Hack Forums
[Infected] Exclamation Someone from Morroco Hacked My Gmail, Skype, PP steals all access.. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Infected] Exclamation Someone from Morroco Hacked My Gmail, Skype, PP steals all access.. (/showthread.php?tid=5059717)

Exclamation Someone from Morroco Hacked My Gmail, Skype, PP steals all access.. - FuxXER - Nov 16, 2015

Hi everyone, seems my window hacked by someone from morocco. So, please do not accept anything from my email/,skype. Escpecially skype: chris9476
http://pasteboard.co/26iZ7BJM.png
it cannot recover by myself cause pass changed by the hacker.
He also access my banking account too
http://pasteboard.co/26j7GnaO.png
I got this virus from my trusted buddy skype, he was infected too.
Hacker still using our skype to spread virus! is it possible to track his real location?

PLEASE ADD MY NEW SKYPE: facebook:moschino.love.58

Please do not accept anything from skype:chris9476

* - SIM-2564555 - Nov 17, 2015

Simply install new windows don't use any applications in ur old folders . Download new softwares . Change all ur passwords . Use 2 methods to verify ur identify such as txt msg to ur mobile

* - Kyle17 - Nov 18, 2015

"He also access my banking account too"
Go to the bank, stop your card and request a new one or do what they suggest.
"is it possible to track his real location?"
If the hacker is currently accessing your computer it is posible to get an IP address using Netstat or something else, then you can Geo-locate his IP, it's not that accurate and if the hacker is using a VPN it will be highly unlikely you can track down his actual location.

EDIT: I saw the IP address in the picture, it is highly unlikely you can go any further than just "Rabat-sale-zemmour-zaer, Morocco".
What you can do is contact "Maroc Telecom" and see what they have to say.

used: https://www.iplocation.net/

* - M5DD - Nov 18, 2015

Talk to his ISP, should get him in some trouble.

* - Meliodas - Apr 15, 2016

(Nov 18, 2015 08:42 AM)PewDiePie™ Wrote:  "He also access my banking account too"
Go to the bank, stop your card and request a new one or do what they suggest.
"is it possible to track his real location?"
If the hacker is currently accessing your computer it is posible to get an IP address using Netstat or something else, then you can Geo-locate his IP, it's not that accurate and if the hacker is using a VPN it will be highly unlikely you can track down his actual location.

EDIT: I saw the IP address in the picture, it is highly unlikely you can go any further than just "Rabat-sale-zemmour-zaer, Morocco".
What you can do is contact "Maroc Telecom" and see what they have to say.

used: https://www.iplocation.net/

U can contact the ISP and he will be in big trouble ^^

* - Neos07 - Apr 15, 2016

I'm from Morocco, contact me if you need help.

* - ProtectNull™ - Apr 16, 2016

Is your computer infected?

Download Farbar Recovery Scan Tool and save it to your Desktop.

Farbar Recovery Scanning Tool
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.

  • Press Scan button.

  • It will produce a log called FRST.txt in the same directory the tool is run from.

  • Please copy and paste the log back here

  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.



TDSSKiller
  • Please download TDSSKiller and save the file to your Desktop.

  • Right-Click TDSSKiller.exe and select Run as Administrator

  • Click Change parameters. Place a checkmark next to Detect TDLFS file system and Verify file digital signatures.

  • Click Start Scan. Do not use the computer during the scan.

  • If objects are found, change the action to skip.

  • Click Continue and close the window.

  • A log will be created and saved to the root directory (usually C:\). Paste the file contents to pastebin.com and post the link in your next reply.




* - ThatBlackDude - Apr 16, 2016

Hmm if its the real IP as it seems, then he will be in massive trouble properly jail. the isp is legit so else hes using a proxy, or hes stupid enough to do banking trojans without vpn and stuff.. and that is unlikely.