WTF AHHHHHHHH

[EasyT]

This may have already been suggested (I skimmed the last page or so)...

Did anyone use whois.com to see if his id is shielded? At my reading, all the urls were removed from this thread. It costs $ to hide your ownership of a url. Worth a shot.... though only if you know someone in Spain who is handy with a crowbar.

[will641]

Will - I was really shocked when I first read this thread, and I feel really bad for you. I'm impressed with the way you've handled it so far, though ... Good luck rebuilding.

thanks man. i feel like ive handled it pretty well too, but im still just absolutely sick to my fucking stomach about it. that was pretty much, all the money i had. also, i could really feel my game picking up, and i was starting to play 400nl (aka i ran goot ).

i think along with all the security measures people have come up with to prevent this kind of thing happening to themselves, i strongly recommend that players who have a big bank roll buy a separate computer, and ONLY play poker on it. use your other computer for emails, ftr, chatting, etc. and you really only need a cheap $400 computer to do just play poker anyways. you just cant be too careful. i wish i had done that ldo.

[givememyleg]

Will - I was really shocked when I first read this thread, and I feel really bad for you. I'm impressed with the way you've handled it so far, though ... Good luck rebuilding.

thanks man.

lol

[ackthecat]

I sent PS security an email also
Hope they can do something for you Will

[Jack Sawyer]

same

[bigspenda73]

got a response back, hopefully they're not just sending for emails back to us.

Hello Cullen ,

Thank you for emailing PokerStars.

PokerStars is fully aware of the concerns of the community in regards to
this case and the impact it has made to players.

From the point of the accounts and persons responsible for this offence we
have initiate what security enquiries and actions we can take, but with
limitation in our powers from a land based action perspective and also the
real identities of these people, there are difficulties bringing any
further action on the offenders, however much we would like to pursue
justice for the victim in this case.

It has always been a top priority of PokerStars to all its players that
the security of their account is of the utmost importance and we always
urge players not to use third party software which may breach that
security.

PokerStars is always seeking more advance ways in which to increase player
account security, but our efforts can only reach as far as the players own
protective actions. If actions breaching the account were initiated on the
side of the player then there is no measure that we can take to protect
our their accounts and our efforts will have to turn to re-active measures.

We hope that this addresses your concerns and that we assure you that we
have taken what actions we can in the interest of our players and poker
rooms integrity.

If you have any additional queries, please do not hesitate to contact us.

Regards,

Man
PokerStars Security

[bigspenda73]

ya know, for a letter with a lot of writing, it didn't say much

whatevs Stars

[Jack Sawyer]

[quote="will641"]

i think along with all the security measures people have come up with to prevent this kind of thing happening to themselves, i strongly recommend that players who have a big bank roll buy a separate computer, and ONLY play poker on it. use your other computer for emails, ftr, chatting, etc. and you really only need a cheap $400 computer to do just play poker anyways. you just cant be too careful. i wish i had done that ldo.

/quote]

This

[bigspenda73]

yea, I'm doing that now, have my laptop for my iPod and MiRC and AIM and browsing and now I'll just clean up my desktop and use it only for poker.

[aka_red]

Hello King of Fucking Everything ,

Thank you for emailing PokerStars.

In regards to the access location for each account we have a IP address

system in place that reviews where players access from, but due to ISP
information and support for players to access their accounts on the
move
(as many players do) we do not fix where a player accesses his account
from with geographical regions taken into account.

On providing information related to players which have won or lost
funds,
for obvious security reasons to these real players which have not done
anything wrong to their knowledge following our security enquiries, we
can
not disclose their information as I am sure you understand should you
be
in this situation.

From the point of the accounts and persons responsible for this offence
we
have initiate what security enquiries and actions we can take, but with

limitation in our powers from a land based action perspective and also
the
real identities of these people, there are difficulties bringing any
further action on the offenders, however much we would like to pursue
justice for the victim in this case.

It has always been a top priority of PokerStars to all its players that

the security of their account is of the utmost importance and we always

urge players not to use third party software which may breach that
security.

PokerStars is always seeking more advance ways in which to increase
player
account security, but our efforts can only reach as far as the players
own
protective actions. If actions breaching the account were initiated on
the
side of the player then there is no measure that we can take to protect

our their accounts and our efforts will have to turn to re-active
measures.

We hope that this addresses your concerns and that we assure you that
we
have taken what actions we can in the interest of our players and poker

rooms integrity.

If you have any additional queries, please do not hesitate to contact
us.

Regards,

Man
PokerStars Security

[Warpe]

See new thread:

http://www.flopturnriver.com/phpBB2/...55.html#676608

[donkbee]

Will - I was really shocked when I first read this thread, and I feel really bad for you. I'm impressed with the way you've handled it so far, though ... Good luck rebuilding.

thanks man.

lol

haha

[allabout]

I don't know if you are planning to or already have reported it, but in case you want to the FBI has an internet crimes division. www.ic3.gov

[will641]

Will, did you say you can't access your email? Is it because the password is changed or another reason?

yeah i cant. i think the fucker changed it but im not sure. nothing else makes sense.

[The Odds God]

I got email from stars, probably you guys got it too.

[mixchange]

i don't get why we pay so much in rake, if they can't occasionally refund someone's account that got hacked. WOW

[will641]

i just got my email account back up and running. they said that they wont reinstate my account until i stop "asking for money on 2+2", or some crap like that, because that keeps the investigation going, and they cant change my status until the investigation is closed. I.E. they dont want to take any responsibility and want to be distanced from the matter.

it is really unfortunate that i dont live in canada or somewhere where if a company pulled this shit on me i cant just say FUCK YOU, ill take my business elsewhere.

[will641]

question for computer guys:

sometime within the next couple days im going to wipe my hd clean and reinstall windows to get rid of any looming trojans. how do i make sure i dont lose all my PT hands? (i have a cracked version btw).

[mixchange]

will, buy PT. Don't be silly! Don't risk your future 13K roll over a $100 program.

Also, he's a small guy and works really hard on the product. Pay him his money.

And only use popular, well known poker programs. And pay for them.

[drmcboy]

? (i have a cracked version btw).

no problem, I'll send you the latest update free

[aka_red]

will, buy PT. Don't be silly! Don't risk your future 13K roll over a $100 program.

Also, he's a small guy and works really hard on the product. Pay him his money.

And only use popular, well known poker programs. And pay for them.

dude 200$ is half a buyin when you were playing dont be this cheap just to get owned later.

[KoRnholio]

dude 200$ is half a buyin when you were playing dont be this cheap just to get owned later.

QFT. PT is one of the few programs I don't mind even one bit shelling out money for. Pat updates things so quickly and provides excellent customer support.

[Muzzard]

Only just seen this thread, holy shit. Sorry dude. I emailed support too

[will641]

dude 200$ is half a buyin when you were playing dont be this cheap just to get owned later.

QFT. PT is one of the few programs I don't mind even one bit shelling out money for. Pat updates things so quickly and provides excellent customer support.

this is true now, but when i got it, it was like 100000000 buy ins.

[will641]

also, this still doesnt solve the problem of my database.

[Muzzard]

also, this still doesnt solve the problem of my database.

You can either backup your database, or export all the hands back to the normal .txt format then re-import them to PT once installed. Burn it to cd/dvd/ubs key whatever.

[Warpe]

my PT hands? (i have a cracked version btw).

this is another great way to get hacked.

[aka_red]

will

http://www.pokertracker.com/forums/v...hp?f=30&t=1369

<3

[will641]

my PT hands? (i have a cracked version btw).

this is another great way to get hacked.

yeah im going to buy it this time...

$50 at the risk of 13k just aint worth it.

[kapilalink]

i just got my email account back up and running. they said that they wont reinstate my account until i stop "asking for money on 2+2", or some crap like that, because that keeps the investigation going, and they cant change my status until the investigation is closed. I.E. they dont want to take any responsibility and want to be distanced from the matter.

it is really unfortunate that i dont live in canada or somewhere where if a company pulled this shit on me i cant just say FUCK YOU, ill take my business elsewhere.

come play at FT...... Or at least threaten to them that you will.

[Pelion]

look guys, i would obviously really appreciate any help i could get. i think i will be okay though, because i had 272k fpp's saved up (i was saving up for the porsche, looks like that project will be delayed). that will get me 3k worth in supernova bonus', so that will at least get me on my feet again.

please god reformat first :/

really sorry about this this must be really shitty for you

[Jack Sawyer]

my PT hands? (i have a cracked version btw).

this is another great way to get hacked.

to my knowledge, you can only get hacked if you somehow patched an executable, or run an executable [for warez] downloaded from unknown source. PT's "hack" is a key generator, so unless Will got this keygenerator directly from the hands of these Spanish hackers, its unlikely he got pwned because of this.

The "scene" is much more alert for this type of thing, and "nukes" are instated to prevent this type of thing, such as trojans and keyloggers in patches and cracks or keygens, or what is called "scene releases". People are on the lookout for shit like this like hawks.

so unless the Spainiards personally gave Will an executable that he ran in order to patch or hack PT, which would then constitute a custom non-scene related "hack" and not if Will somehow only got the actual key PT requires, its probably out of the question.

Remember, he also got contacted by the probable perpretrator on MSN. so, of the whatever malware he got on his system, we must assume a few things: it could associate his msn account with his pstars account (?), it slowed down his system on the leading nights to the attack (we do not know for exactly how long the system was performing suboptimally, or what network connections were being used at the moment)

We assume its a keylogger, it could be much worse. Will uses MSN, this is an unending source of shit if you don't know how to handle it. People could have their infected PCs serve up seemingly harmless files, even such as JPEG's (W32.Perrun does this, also search MS04-028 Jpeg Comment Buffer Overflow Analysis on google), which could compromise your pc if you preview them. Will also uses IRc, this is also an unending source of shit if you don't know how to handle it. You could receive unrequested file transfers which if run would turn your pc into a zombie. I've enphatised "if run", I do not know, and never heard, of infectious software that do their job the moment they appear on your system.

We need to know the exact course of events with timeline that led to this happening. I can't understand how by just visiting a website a keylogger got installed on the system, and even less if the browser was firefox. Firefox does not allow activex commands to run (which were the bane of IE for years), so if you got infected by visiting the site only it must have been a very new and previously undiscovered/ undocumented exploit
I do have heard of the JPEG "virus", but this happened aeons ago in internet time and also fixed



PS
I personally use Vista SP1, Maxthon or Firefox w/ Noscript extension for browsing (I use every other browser too though, cause I have to check out how websites look in differing browsers), ESET smart security for viruses, spyware, firewall and spam. That's pretty mch it.


PPS
Good luck getting your monies back. I know exactly how you feel. Under very different circumstances, I saw my roll being taken away almost in its entirety and there was nothing I could do [see my blogs]. But I am about to receive some of it back next week or so.
Strength

[will641]

i just got my email account back up and running. they said that they wont reinstate my account until i stop "asking for money on 2+2", or some crap like that, because that keeps the investigation going, and they cant change my status until the investigation is closed. I.E. they dont want to take any responsibility and want to be distanced from the matter.

it is really unfortunate that i dont live in canada or somewhere where if a company pulled this shit on me i cant just say FUCK YOU, ill take my business elsewhere.

come play at FT...... Or at least threaten to them that you will.

honestly its not worth it. i am expecting to make near 9k in milestone bonus' this year, depending on how much i play. if i really grinded hard i could prolly make like 20k.

[tom]

did you try talking to a lawyer in Spain and seeing what kind of options you have?
Seems worth a shot at the very least.

[will641]

wheeee after much trouble with windows i broke down and brought it to a computer store and they fixed it for $40. they had to go int BIOS and change some shit that i odnt know how to do. SO, poker should resume tomorrow after i get everything reinstalled, minus the trojan key logger.

conclusion: way worth it, and not stressing balls over it. now im livin.

[aka_red]

conclusion: way worth it, and not stressing balls over it. now im livin.

ship it holla?

[will641]

god damnit, i was googling how to set up PT, and i accidentally clicked on a link for that fucking piece of shit poker ide site, except it wasnt the home page, it was just a guide or something. virus scan?

[givememyleg]

god damnit, i was googling how to set up PT, and i accidentally clicked on a link for that fucking piece of shit poker ide site, except it wasnt the home page, it was just a guide or something. virus scan?

how??

[Halv]

lol that's hilarious in a tragic way.

If the virus/spyware scans didn't spot it last time, they probably won't spot it this time either. Obv can't hurt though. You should run virus/spyware scans daily(or nightly ldo) anyway.

I still don't know if you can get infected just by visiting a website, someone more knowledgable chime in please.

Did you use IE?

[Halv]

http://www.youtube.com/watch?v=eKgPY1adc0A

[Warpe]

Guess what website is no longer on the interwebs. And if you google PokerTracker IDE, our scam alerts have spread like wildfire.

[will641]

Guess what website is no longer on the interwebs. And if you google PokerTracker IDE, our scam alerts have spread like wildfire.

sweet. so glad i could be a poker martyr.

[sweetlemon69]

sweetlemon@sphere:~> ping 77.Red-80-39-158.dynamicIP.rima-tde.net
PING 77.Red-80-39-158.dynamicIP.rima-tde.net (80.39.158.77): 56 data bytes
-[snip]-

sweetlemon@sphere:~> whois -h whois.ripe.net -p 43 80.39.158.77
-[snip]-

% Information related to '80.36.0.0 - 80.39.255.255'

inetnum: 80.36.0.0 - 80.39.255.255
netname: RIMA
descr: TELEFONICA DE ESPANA
descr: Provider Local Registry
country: ES
admin-c: ATDE1-RIPE
tech-c: TTDE1-RIPE
status: ASSIGNED PA
mnt-by: MAINT-TdE
mnt-lower: MAINT-TdE
mnt-routes: MAINT-TdE
source: RIPE # Filtered

role: Administradores Telefonica de Espana
address: Ronda de la Comunicación s/n
address: Edificio Norte 1, planta 6ª
address: 28050 Madrid
address: SPAIN
org: ORG-TDE1-RIPE
admin-c: ADT89-RIPE
tech-c: TTE2-RIPE
nic-hdl: ATdE1-RIPE
mnt-by: MAINT-TdE
abuse-mailbox: [email protected]
source: RIPE # Filtered

role: Tecnicos Telefonica de Espana
address: Emilio Vargas, 4
address: 28043-MADRID
address: SPAIN
org: ORG-TDE1-RIPE
admin-c: TTE2-RIPE
tech-c: TTE2-RIPE
nic-hdl: TTdE1-RIPE
mnt-by: MAINT-TdE
abuse-mailbox: [email protected]
source: RIPE # Filtered

% Information related to '80.39.0.0/16AS3352'

route: 80.39.0.0/16
descr: RIMA (Red IP Multi Acceso)
origin: AS3352
mnt-by: MAINT-TdE
source: RIPE # Filtered


http://www.telefonica.com/home_eng.shtml

I'd goto the contact page, and call them up. Also email the bolded abuse email above. Can't really say how helpful it is because ISP's abuse emails sometimes goes to the bit bucket (the void).

No clue how helpful they will be, and if they even speak english. But telefonica.es owns this block. Spainish ISP. This looks to be a DSL residential line. If they say it's not their customer blocks, it could be a wholesale customer of theirs (mention rima-tde.net).



This info isn't much. This could also be a pwned pc who's set to proxy everything from the hackers real origin.

[will641]

ill be the alpha wolf recruited danny.

[mrhappy333]

update?

[will641]

nothing really. that money is lonnggggggg gone.

[kmind]

you're still livin though, right?