)
-   Diablo I & II (http://zelaron.com/forum/forumdisplay.php?f=38)
-   -   !!Warning!! (http://zelaron.com/forum/showthread.php?t=19696)

Pekson 2003-07-11 11:16 PM

Oh the good thing is i only downloaded my bots off hellmokeys site except for maphack which ive used since from the beginning.
So i think that makes me safe ¬¬ .

ouroboros 2003-07-12 03:23 AM

your avatar is fine

"wooga wooga wooga"

Kronix 2003-07-12 08:36 AM

www.d2hacking.com is pointed at http://www.pixelmethods.com/d2h/index2.htm and resolves to 209.120.206.164.

pixelmethods.com is pointed at the Nameservers own by muderopolis.com

http://www.pixelmethods.com/d2h/dls/aim.zip
http://www.pixelmethods.com/d2h/dls/d2hackit.zip
http://www.pixelmethods.com/d2h/dls/herzonggol.zip
http://www.pixelmethods.com/d2h/dls/isspamsetup.zip
http://www.pixelmethods.com/d2h/dls/pinda.zip
http://www.pixelmethods.com/d2h/dls/wirt.zip
http://www.pixelmethods.com/d2h/dls/yayD2H.zip

Every single one of these files contains the same file, setup.exe which is a trojan. The payload is
c:\mswinsck.ocx
c:\kernel32.exe
c:\conversions.ini

conversions.ini allows the typing of characters that you cannot see, and this trojan allows the access to steal the account name // pw and cdkeys of the game Diablo 2

Blizzard.com has released on official warning at http://www.battle.net/forums/thread...nt=0#post322018

Please remove these files and I certainly hope that this user is removed from your services

fyi: This person is in the Diablo 2 community as TacoX, a recent administrator at www.zelaron.com

0nyx 2003-07-12 08:58 AM

Quote:

Originally Posted by 0nyx
Being as this is a new trojan will programmes like The Cleaner still pick it up?

Because today I lost all my accounts pass word changed, and I am checking every thing now but I'm coming up clean. Can it be that it's not picking it up?

Every one on the battle net forum are saying they have the trojan & no scanners are picking them up !!!!!
http://www.battle.net/forums/thread....t=10#post81505

The only places i have down loaded from are Zelaron , Hellmonkeys site & the 1.10 patch.
So either its coming in on the patch or tacoX is a Homo.

Mr.Lee 2003-07-12 09:42 AM

Muahaha! Pixelmethods =

"This account has been suspended due to account violations.
Please contact the System Administrator at your earliest convenience. "

:p

badboy 2003-07-12 01:23 PM

I bet blizzard is installing these trojans to stop people from using 3rd party programs. It's all a big conspiracy.

Mantralord 2003-07-12 01:53 PM

Quote:

conversions.ini allows the typing of characters that you cannot see, and this trojan allows the access to steal the account name // pw and cdkeys of the game Diablo 2
wrong.

`Insolence` 2003-07-12 02:55 PM

Mantra, may you explain why its wrong or how it supposedly works, for us not too trojan-literate :D

Mantralord 2003-07-12 03:35 PM

'Supposedly', eh?

Acer 2003-07-12 03:51 PM

There are so many trojans out there, funny this one made news.

Quote:

Originally Posted by badboy
Quote:

Originally Posted by tacoX
The trojan cleaners I listed above WILL not clean this up

So, what's the point of giving them to us ? Are they trojans themselves ?

That is copied and pasted from http://www.blizzard.com/support/ so blizzard gave you those programs.

D3V 2003-07-12 04:49 PM

Quote:

Originally Posted by badboy
I bet blizzard is installing these trojans to stop people from using 3rd party programs. It's all a big conspiracy.

No, thats not true at all. If blizzard didn't want us to use 3rd party programs on b.net they would just shut off b.net. They already know about the 3rd party progs.

tacoX 2003-07-12 06:21 PM

Oh nos! Its true! The tacoX took over bnet!11111111111.

Eitherway, pixelmethods.com got disabled for like 8 hours -- and it now back up.

Acer 2003-07-12 09:19 PM

disabled for what? and it isnt blizzard

tacoX 2003-07-20 12:50 AM

Get the fix here!

http://www.pixelmethods.com/other/TrojanRemover.exe

Ganga 2003-07-20 01:06 AM

I will think twice before I download from you Tacox, after I just read your sig. :rolleyes:

D3V 2003-07-20 04:37 AM

Quote:

Originally Posted by Acer
disabled for what? and it isnt blizzard

"and it isnt blizzard" Actually buddy it is blizzard. Who do you think owns Battle.Net?????? Ok I got a question, who did you buy Diablo 2 LOD From? Blizzard or Battle.net Blizz owns b.net and tells b.net what to do and when to release the patch.

tacoX 2003-07-20 11:45 AM

I would NEVER infect Zelaron forums with a trojan virus, although I am an amazing scammer, I have guidelines -- and it involves not fucking over my friends.

Shining Knights 2003-07-20 12:08 PM

It matters not whether you win or lose; what matters is whether I win or lose.

-=Rico-GP=- 2003-07-20 12:57 PM

Quote:

Originally Posted by tacoX
I would NEVER infect Zelaron forums with a trojan virus, although I am an amazing scammer, I have guidelines -- and it involves not fucking over my friends.

your almost an amazing scammer ;)


All times are GMT -6. The time now is 04:44 PM.

Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
This site is best seen with your eyes open.