Bitcoin Forum
June 27, 2024, 12:25:06 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: Account Stolen Convicted2008  (Read 1820 times)
Neonecrox13 (OP)
Member
**
Offline Offline

Activity: 112
Merit: 10

SAD - no longer active


View Profile
March 11, 2015, 03:24:33 PM
 #1

Trying to recover my convicted2008 account that was stolen from me on February 11th, 2015.

Here is the reference thread I started when all this started:  https://bitcointalk.org/index.php?topic=952735.msg10488504#msg10488504

Chronicsky was kind enough to help me with signing a message and he's also been logged into my coinbase account through teamviewer with me to verify that the 1Fijjy account is indeed mine.

Thank you very much Chronicsky for your help. I greatly appreciate it.

chronicsky
Legendary
*
Offline Offline

Activity: 2814
Merit: 1222

Just looking for peace


View Profile WWW
March 11, 2015, 03:31:07 PM
 #2

Trying to recover my convicted2008 account that was stolen from me on February 11th, 2015.

Here is the reference thread I started when all this started:  https://bitcointalk.org/index.php?topic=952735.msg10488504#msg10488504

Chronicsky was kind enough to help me with signing a message and he's also been logged into my coinbase account through teamviewer with me to verify that the 1Fijjy account is indeed mine.

Thank you very much Chronicsky for your help. I greatly appreciate it.

I confirm this! HE was signing the message wrong all along and thus i think Theymos never replied him.
I helped him on Teamviewetr , even signed the message myself from his Coinbase account and saw the Address to be correct.
Equinoxx
Hero Member
*****
Offline Offline

Activity: 742
Merit: 500



View Profile
March 11, 2015, 05:10:53 PM
 #3

So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.

-.sgmf
Neonecrox13 (OP)
Member
**
Offline Offline

Activity: 112
Merit: 10

SAD - no longer active


View Profile
March 11, 2015, 08:05:33 PM
 #4

So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.

I have emailed Theymos with the signed message about this. Haven't got the account back yet. *Fingers crossed*

thebitcoinquiz.com
Sr. Member
****
Offline Offline

Activity: 280
Merit: 250



View Profile
March 12, 2015, 01:43:14 AM
 #5

So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.
Theymos puts the account recovery thing in low priority zone in his list, because before recovering someone's account you have to make sure that the account wasn't sold by the owner or wasn't confiscated for defaulting a loan or other reasons. He needs to do a lot of investigation for recovering accounts and so he hardly ever returns back the account.

Stay hungry. Stay foolish.
Neonecrox13 (OP)
Member
**
Offline Offline

Activity: 112
Merit: 10

SAD - no longer active


View Profile
March 12, 2015, 02:37:31 AM
 #6

So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.
Theymos puts the account recovery thing in low priority zone in his list, because before recovering someone's account you have to make sure that the account wasn't sold by the owner or wasn't confiscated for defaulting a loan or other reasons. He needs to do a lot of investigation for recovering accounts and so he hardly ever returns back the account.


No the account wasn't sold. Someone hacked it then tried to get a loan with Quickseller. I'm fairly sure Quickseller knows that it was not me that was trying to get a loan with him by now. I sent the reference link to Theymos as well. I just hope he will get it back. I'll settle for having it permabanned if nothing else.

redsn0w
Legendary
*
Offline Offline

Activity: 1778
Merit: 1042


#Free market


View Profile
March 12, 2015, 12:31:38 PM
 #7

Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .
chronicsky
Legendary
*
Offline Offline

Activity: 2814
Merit: 1222

Just looking for peace


View Profile WWW
March 12, 2015, 01:40:18 PM
 #8

Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .

Very good find and share @redsnow
Posting links should not be allowed in chat window Undecided
thebitcoinquiz.com
Sr. Member
****
Offline Offline

Activity: 280
Merit: 250



View Profile
March 12, 2015, 01:43:27 PM
 #9

So is it recovered ? So the address is yours and just hit Theymos up with a pm and it will be sorted out.
Theymos puts the account recovery thing in low priority zone in his list, because before recovering someone's account you have to make sure that the account wasn't sold by the owner or wasn't confiscated for defaulting a loan or other reasons. He needs to do a lot of investigation for recovering accounts and so he hardly ever returns back the account.


No the account wasn't sold. Someone hacked it then tried to get a loan with Quickseller. I'm fairly sure Quickseller knows that it was not me that was trying to get a loan with him by now. I sent the reference link to Theymos as well. I just hope he will get it back. I'll settle for having it permabanned if nothing else.
All I wanted to say was that theymos still has to check everything so that he doesn't make any mistake.

Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .
You found out something interesting but its useless till you attract theymos's attention(or I guess as now badbear is also a mod, he can also recover accounts).

Stay hungry. Stay foolish.
chronicsky
Legendary
*
Offline Offline

Activity: 2814
Merit: 1222

Just looking for peace


View Profile WWW
March 12, 2015, 01:47:25 PM
 #10


You found out something interesting but its useless till you attract theymos's attention(or I guess as now badbear is also a mod, he can also recover accounts).

Firstly , you mean as now badbear is also an admin ?
No , he has stated before , only Theymos can recover accounts.
Neonecrox13 (OP)
Member
**
Offline Offline

Activity: 112
Merit: 10

SAD - no longer active


View Profile
March 12, 2015, 03:20:00 PM
 #11

Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .


I would like to personally thank you Redsnow for this. I feel that you have went above and beyond what anybody would have done. I do feel that you are also entitled to the bounty I offered to show that I had no involvement in this act against Quickseller. I do apologize to Quickseller because of this even though I had no action involved. Redsnow I will message you as well about the btc I'm gonna send you. Thank you very much for this post.

chronicsky
Legendary
*
Offline Offline

Activity: 2814
Merit: 1222

Just looking for peace


View Profile WWW
March 12, 2015, 03:48:56 PM
 #12

Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .


I would like to personally thank you Redsnow for this. I feel that you have went above and beyond what anybody would have done. I do feel that you are also entitled to the bounty I offered to show that I had no involvement in this act against Quickseller. I do apologize to Quickseller because of this even though I had no action involved. Redsnow I will message you as well about the btc I'm gonna send you. Thank you very much for this post.

What there was a bounty ? Damn!
Anyways good thing that you are proven innocent Smiley
Congrats on bounty win @redsnow
~Regards Sky
Neonecrox13 (OP)
Member
**
Offline Offline

Activity: 112
Merit: 10

SAD - no longer active


View Profile
March 12, 2015, 03:56:51 PM
 #13

https://bitcointalk.org/index.php?topic=952735.msg10488504#msg10488504

redsn0w
Legendary
*
Offline Offline

Activity: 1778
Merit: 1042


#Free market


View Profile
March 12, 2015, 04:52:10 PM
 #14

Hey guys,

yesterday I have sent a PM to vit1988 (admin of coinichiwa.com) and I asked him about this situation. Convicted2008 aka Neonecrox13 said the problem was a dicebot ( named 999DICE.EXE) a fake bot (maybe a keylogger).

Reference :
LOOK THROUGH THE HISTORY I FUCKING USED OGNASTY FOR THE ESCROW OF THE SILVERFISH WHEN I BOUGHT THEM. I BOUGHT THE S1 OFF HERE AS WELL.  THE HISTORY OF THE ACCOUNT WILL SHOW THAT IF YOU FUCKING LOOKED.

ALSO. I've very active in games and rounds? LOOK AT THE DATES. ITS JUST BEEN FOR THIS WEEK! I NEVER EVEN KNEW GAMES AND ROUNDS EXISTED UNTIL A WEEK AGO IF THAT.

I DIDN'T BUY FUCKING SHIT. I MADE THAT ACCOUNT WHEN I FIRST STARTED LEARNING ABOUT BITCOINS. I CAN GUARENTEE IF THE MODS WILL SHOW WHAT DATE THE EMAIL WAS CHANGED IT WILL COINCIDE WITH WHEN I POSTED ABOUT MY FORTUNEJACK ACCOUNT BEING HACKED AFTER I DOWNLOADED A 999DICE.EXE I THOUGTH WAS A DICE BOT.

IF I WAS THAT FUCKING CANDYSTRIPES U FUCKING THINK I'M GONNA SPEND THIS MUCH FUCKING TIME ARGUEING WITH YOU OR TRYING TO FIND A ANSWER? IF YOU HAVE DEALT WITH THEM ENOUGH APPARENTLY U KNOW THERE TYPING MANNERISMS AND OTHER THINGS ABOUT THEM? DO I FUCKING SOUND LIKE THEM? FUCK NO I READ THAT CHAT U WAS HAVING WITH THEM. THAT WHORE CAN'T EVEN SPEAK FUCKING ENGLISH. A FUCKING IDIOT CAN SEE THAT.


THATS WHAT I'M TRYING TO TELL YOU. I NEVER BOUGHT THAT ACCOUNT THAT MY MY FIRST ACCOUNT I HAD AND HAVE ALWAYS USED. I CAN'T FUCKING SEARCH BUT EVERY 90 SECONDS NOW BUT LOOK THROUGHT CONVICTED2008'S HISTORY. THEY ARE POSTS THAT SHOW I WAS HACKED ON OR ABOUT THAT DATE U SAY I BOUGHT THE ACCOUNT. I HAD NO IDEA THAT THEY HAD GOT MY BITCOINTALK ACCOUNT AS WELL UNTIL YESTERDAY


Vit1988 has replied to me (with the chat log) that an user named "Tiktakbym159" has posted the link of that "bot" in the chat , this is the log:

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"Know stratum 1 BTC 1 click and there will be 2 BTK! who should be added to the h t t p s://www.dropbox.com/s/hbosomsnyicqxtf/999dice.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-25 18:35:09\",\"avatar\":\"/av/none.png\"}"

RPUSH "chat:english" "{\"channel\":\"english\",\"from\":\"Tiktakbym159\",\"msg\":\"h t t p s://www.dropbox.com/s/caoh261p554rvqv/%28%2B1%29Bitcoin-no-time.exe?dl=0\",\"color\":\"white\",\"date\":\"2015-01-24 21:43:12\",\"avatar\":\"/av/none.png\"}"



Now the first file was deleted but the second file (a MALWARE) is still "online" and this is the scan of it :

https://www.virustotal.com/en/file/eafbd90016b127e3de0a9cecc300d513c9f4e7ad110d359f68ee3857b6e4e73b/analysis/1426160381/

Now I can tell that (at 99%) the Convicted2008's forum account was victim of a malicious .exe file .


I would like to personally thank you Redsnow for this. I feel that you have went above and beyond what anybody would have done. I do feel that you are also entitled to the bounty I offered to show that I had no involvement in this act against Quickseller. I do apologize to Quickseller because of this even though I had no action involved. Redsnow I will message you as well about the btc I'm gonna send you. Thank you very much for this post.

No problem you are welcome, If I can help someone, why shouldn't I do ? Now I suggest you to wait a reply from the admin, and I hope that you can get back the account.

Thanks for the attention and have a great day. Good luck.
Neonecrox13 (OP)
Member
**
Offline Offline

Activity: 112
Merit: 10

SAD - no longer active


View Profile
March 13, 2015, 09:56:34 AM
 #15

Trying to recover my convicted2008 account that was stolen from me on February 11th, 2015.

Here is the reference thread I started when all this started:  https://bitcointalk.org/index.php?topic=952735.msg10488504#msg10488504

Chronicsky was kind enough to help me with signing a message and he's also been logged into my coinbase account through teamviewer with me to verify that the 1Fijjy account is indeed mine.

Thank you very much Chronicsky for your help. I greatly appreciate it.

I confirm this! HE was signing the message wrong all along and thus i think Theymos never replied him.
I helped him on Teamviewetr , even signed the message myself from his Coinbase account and saw the Address to be correct.


So disguised.

http://imgur.com/0Sgs7cQ

http://imgur.com/wubAbnP

http://imgur.com/5P1cdD5


I can't even verify my own identity from my wallet on my computer. WTF

Neonecrox13 (OP)
Member
**
Offline Offline

Activity: 112
Merit: 10

SAD - no longer active


View Profile
March 14, 2015, 09:04:28 PM
 #16

I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.

bensam123
Sr. Member
****
Offline Offline

Activity: 423
Merit: 250


View Profile
March 15, 2015, 09:08:10 AM
 #17

I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.

It looks like you emailed theymos instead of pm him?
thebitcoinquiz.com
Sr. Member
****
Offline Offline

Activity: 280
Merit: 250



View Profile
March 15, 2015, 09:24:00 AM
 #18

I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.
As said earlier. Theymos gives low priority to these kind of jobs. Only a few lucky ones get their account deleted.
Also if you want to get it banned then you might try talking to BadBear about this, if he cant recover the account then at least he can permanent ban your account(if you show him the proof that the account is yours).

Stay hungry. Stay foolish.
bensam1231
Legendary
*
Offline Offline

Activity: 1750
Merit: 1024


View Profile
March 15, 2015, 09:27:00 AM
 #19

I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.

It looks like you emailed theymos instead of pm him?

This is funny, when the guy operating my account is also using a stolen account. Theymos and Badbear don't seem to respond to PMs. I have plenty of proof as to me being the owner and it would take next to no time for them to do it. But as you can see there is still someone masquerading on the forums as me.

My trader accounts were also attempted, but I have 2FA on so I still own them.

I buy private Nvidia miners. Send information and/or inquiries to my PM box.
bensam123
Sr. Member
****
Offline Offline

Activity: 423
Merit: 250


View Profile
March 15, 2015, 09:34:38 AM
 #20

I'm just posting in here to hopefully get attention of some mod that can get my account back. They like to delete posts well enough, maybe one of them will read this and not delete it and get my convicted2008 account back or permaban it and at least let me know about it.

It looks like you emailed theymos instead of pm him?

This is funny, when the guy operating my account is also using a stolen account. Theymos and Badbear don't seem to respond to PMs. I have plenty of proof as to me being the owner and it would take next to no time for them to do. But as you can see there is still someone masquerading on the forums as me.

My trader accounts were also attempted, but I have 2FA on so I still own them.

It's funny how you realise just now, and you were chatting normally for 4 weeks on the altcoin section.

I bought this account legitimately, and it is not stolen. You're just trying to regain access to this account.

If you want to challenge me, go ahead. Open a new thread here in meta. Stop hijacking other people's threads.
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!