PDA

View Full Version : BANNED - 5TH DEGREE Free unban AnoodA



Domer
03-02-2021, 05:48 PM
LAST REPORT ID (OPTIONAL): I think it is this 1 <b>You have to register to ba able to see this link</b>
NICK: I played with many. "Frostionista" and the last "AnoodA"
IP (OPTIONAL):
STEAM ID:
OTHER INFORMATION: I came here reading about the ban system and rules only when i got this ban. I believe the thing that got me this ban is that when I was asked for scan from servers i play in i got a wrong report; Generic Cheat Detection, i went explaing to admins of servers that i never use cheats but some gave me ban from their server and other told me to reinstall cs, I knew why i got the false report, it was my .exe files got infected with Neshuta virus that infectes .exe, injects something in them and the antivirus i have cleaned them, the wCD did not report me clean until i reinstalled cs, so obviously it detected that those cs .exe files were modified (cannot launch a .exe file when it is infected with it, only after clean)
<b>You have to register to ba able to see this link</b>
<b>You have to register to ba able to see this link</b>

Tiger
03-02-2021, 06:29 PM
Please upload the wCD file that you used to do the scan.

Domer
03-02-2021, 11:40 PM
<b>You have to register to ba able to see this link</b>

Tiger
04-02-2021, 07:00 PM
You are infected with malware. Please download Bitdefender Free (<b>You have to register to ba able to see this link</b>) or any other antimalware product and scan your system. After you cleaned your system from malware, please reply here.

Domer
06-02-2021, 04:49 AM
I have Norton 360, i scan wcd and says is clean and the virus i had is gone, cleaned by Norton. I do scan all system with Bitdefender then the wcd will work ?


This is the ban message i am talking about

Tiger
06-02-2021, 10:48 AM
Did you scanned the entire system? Can you post me a log (info/quarantine) with Norton 360?

Domer
06-02-2021, 04:37 PM
ok, I am very sorry for bothering you and taking off your time, thank you for that
this is some from Norton historry:

Domer
06-02-2021, 04:41 PM
Ok, i am very sorry for bothering you and taking of your time, thank you for your interest to all the requests.
this is from history:

This file was always getting created on C:\Windows when i execute a EXE that is infected, you will notice also that it mess with Registry, Norton repair or remove this file and fixes the Reg modified
I did a full scan and i am sure is all clean

Filename: svchost.com
Threat name: W32.NeshutaFull Path: c:\windows\svchost.com

____________________________

Details
Unknown Community Usage, Unknown Age, Risk High

Origin
Downloaded from
Unknown

Activity
Actions performed: Actions performed: 1

____________________________


On computers as of 12/5/2020 at 12:55:03 AM
Last Used 12/5/2020 at 12:55:03 AM
Startup Item No
Launched No

____________________________


Unknown
It is unknown how many users in the Norton Community have used this file.

Unknown
This file release is currently not known.

High
This file risk is high.

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


____________________________


Source: External Media


____________________________

File Actions

File: c:\windows\svchost.com
Blocked
____________________________


File Thumbprint - SHA:
cf622ce473bdb2344b4ab57e155829fe0ca45628b3998ae79d 8fb5e6e2868c1c
File Thumbprint - MD5:
Not available
This i restored infected HL.exe and Norton detects and clean it, and as i said when i was able to scan with wCD it gives false-positive until i reinstall the CS .exe:
Filename: hl.exe
Threat name: W32.NeshutaFull Path: h:\games_1\counter-strike\hl.exe

____________________________

Details
Unknown Community Usage, Unknown Age, Risk High

Origin
Downloaded from
Unknown

Activity
Actions performed: Actions performed: 1

____________________________


On computers as of Not Available
Last Used 2/6/2021 at 3:34:33 PM
Startup Item No
Launched No

____________________________


Unknown
It is unknown how many users in the Norton Community have used this file.

Unknown
This file release is currently not known.

High
This file risk is high.

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


____________________________


Source: External Media
____________________________

File Actions

File: h:\Games_1\counter-strike\hl.exe
Removed
____________________________


File Thumbprint - SHA:
0c27db33a460f34189a3458c52a3096aed6c6c199c8a00c483 89f67e219ca7f1
File Thumbprint - MD5:
Not available
Filename: hltv.exe
Threat name: W32.NeshutaFull Path: h:\games_1\counter-strike\hltv.exe

____________________________

Details
Unknown Community Usage, Unknown Age, Risk High

Origin
Downloaded from
Unknown

Activity
Actions performed: Actions performed: 1

____________________________


On computers as of Not Available
Last Used 2/6/2021 at 3:33:29 PM
Startup Item No
Launched No

____________________________


Unknown
It is unknown how many users in the Norton Community have used this file.

Unknown
This file release is currently not known.

High
This file risk is high.

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


____________________________


Source: External Media
____________________________

File Actions

File: h:\Games_1\counter-strike\hltv.exe
Removed
____________________________


File Thumbprint - SHA:
993b5d6b340e34a162ecc41a85b1cb4eb46c14b9237ac9d31c 1c7973fa98c8dd
File Thumbprint - MD5:
Not available

Tiger
06-02-2021, 11:01 PM
I removed your ban. Be aware that Neshta is a file infector; I doubt only these files were affected by this virus.

Please check if everything works.

Domer
07-02-2021, 06:18 PM
It is working now :) Thank you so much
If you dont mind could you please tell me why i got banned? becauz the wcd exe were infected?

Tiger
07-02-2021, 07:29 PM
You are welcome.

Basically, yes. We don't allow modified (aka cracked or fake) versions of wCD.