Hacked, but how?

[Noxx]

It's kind of hard to explain, but a friend of mine just got "hacked". I think it was via some sort of remote access. I took a screeny of our conversation so i could get a few opinions.

Any help would be great, i'm really no good with computers and nor is he.

 

 

EDIT: I just asked him if he's been on any Botting/Gold selling site. He says he hasn't but he did spend 15 minutes on [Caution: Jagex Rule Violation] (?) on Saturday. I don't know if this helps at all.

 

^ Derp clearly that could have been the cause.

 

EDIT2: Whomever was on his account only took his Ranger Boots, Fury and Robin Hood Hat, although they did have access to his bank pin because they withdrew his rapier but did not take his bandos/arma/etc.

 

Also, how do you scan for something when you don't know what you're looking for?

[la la la]

Sounds like he had teamviewer or some equivalent running and isn't telling you the whole story.

[Noxx]

Sounds like he had teamviewer or some equivalent running and isn't telling you the whole story.

First thing i asked him was whether or not he had teamviewer. He had no idea what i was talking about. I recall his words being "Whut that?"

So i doubt he has that. I asked him if he had any other sort of remote access kind of program and he had no idea what that was either :\

 

Is it possible to download something like this without knowing? Or will this always be picked up by an antivirus?

[Noxx]

Okay so he changed his password and then 5 minutes later the same thing happened again. The again he got a message on his laptop randomly asking for his bank pin. The person told him to give him the bankpin or he's going to keep getting hacked and he'll crash his laptop (dunno if this is possible). Change his pass and log out again and not log in untill he found whatever it is thats causing this. But i dont know how hes going to find the source when he doesnt know what it is.

 

EDIT: He took a picture of that happened. I've asked him to upload it and send me a long. I'll post that soon as i get it.

[Bruhx]

The best thing to do with hackers is login, get the last logged in IP address, and post it all over the internet.

 

There is a chance the way they keep doing this is through his own IP address, I know a way myself to take over someone's computer and basically do whatever I want using there IP. If he CAN, tell him to go somewhere else and get on his account there, logout with his password changed & don't login for the rest of the day until the hacker just goes away. I don't even know if that would work at all, but that way, the last logged in IP address will be different when he logs in. Although I'm guessing if this has anything to do with his IP, the hacker already has his.

[Ember]

.

[Noxx]

Well i think he found what was wrong. He ran a virus scan again after it happened the second time. The virus scan came up clean, again. I told him to download malwarebytes and run a scan with that. It picked up a trojan, 3 spywares and 6 malwares, or something like that. Good ol' Avast let that slip through somehow. I'm just not sure how something like that could have gotten past the antivirus to start off with.

[Zimberfizz]

She's RAT'd, and the RAT IS on her computer it's just FUD (Fully Undetectable) it should be detected by anti viruses in 2 weeks to a month, but for now she has to seek help on specialized forums using Hijack This

 

How do I know? well.. that's another story ;)