Official Everybody Edits Forums

Do you think I could just leave this part blank and it'd be okay? We're just going to replace the whole thing with a header image anyway, right?

You are not logged in.

#26 2016-08-03 10:57:24

Schlog
Member
Joined: 2015-07-21
Posts: 1,957

Re: I got hacked...

MartenM2 wrote:
Ninja wrote:

welp
better get a new hard drive

Easier sayd than done ;-;

reinstall windows entirely

Offline

Wooted by:

#27 2016-08-03 10:58:12, last edited by MartenM2 (2016-08-03 11:05:54)

MartenM2
Member
Joined: 2016-08-02
Posts: 14

Re: I got hacked...

Ninja wrote:

reinstall windows entirely

Was already thinking about that. Need to make a bootable win 10 usb first than ._.

EDIT: Noted that all my worlds have been cleared.

Offline

#28 2016-08-03 11:24:31

capasha
Member
Joined: 2015-02-21
Posts: 4,066

Re: I got hacked...

So I have looked through the RAT. This is all I know should work. It doesn't get removed even if you kill the process.
It will save the file in registry scheduler, so just killing the process doesn't work.


Use this at your own risk.

The file is going to be added to schtasks
Which mean it will always start how many times you are going to kill the process.

Go to, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pluginupdate.exe
Remove that line.

Download Process Explorer. Find a process that is named pluginupdate.exe.
Kill the process.

C:\Users\<YourUsername>\AppData\Local\Temp\EESnakeBot.exe < Remove
C:\Users\<YourUsername>\AppData\Local\Temp\PlayerIOClient.dll < Remove
C:\Users\<YourUsername>\AppData\Local\Temp\SnakeBotUpdater.exe < Remove
%appdata%\Plugin Update\pluginupdate.exe < Remove (If in use, kill the process pluginupdate.exe)

The best way to remove the RAT is to run your computer in safe mode without internet.
I don't know if the tool is going to add more files. But these is what I found.

Offline

#29 2016-08-03 11:28:39

MartenM2
Member
Joined: 2016-08-02
Posts: 14

Re: I got hacked...

Already found the that plugin thing. I deleted it and killed the process. After that I did a system recovery. Ill try this I think.

Offline

#30 2016-08-03 11:36:42

Blackmask
Member
From: France
Joined: 2016-06-27
Posts: 199

Re: I got hacked...

fWAvmXD.png


he downloaded this bot.

avecmoi is surely the hacker

Offline

Wooted by:

#31 2016-08-03 11:51:23

MartenM2
Member
Joined: 2016-08-02
Posts: 14

Re: I got hacked...

All the files seem to gone after the system recovery.
Now trying to recover my main account of EE and after that Ill try to get my forum account back.

Offline

#32 2016-08-03 12:07:00

Myst
Guest

Re: I got hacked...

MartenM2 wrote:

All the files seem to gone after the system recovery.
Now trying to recover my main account of EE and after that Ill try to get my forum account back.

goodluck to get ur account back in EE forum //forums.everybodyedits.com/img/smilies/wink

#33 2016-08-03 12:33:16

MartenM2
Member
Joined: 2016-08-02
Posts: 14

Re: I got hacked...

GermanPower68 wrote:

goodluck to get ur account back in EE forum

]

If only they would respond with a bit more than. Click this button. Because that doesn't work for some reason. (forum because email changed)

Offline

#34 2016-08-03 13:56:13

MartenM
Member
From: The Netherlands
Joined: 2016-03-31
Posts: 978
Website

Re: I got hacked...

I'm back! Topic will be closed //forums.everybodyedits.com/img/smilies/big_smile

Thanks for all the support. If there is something else I will just reopen this topic.


lm3hgg8.jpg

Ingame: marten22        My steam: MartenM

Offline

Wooted by: (2)
MartenM1470228973615984

Board footer

Powered by FluxBB

[ Started around 1732620624.3622 - Generated in 0.074 seconds, 10 queries executed - Memory usage: 1.48 MiB (Peak: 1.61 MiB) ]