WARNING: If you downloaded " Project R Revived" By RaphaCobra

[[MPGH]master131]

This is rather unfortunate, if you still need help to remove this Phisher VM me.

Also, Full Scan with:
Malware Anti-Bytes.

Removing the phisher is as simple as deleting the file.... Malwarebytes will not find anything, it's not proper malware.

I scanned the file using Malwarebytes; nothing:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 9/01/2014
Scan Time: 2:24:43 AM
Filename: mbam-log-2014-01-09 (02-23-29).txt

OS: Windows 8
CPU: x64
User: master131
File System: NTFS

Version: 2.0.0.28
Database: v2014.01.08.04
Administrator: true
License: Free
Protection: false

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 207392
Time Elapsed: 0 min, 31 sec
FileSystem: yes
HeuristicsShuriken: yes
Archives: yes
PUP: yes
PUM: yes
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 0
(No malicious items detected)
Registry Values: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 0
(No malicious items detected)


(end)

[Jim]

Removing the phisher is as simple as deleting the file.... Malwarebytes will not find anything, it's not proper malware.

Alright, no worries. Just offering my two cents to help.

But you've obviously got it under control.

[krishtna999]

Fucking lost it ALL
5 Omgur Sheilds D:

[c2k8s]

I think royce is only good at looking at the virus scans to see if they pass...

lol this x1000 hes not the only current mod either..
I don't browse other sections, but do the release of any others have such cancer as we have here?

[furnaps]

It "DID" contain a phiser, I lost everything.. All my tops gone... everything gone..

[krishtna999]

Wait did anyone recieve a Pm(Regarding this keylogger ) from a person called Zopp ??
How did he know my ingame name and my MPGH name ??
I think its him.
Pls Enquire him

[furnaps]

If anyone has this guys address that posted this program, (maybe a forum mod since forums log IP adresses) I would pay for this guys address.

For anyone else that lost everything I feel your pain dont worry I lost everything also

[furnaps]

will deleting the folder the program was in and everything in it get rid of this? Or Do I need to do anything else? Thanks

[krazyshank]

@JustAnoobROTMG Wow I have no idea why I didn't look into that assembly loading, I fell for the Windows.Forms name and assumed he was taking precaution towards people with outdated .NET runtimes.

TO EVERYONE ELSE: Delete the file and you will be safe! You do NOT have to scan your computer. And only ROTMG account info was stolen, NOT credit cards or anything else!

[c2k8s]

will deleting the folder the program was in and everything in it get rid of this? Or Do I need to do anything else? Thanks

Deleting it is fine enough, the phisher only ran when you ran the above program, the way phishers work is they are discreet, never leaving a footprint or anything behind, people can encrypt a good phisher and it last years on peoples computers. silently stealing passwords and info.

[JustAnoobROTMG]

Yeah, on the other hand, if your login+password are the same on many website he can try them, evefn on steam.
Steam has the Steam guard but if the rotmg email is the same that is registered on your steam account and he has access to it..

@JustAnoobROTMG Wow I have no idea why I didn't look into that assembly loading, I fell for the Windows.Forms name and assumed he was taking precaution towards people with outdated .NET runtimes.

Yeah. Its exactly why people names their virus "svchost.exe".
To be honest, i could have fallen into the same trap , dont worry bro.

[SwiftXvenom]

Fucking lost it ALL
5 Omgur Sheilds D:

what do you mean those are soulbound lol

[IziLife]

Obfuscated things = something to hide = be careful, i don't know why it has been approved ..

[Royce]

This is why I don't like to deal with windows based stuff , I really can't check it . I might have to download something that lets me read any file .exe file codes

I think royce is only good at looking at the virus scans to see if they pass...

I can't do much from a mac... Plus it was distraught job to deal with it

[Bountyxxx]

Will decompile it in a sec....the bastard stole the only shit i had....and somewhy freed my pets....fuckin hate him

My god...fuck. But let me get this straight, isn't RaphaCobra Drowlys? feel free to correct me if I am wrong.

Man he probably has hacked so many people.