Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Tuesday, January 25th, 2022, 12:05 AM
(This post was last modified: Tuesday, January 25th, 2022, 12:37 AM by HeroesBoss.)
Hello just passing some information
that my email has been hacked and I believe might someone from IA is Bad people
because yesterday I was playing the game and one moment showed blue screen I did press ctrl alt delete to open straight away services to check what is going on .. because my computer is pretty good back in the day 0 problem with the game...
then I just saw PowerShell was in running host by that I was come to true that some else might take out some information from me
So basically I am saying I am not come back to play until Spadie not make better chat engine because 6667 port is trojans viruses and most of scammers are using it to steal people bank accounts, emails, private information basically example like even in my YouTube account was some random videos posted by some one who hacked me …
so far I see spadie use 6667 port not care at all , l2walker hosts from scammer not care at all
so far I see that spadie is scam people I can't say anything more than this... he just not care about anything what I am saying...
that's all what I see so far
probably spadie not make any changes for chat engine so probably I am going afk for a long long long time
if you ever had the same issue like me please check this out https://ibb.co/k21P8YY
That's how to be done proper windows installation to clean it out read it more about disk part to trust me
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Tuesday, January 25th, 2022, 01:41 AM
What did you convert your partition from GPT to MBR?
https://docs.microsoft.com/en-us/windows...windows-11
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Tuesday, January 25th, 2022, 06:50 AM
(This post was last modified: Tuesday, January 25th, 2022, 08:48 AM by HeroesBoss.)
(Tuesday, January 25th, 2022, 01:41 AM)Spadie Wrote: What did you convert your partition from GPT to MBR?
https://docs.microsoft.com/en-us/windows...windows-11 No just also clean it out as you can see in the photo before I did clean it and then convert it back to MBR the local drive so it are almost like brand new but not 100% empty.
it's give you like brand new local drive so you not have previous windows and maybe some trojan and viruses..
Event Viewer also is a great way to check what is going on with your local drive and if I found the the viruses what IRC Chat blocks in there or anything from l2walker please delete the game forever and never turn it back online
it depend what type of trojan is it if it's active on Bios then the best way is take out Bios Battery for like 10 minutes so the attacker got disconnect from the server and then you can try install brand new Bios to your computer also
So Basically I was true some one was connected to my computer Bios Because most of people think put new windows and you ready to go free from attacker.. but most of people not realize that bios is bios you can put how many version of windows want it to but the trojan still active in the Bios infected
Posts: 489
Threads: 42
Joined: May 2020
Reputation:
20
Tuesday, January 25th, 2022, 11:09 AM
Stay afk forever, bitch.
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Tuesday, January 25th, 2022, 01:03 PM
(This post was last modified: Thursday, January 27th, 2022, 07:35 PM by HeroesBoss.)
(Tuesday, January 25th, 2022, 11:09 AM)Dexter Wrote: Stay afk forever, bitch. 1.you have serious problem ..
2.you reply me on IRC Chat the same way like now ..
3.also nobody said to you to reply on my chat just do your stuff but seems you like to call people bad words
4.please stop act like you own this game is for everybody and the only one person who would can blame it's only your self
5.check from positive side it's your fault nobody telling you anything and you ban people for it
6.if you can't control your self please just don't read my chat or don't respond to my reply it's a lot easier
7.you know it will happening always because you reply and then ban me just because of your struggle...
8.every time you start the first call me on a bad words act like you own the game then you start struggle on reply to me and ban me
9.which is only your fault not mine
Posts: 489
Threads: 42
Joined: May 2020
Reputation:
20
Tuesday, January 25th, 2022, 01:51 PM
you said you are gone, so fuck off already, stop coming back you attention whore
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Tuesday, January 25th, 2022, 02:00 PM
(This post was last modified: Tuesday, January 25th, 2022, 02:33 PM by HeroesBoss.)
(Tuesday, January 25th, 2022, 01:51 PM)Dexter Wrote: you said you are gone, so fuck off already, stop coming back you attention whore are you scared or what ?
here what is come up is only from 1 file and from almost all antiviruses in the world scaned https://ibb.co/7b72G3M
or this photo even better https://ibb.co/cJjT13j
just allow it on firewall haha it's from irc chat
Posts: 489
Threads: 42
Joined: May 2020
Reputation:
20
Tuesday, January 25th, 2022, 02:45 PM
nobody gives a shit about you and your fakeass claims, jump under a train. bitch
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Tuesday, January 25th, 2022, 02:55 PM
(This post was last modified: Tuesday, January 25th, 2022, 03:10 PM by HeroesBoss.)
(Tuesday, January 25th, 2022, 02:45 PM)Dexter Wrote: nobody gives a shit about you and your fakeass claims, jump under a train. bitch here something better even basically you guys are something doing bad I just feel it so yeah https://ibb.co/RBBxRNV
I will try to found what exactly doing it maybe is just connection simple to download the files from cmd
Posts: 489
Threads: 42
Joined: May 2020
Reputation:
20
Tuesday, January 25th, 2022, 03:00 PM
all you do is make shit up, so embarassing
Posts: 104
Threads: 10
Joined: Jul 2021
Reputation:
1
Tuesday, January 25th, 2022, 03:14 PM
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Tuesday, January 25th, 2022, 03:45 PM
(This post was last modified: Tuesday, January 25th, 2022, 04:12 PM by HeroesBoss.)
(Tuesday, January 25th, 2022, 03:14 PM)Edvard Wrote: Heroes --> https://www.youtube.com/watch?v=9Deg7Vrp...ioletDirge
Thank you Check this out lol https://ibb.co/M75X204
do you understand what I am saying ? pretty sure not
if antivirus says it's dangerous then it is dangerous 51 out of 71 is infected with viruses and trojans
it's also your personal information safety I don't think so you want someone hack your bank details or something like that
Posts: 489
Threads: 42
Joined: May 2020
Reputation:
20
Tuesday, January 25th, 2022, 04:25 PM
hack me, I dare you.
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Tuesday, January 25th, 2022, 04:36 PM
(This post was last modified: Tuesday, January 25th, 2022, 05:45 PM by HeroesBoss.)
(Tuesday, January 25th, 2022, 03:00 PM)Dexter Wrote: all you do is make shit up, so embarassing alright I we're seen what inside the IA chat exe was and also the \SOFTWARE\Microsoft\Windows\CurrentVersion\Run\'
basically I was really true that 6667 port is bad
thanks to Florian Roth I am not sure who is it but I seen a lot
btw I am not hacking people I am looking for my safety only …
some how my mind changes before I do enjoy the game like a lot but when you see what is going on pretty bad feeling lol
is not that bad just need change some better chat engine because port 6667 basically can control all your computer +/-
I don't want to be so rude and post the images in here …. but have to think about it maybe some better chat engine something
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Tuesday, January 25th, 2022, 06:52 PM
Port 6667 is the destination port connect to IRC, the GameSurge's IRC server.
Posts: 160
Threads: 25
Joined: Jun 2020
Tuesday, January 25th, 2022, 10:17 PM
(This post was last modified: Tuesday, January 25th, 2022, 10:22 PM by Anisoropos.)
(Tuesday, January 25th, 2022, 02:00 PM)HeroesBoss Wrote: here what is come up is only from 1 file and from almost all antiviruses in the world scaned https://ibb.co/7b72G3M
or this photo even better https://ibb.co/cJjT13j
just allow it on firewall haha it's from irc chat stop watching horse porn .
also
https://ibb.co/9yzDNyb
(Tuesday, January 25th, 2022, 03:45 PM)HeroesBoss Wrote: it's also your personal information safety I don't think so you want someone hack your bank details or something like that even if i send you my cc card info's you still need 2 step verification
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Tuesday, January 25th, 2022, 11:05 PM
Port 6667 is not a bad port, it is the default IRC port.
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Wednesday, January 26th, 2022, 02:31 AM
(This post was last modified: Wednesday, January 26th, 2022, 03:38 AM by HeroesBoss.)
(Tuesday, January 25th, 2022, 11:05 PM)Spadie Wrote: Port 6667 is not a bad port, it is the default IRC port. do really need to post like 10 images what inside into it ? in the actually irc chat client .. not on the port 6667 but ia chat client
I don't post the images in here but see this one https://github.com/redcanaryco/atomic-re...547.001.md
Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
tags:
- attack. Persistence
- attack.t1547.001
- attack.t1060 # an old one
date: 2019/10/25
modified: 2021/11/26
I am just saying why would you not make clean and safe chat but still want it to stick to the 6667 port and irc chat client?
why would also you not make game run without the irc chat ? and who want it can open the irc chat like old time remember it ?
and maybe change irc coin back to bloody coin something like that ?
I think it's absolutely free to ask questions like that ..
because you are developer of Illicit Awakening
and yes again the Irc chat also runs on the start up
something is going on with the irc coin I believe it
the fact is I am looking for my safety only ..
if you are not tricking users then please look something better about the chat client
Because if you are not then some other could do it and it's against the rule
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Wednesday, January 26th, 2022, 02:35 AM
What is in side of it?
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Wednesday, January 26th, 2022, 03:51 AM
(This post was last modified: Wednesday, January 26th, 2022, 04:31 AM by HeroesBoss.)
(Tuesday, January 25th, 2022, 10:17 PM)Anisoropos Wrote: (Tuesday, January 25th, 2022, 02:00 PM)HeroesBoss Wrote: here what is come up is only from 1 file and from almost all antiviruses in the world scaned https://ibb.co/7b72G3M
or this photo even better https://ibb.co/cJjT13j
just allow it on firewall haha it's from irc chat stop watching horse porn .
also
https://ibb.co/9yzDNyb
(Tuesday, January 25th, 2022, 03:45 PM)HeroesBoss Wrote: it's also your personal information safety I don't think so you want someone hack your bank details or something like that even if i send you my cc card info's you still need 2 step verification I am not saying you anything just read my links all of them to understand what I am saying and there are professionals who have the knowledge about trojans viruses and security
special this one https://github.com/redcanaryco/atomic-re...547.001.md
now you understand me I never be 100% true if the client is safe.
because antivirus block it on level: high it mean something going on example like this
only some of the files from the ia chat client but on the medium is more to check also like remote access and lot of more fun stuff
logsource:
category: registry_event
product: windows
detection:
selection:
Image|contains:
- '\Downloads\'
- '\Temporary Internet Files\Content.Outlook\'
- '\Local Settings\Temporary Internet Files\'
TargetObject|contains: '\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\'
condition: selection
falsepositives:
- Software installers downloaded and used by users
level: high
I got also reference so I know what is going on to be honest +/- https://ibb.co/P9bsLTG
I was also true about bitcoin lol but I am not sure yet if it's from spadie or the 6667 port game surge
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Wednesday, January 26th, 2022, 05:43 AM
Adding a registry key is not "remote access".
Plus we have been using IRC on port 6667 for over 10 years, it is used for chat, not bitcoin.
We are not going to remove chat.
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Wednesday, January 26th, 2022, 07:26 AM
(This post was last modified: Wednesday, January 26th, 2022, 02:38 PM by HeroesBoss.)
(Wednesday, January 26th, 2022, 05:43 AM)Spadie Wrote: Adding a registry key is not "remote access".
Plus we have been using IRC on port 6667 for over 10 years, it is used for chat, not bitcoin.
We are not going to remove chat. This is one of reason why you won't it to … keep doing it more 10 years have fun lol https://www.picussecurity.com/resource/b...tup-folder
HKEY_CURRENT_USER (HKCU): It is a root key that includes preferences and settings that are specific to the currently logged-in user. HKCU is loaded on login of the user, while HKLM is loaded at boot time. and some how the chat.exe is shows also on logon https://ibb.co/HzpsF1v so keep doing what you are doing
Sorry Spadie but I am trust more on Microsoft Windows professionals it's not anymore simple windows defender scan what I am using it's pretty popular Called Autoruns
it's scan every single file even it's set on backup codes to hide trojans and viruses
check like this guy is showing some master skills https://www.youtube.com/watch?v=HVigruKph74 I believe you do the same +/- that why my CPU was little bit to much on the %
also when you install the game anti not block the IA_chat.exe .. but until you open the game and run some time then it's gets infected
and then it's only shows it's trojan file because of it get infection in people computer make sense a lot at least to me
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Wednesday, January 26th, 2022, 02:53 PM
iA chat will block people from cheating in the game, if iA chat finds trying to use cheat software it will close l2 game client to stop you from cheating. iA chat has to connect to the l2 game, plus check the system. It is not an "infection" is the iA chat connecting to the l2 game client and checking for cheaters. The "trojan" is just 1 program that can access another. In this case you use cheat program for l2 game client, iA chat will find it and close the l2 game client.
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Wednesday, January 26th, 2022, 05:32 PM
(This post was last modified: Wednesday, January 26th, 2022, 06:30 PM by HeroesBoss.)
(Wednesday, January 26th, 2022, 02:53 PM)Spadie Wrote: iA chat will block people from cheating in the game, if iA chat finds trying to use cheat software it will close l2 game client to stop you from cheating. iA chat has to connect to the l2 game, plus check the system. It is not an "infection" is the iA chat connecting to the l2 game client and checking for cheaters. The "trojan" is just 1 program that can access another. In this case you use cheat program for l2 game client, iA chat will find it and close the l2 game client. $ <-- is PowerShell and all language scripts included and some how I did saw it 2 days ago some blue screen and PowerShell was Run when playing the game that's why i am blame you spadie lol because it happen when I played the game …
and now someone send me Batch file to warm up my processor who ever doing it stop doing that it's easy to connect from local and shutdown other computer just get simple IP and it's not a talent
Posts: 37
Threads: 6
Joined: May 2020
Reputation:
4
Wednesday, January 26th, 2022, 05:56 PM
It is funny claiming you are boss on computers but you got hacked by someone else. L O L
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Wednesday, January 26th, 2022, 06:27 PM
(This post was last modified: Wednesday, January 26th, 2022, 06:42 PM by HeroesBoss.)
(Wednesday, January 26th, 2022, 05:56 PM)Ostro Wrote: It is funny claiming you are boss on computers but you got hacked by someone else. L O L WHO did say I am boss on computer?
but I did say I am looking just for my safety
but to be true safety is hard people is fighting for it everyday tons of websites got hacked everyday the same tons of people get trojans and viruses almost it everyday.. like I say trojan can be installed inside in system root like it's original windows Microsoft file
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Wednesday, January 26th, 2022, 06:41 PM
Heroes, just because something on your PC happens while you play the game, does not mean it is related to iA or the game. Plus iA chat and the game does not even use the PowerShell. Also, PowerShell was added in Windows 7 and iA chat and the game client runs on 2000/XP/Vista.
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Wednesday, January 26th, 2022, 06:47 PM
(This post was last modified: Wednesday, January 26th, 2022, 06:56 PM by HeroesBoss.)
(Wednesday, January 26th, 2022, 06:41 PM)Spadie Wrote: Heroes, just because something on your PC happens while you play the game, does not mean it is related to iA or the game. Plus iA chat and the game does not even use the PowerShell. Also, PowerShell was added in Windows 7 and iA chat and the game client runs on 2000/XP/Vista. yy whatever but information did you collect ? because the CLSID FILE is going back to you most likely because it's $ plus on $image with mean record something if I am right https://ibb.co/P9bsLTG
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Wednesday, January 26th, 2022, 06:59 PM
The game monitors for cheats and will close the l2 client if found.
iA chat also has a sleeper function to make the game run slower, it uses direct access to the cpu to make the game run slower, this is so the game will use less CPU when you are AFK botting.
Plus virus scanners don't "detect" any virus provide guidance based on a review of the file with their database.
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Wednesday, January 26th, 2022, 07:48 PM
(This post was last modified: Wednesday, January 26th, 2022, 07:50 PM by HeroesBoss.)
(Wednesday, January 26th, 2022, 06:59 PM)Spadie Wrote: The game monitors for cheats and will close the l2 client if found.
iA chat also has a sleeper function to make the game run slower, it uses direct access to the cpu to make the game run slower, this is so the game will use less CPU when you are AFK botting.
Plus virus scanners don't "detect" any virus provide guidance based on a review of the file with their database. hmm I just throw the chat client in Autoruns by Microsoft docs and there something interesting is going on …
also I did use tool like https://app.any.run/
It's one of most powerful malware checker and I just delete some registry keys out from my computer hope it will be better gaming if not then my computer is really bad
I am fine I do trust on you but it's me I am still just doing it on my way and knowledge as you can see the USA IS FULL RED FULL TROJANS HAH
Posts: 55
Threads: 10
Joined: Jul 2020
Reputation:
0
Friday, January 28th, 2022, 02:52 PM
Spadie stop mining bitcoin with iachat
Posts: 59
Threads: 8
Joined: Jun 2020
Reputation:
1
Friday, January 28th, 2022, 03:45 PM
(Friday, January 28th, 2022, 02:52 PM)sokolovas Wrote: Spadie stop mining bitcoin with iachat lol iaChat miner how much it cost spadie ? make for me also one
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Friday, January 28th, 2022, 10:51 PM
We do not mine any coins.
Posts: 55
Threads: 10
Joined: Jul 2020
Reputation:
0
Saturday, January 29th, 2022, 06:30 AM
Only from Heroes
Posts: 1,566
Threads: 352
Joined: May 2020
Reputation:
45
Saturday, January 29th, 2022, 05:37 PM
If heroes has anymore PC issues he can ask BettyBoop for help with PC issues.
|