Page 1 of 2 12 LastLast
Results 1 to 15 of 27
  1. #1
    T-800's Avatar
    Join Date
    Aug 2014
    Gender
    male
    Location
    Romania
    Posts
    17,076
    Reputation
    1688
    Thanks
    84,836

    Regarding X99 .dll cheat

    As you may have seen, all the threads from x99 user have been deleted without any information.

    There is a major problem i would call it but i don't want to make this a very big deal for now, the thing is....

    The .dll file contained a pretty well hidden part of the code (at least for me) which generated an .exe file with the purpose of sending victim personal data to an IP. For now we are not sure what exactly it happens behind the scene but we got some valid informations to let you guys aware about what happened. The port where the data is sent is still open.
    I think (i'm not 100% sure) this happened as soon as you injected the cheat in your game.

    Some more what i can tell you guys about is, the first and second release from this guy had some kind of internet connections which now were confirmed to be the cause of all however the first time i couldn't see any kind of relations but i was aware, the user was told to remove however instead of removing he just hid it better inside and that was another problem which caused the approval of the latest attachments.
    I wanna thank the guys that reported the problem , they know who they are and i won't mention here.

    I want to apologize for being so delayed with this, i tried my best to gain informations and what happened exactly however it's a pretty tough situation and for approving it obviously, i highly regret i did this and i still feel very guilty but we have to let it pass somehow, we can't stop.

    For now please run a virus scans on your whole pc and delete the cheat in-case you still have it, just in-case you find a crashhandler.exe in your cs:go directory or a test.exe file please remove it or you may just delete csgo folder and install the game one more time.
    This is very important and i would like every user who download the cheat to do that.


    That's the only thing i got so far and it will be updated as soon as possible so please keep your eyes here (we are still working on this).

    //Any suggestions / help in comments is welcomed.
    Last edited by T-800; 09-29-2017 at 10:33 AM.

    "Never stop being a good person because of bad people"


    Super User -> 15-7-2020
    Global Moderator -> 23-3-2019 - 15-7-2020
    Steam Moderator -> 12-12-2017 - 23-3-2019
    Steam Minion+ -> 09-04-2017 - 12-12-2017
    Steam Minion -> 03-01-2017 - 09-04-2017


  2. The Following 10 Users Say Thank You to T-800 For This Useful Post:

    adagars60 (09-26-2017),[MPGH]Ahl (09-26-2017),aziem2016 (09-26-2017),denkoludiq (09-26-2017),DOTD100 (09-30-2017),Eldar44 (09-26-2017),flowwwww (09-27-2017),gnawd1998 (09-25-2017),Ichigueira (09-25-2017),ZleMyzteX (09-25-2017)

  3. #2
    knochenx's Avatar
    Join Date
    Jun 2017
    Gender
    male
    Location
    Cologne
    Posts
    75
    Reputation
    10
    Thanks
    15
    Deleted, scanned my PC, it's clean (thank god)
    I never opened it, so it stayed in the .rar file. Thanks for the info though, deleted it as soon as I saw the title.
    If I helped you in anyway, or provided useful information, please 'Thank' me!
    - Project XNS -

  4. The Following User Says Thank You to knochenx For This Useful Post:

    ZleMyzteX (09-25-2017)

  5. #3
    ZleMyzteX's Avatar
    Join Date
    Jan 2016
    Gender
    male
    Posts
    31
    Reputation
    10
    Thanks
    2
    My Mood
    Amused
    Deleted the cheat and .dll and scanned, nothing was found. Neither did I find the exe somewhere, but still thanks for the information!

  6. #4
    Skr1lla's Avatar
    Join Date
    Apr 2017
    Gender
    male
    Posts
    3
    Reputation
    10
    Thanks
    0
    My Mood
    Angelic
    had to reset my whole pc because of this and the guy had all my info and when I went to make a post about it he changed my screenshots to porn, glad to finally see this was dealt with

  7. #5
    Proxemah's Avatar
    Join Date
    Nov 2016
    Gender
    male
    Location
    In my bedroom
    Posts
    45
    Reputation
    10
    Thanks
    805
    Thanks for the heads up think I used this like once for testing lol I cant remember.

  8. #6
    master131's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    Melbourne, Australia
    Posts
    8,858
    Reputation
    3438
    Thanks
    101,656
    My Mood
    Breezy
    Please ensure you have changed your username and passwords for any accounts that were stored in Google Chrome if you were affected as they appeared to have been sent.
    Donate:
    BTC: 1GEny3y5tsYfw8E8A45upK6PKVAEcUDNv9


    Handy Tools/Hacks:
    Extreme Injector v3.7.3
    A powerful and advanced injector in a simple GUI.
    Can scramble DLLs on injection making them harder to detect and even make detected hacks work again!

    Minion Since: 13th January 2011
    Moderator Since: 6th May 2011
    Global Moderator Since: 29th April 2012
    Super User/Unknown Since: 23rd July 2013
    'Game Hacking' Team Since: 30th July 2013

    --My Art--
    [Roxas - Pixel Art, WIP]
    [Natsu - Drawn]
    [Natsu - Coloured]


    All drawings are coloured using Photoshop.

    --Gifts--
    [Kyle]

  9. The Following 2 Users Say Thank You to master131 For This Useful Post:

    ITSRAININGMILK (09-26-2017),KMWTW (09-28-2017)

  10. #7
    DemonenDK's Avatar
    Join Date
    Aug 2017
    Gender
    male
    Posts
    47
    Reputation
    10
    Thanks
    0
    I changede my password to my Youtube/GMail account. When i come home i will delete the dll and the test.exe thing come on my Taskmanager Startup program, i didn't know what it was but Everyone go on you taskmanager and take Startup or what its called and disable test.exe or open file place and delete it! My antivirus (Panda Protection) come op with the test.exe was an virus and i tjekket my startup taskmanager thing and disable it and deleted it Now i have the get home for the crash thing .exe and if i have it it will be delete instandt!

    Thanks for the info about the cheat


    [Edit]
    My antivirus come op the same time i run the cheat so i disable it the first time, and the 2nd relase he made made it so some cmds (Command promps) poped op and i just though it was the Menu loading but its clearly not!

    [Edit 2 xD]

    The reason why i saw the cmd popups i do never lauch in fullscreen window i allways do it on Windows mode and i have 2 screens so i have the CSGO on my 2nd screen and YT/*******/TeamSpeak/Skype on my main, and i saw the cmds.
    Last edited by DemonenDK; 09-26-2017 at 01:41 AM.

  11. #8
    adagars60's Avatar
    Join Date
    Mar 2016
    Gender
    male
    Posts
    7
    Reputation
    10
    Thanks
    1
    My Mood
    Bored
    i cant find any of the dll files you mentioned i deleted the cheat aand i found it on my antivirus quarantine list.I havent seen something unusual so far or any logins in any of my accounts.I just started a scan, will change my passwords i hope this is enought.And i used it a lot.....

  12. #9
    Eldar44's Avatar
    Join Date
    Apr 2014
    Gender
    male
    Posts
    40
    Reputation
    10
    Thanks
    10
    I didn't find anything odd on my PC. It's kinda sad when people do this, despite us all being cheaters we are a community within our own right and betraying the trust of the people and tricking moderators that bust their ass only leads to bad things as a whole. It discourages people from releasing public cheats due to scrutiny and overall puts a blight on cooperation efforts.

    Thank you to the members of the community that identified and confirmed this .dll had malicious content and that the creator had malicious intent.
    @gerassss I don't think anybody really faults you for this, you go through how many requests for approval every day, week, month? Errors are bound to happen, it's simply human. The fact that we were able to get a public statement warning us of the possibility of a security breach on our machines and the fact you took ownership over the mistake is respectable and honorable. Thank you for serving the community!


    EDIT: Some useful tips from your local friendly System Admin, Eldar:

    1. Enter Bios/UEFI and change Boot Sequence to a "Secure Boot" (DO NOT NETWORK BOOT)

    2. Depending on your OS, this may be different however I'll cover Windows 7-10. Windows 7: Start>Run>msconfig>Startup Tab. Windows 8/10:> Right click taskbar >Task Manager> Startup. In this startup check for ANY unusual or unsigned programs such as: test.exe (as mentioned above) a lot of this comes from experience and knowing your specific OS and hardware.

    3. After removing potential bad startup programs we are going to open Task Manager once more and scan through the list of running processes for anything unusual (Such as test.exe) while it's rare for virus's to boot with the OS on secure boot it's not unheard of.

    4. We are now going to check our local AppData folder. (People like to hide malicious .exe's here as it's a hidden sector. May need elevated permissions.) This is the same for Windows 7-10, however getting there is a bit different. Open your respective search bar (Or cham bar on Windows 8) and type in %appdata% and press enter. This will bring up your AppData Folder. Ideally, check all folders but focus on Local>Temp.

    5. Once you have verified and or eliminated any malicious programs, reboot your PC with normal Boot Sequence. Run a Anti-Virus scan (I recommend Malwarebytes or Avast.) for any traces that may be left behind. (Trojans and worms do have backend scripts that may allow themselves to redownload. Spybot is good for finding those.)

    6. After your AV has checked your PC, use a trusted Registry Cleaning programs to ensure that there are no left over keys from the malware. (I used to use CCleaner, but they had a huge breach.)

    7. Finally, change all user passwords. More importantly, DO NOT USE THE SAME PASS FOR EVERYTHING. I can not advocate that enough.

    If you have any questions, or you are feeling confused feel free to PM me. Have a great day!
    Last edited by Eldar44; 09-26-2017 at 05:21 AM.

  13. The Following User Says Thank You to Eldar44 For This Useful Post:

    xITMaki (09-30-2017)

  14. #10
    yaBoiMLGPRO's Avatar
    Join Date
    Jan 2017
    Gender
    male
    Location
    Galapičinovce
    Posts
    383
    Reputation
    10
    Thanks
    4,185
    My Mood
    Dead
    Thanks, i runned that sht more times
     

    JOINED - 13.1.2017
    500 THANKS -> DONE
    1000 THANKS -> DONE
    1500 THANKS -> DONE
    2000 THANKS -> ​DONE
    2500 THANKS -> DONE
    3000 THANKS -> ​DONE
    3500 THANKS -> DONE
    4000 THANKS ->
    4500 THANKS ->
    5000 THANKS ->



  15. #11
    hWHJ#WHJ#J3j5's Avatar
    Join Date
    Sep 2017
    Gender
    male
    Posts
    2
    Reputation
    10
    Thanks
    0
    I've used this cheat, but I think it does not use the latest version. I have not found any test.exe or crashhandler.exe, Is it possible that I have not been infected?

  16. #12
    denkoludiq's Avatar
    Join Date
    Jul 2017
    Gender
    male
    Posts
    9
    Reputation
    10
    Thanks
    4
    Thanks for the info. Thanks god I only run like the first version for like 5 mins. Didnt find test or crashhandler in my csgo folder and neither in my startup programs/task manager.

  17. #13
    DOTD100's Avatar
    Join Date
    Feb 2013
    Gender
    male
    Posts
    172
    Reputation
    10
    Thanks
    10
    My Mood
    Cold
    Quote Originally Posted by Azlath View Post
    I've used this cheat, but I think it does not use the latest version. I have not found any test.exe or crashhandler.exe, Is it possible that I have not been infected?
    Just do a full anti-virus scan to make sure.

    - - - Updated - - -

    It's a pity tho... I love the Namechanger in the x99 cheat, which I was unable to find in other hacks...
    INVASION

  18. #14
    thedecx's Avatar
    Join Date
    Sep 2016
    Gender
    male
    Posts
    1
    Reputation
    10
    Thanks
    0
    maybe its just the exe because i have no virus on my pc. i just injected it with my own injector

    - - - Updated - - -

    thats why im testing all the shit on my crappy 20 dollar laptop

  19. #15
    GamingMeteor's Avatar
    Join Date
    May 2015
    Gender
    male
    Posts
    32
    Reputation
    21
    Thanks
    11
    THANKS, WOW. THANK FUCKING COMODO, Blocked it instantly
    thought it was some cs:go shit. I have the DIR of the crashhandler.exe thing. So if you guys need it just ask (Lost it)
    OH SHIT, WE HAVE A PROBLEM.
    FUCK, I messed up. AHHH, I accidently unblocked ALL quarantined .exe's and dll's by accident. Uhh... I messed up. Used my credit card a day after that. On steam. Thankfully, there is some fraud shit, where whenever someone from a different IP intends to use the card it will notify me. SO if he does touch mah money. Beware :P
    I'm fucked. Time to change passwords.
    Wait... I don't ever remember unblosking crashhandler.exe
    Can it be that he's renamed.. or... did he change it to EasyAntiCheat.exe? I never had it beforehand. AND umm... It isn't signed. AND I don't have any games other than, Minecraft, And CS:GO
    Last edited by GamingMeteor; 09-26-2017 at 01:24 PM. Reason: stuff...

Page 1 of 2 12 LastLast

Similar Threads

  1. External Dll Cheat Causing High Ping???? [H1Z1]
    By articxslack in forum H1Z1 Discussions & Help
    Replies: 3
    Last Post: 04-30-2017, 02:24 PM
  2. [Solved] DLL Cheats
    By kekcellent in forum Counter-Strike 2 Help
    Replies: 3
    Last Post: 09-08-2016, 05:51 PM
  3. What is Needed To Create DLL Cheats?
    By SpraX in forum Coders Lounge
    Replies: 1
    Last Post: 03-22-2016, 08:00 AM
  4. [Discussion] All previous .DLL cheats….
    By KFC-Chef in forum Reign Of Kings Discussions & Help
    Replies: 4
    Last Post: 04-04-2015, 12:29 PM
  5. Question regarding external overlay cheats
    By MaxSvett in forum Battlefield 3 (BF3) Hacks & Cheats
    Replies: 6
    Last Post: 02-28-2013, 10:00 AM