Shell Tehlikesi.Oyuncu arkadaşların dikkatine!

yivgo · Mesaj gönderen **yivgo** » Pzt Ağu 31, 2020 9:13 pm

Merhaba,

Bir kaç gündür cs16.csduragi.com213.238.173.16:27015

✯✬ASTRALİS✯TR✯ PRO PUBLİC✯✬

✯✬

cs16.csduragi.com✪
serverinda oynamaktaydım ve sürekli tw kontrolleri adminleri tarafından yapılmaktaydı.Bugün ise yapılan teamviewer kontrolünde ise bilgisayarıma shell hack atıldı ve bunu tespit ettim. Gerekli log kayıtları ve atanın ip adresi tespit edilmiş olup en kısa sürede tarafımdan savcılığa şikayet edilecektir.

astralis · Mesaj gönderen **astralis** » Pzt Ağu 31, 2020 9:23 pm

Arkadaşlar sırf konuya yorum yapılmak için hesap oluşturuldu. Bu arkadaş serverimize 1 kez girdi, şüphelendik teamwiwer talebinde bulunduk kendisi geldi. Pc kontrol yapıldı ve sonuç olarak SSli şekilde hilesi tespit edilmiştir. Bahsettiği şeylerle uğraşacak hiç kimse yoktur clanımızda herkese başarılar. Bu konuyu açan vatandaşa da şunu söylemek istiyorum bahsettiğin şeyi kendin yaptığına göre tecrübelisin bu konularda corona olman dileği ile

astralis · Mesaj gönderen **astralis** » Pzt Ağu 31, 2020 9:25 pm

Ayrıca serverimizi kötülemek için iftira atan bu arkadaşın konusunun silinmesini talep ediyoruz kimsenin server kötülemeye hakkı yok. Bu vatandaş teamspeak3 gelerek bu konun linkini atıp kaçtı. Biraz olgun biri olsa idi gelir konuşarak çözebilirdi iyi günler

astralis · Mesaj gönderen **astralis** » Pzt Ağu 31, 2020 9:35 pm

Bahsettiği program ise shellbangtir arkadaşlar teamwiwer bakarken bir çok kişinin tw sorumluluarın bildiği programdır. silinen dosyaları gösteriyor ek olarak söylemek istedik

yivgo · Mesaj gönderen **yivgo** » Pzt Ağu 31, 2020 9:42 pm

Bu sahtekar dolandırıcı arkadaşın serverinda kendimi 11 yaşındayım diye tanıttım beni çocuk sanıp ve hiç bir şeyden anladığımı sanıp bilgisayarıma shell attılar. Halbuki 35 yaşındayım ve Bilişim sektöründeyim ve kendime ait yazılım şirketim var. Yakın zamanda loglar ile savcılığa şikayette bulunacağım o zaman görürsünüz olgun olup olmadığımı. Bilgisayarımda hile yoktur CS versiyonu siteden indirildiği gibi saf haldedir . Ayrıca Covid-19 hastalığına yakalandım ve atlattım.Ama sen atlatır mısın bilemem.Zaten Covid'den dolayı karantinada olduğum için CS'de zaman geçirmek istemiştim.Başınıza gelecek çok şey var.Yakında

Log kayıtlarının bir kısmı;

Start: 2020/08/31 21:05:49.792 (UTC+3:00)
Version: 15.6.7
Version short hash: e1a786d72d0
ID: 257066419
Loglevel: Info (100)
License: 10000
Server: master4.teamviewer.com
IC: 1188967993
CPU: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
CPU extensions: g9
OS: Win_10.0.18362_W (64-bit)
IP: 192.168.1.12
MID: v4c4c4544002020108020a0c04f2020207845c4c20737f26833630ef3cc88fced5012dc8e950b<~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~0dd0c5b4e712d7cef7750d93b4e6b006
MIDv: 2
Proxy-Settings: Type=1 IP= User=
IE: 11.1016.18362.0
AppPath: C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
UserAccount: SYSTEM

2020/08/31 21:05:50.787 10884 1500 G7 TaskbarProgress::ProgressWorkerFunc: Worker end.
2020/08/31 21:05:50.787 10884 11536 G7!! DataTransceiver: Sink => DragAndDropSink::GetInvoker: did not find invoker for dnd id 1508970431
2020/08/31 21:05:50.787 10884 11536 G7!! DataTransceiver: Sink => DragAndDropSink::DestroyInvoker: did not find invoker for dnd id 1508970431
2020/08/31 21:05:50.787 10884 11536 G7!! DataTransceiver: Core_TransferProtocol => TransferProtocol::RemoveTransfer: unknown id: 1508970431
2020/08/31 21:05:50.788 10884 11536 G7!! DataTransceiver: DND_Invoker => InvokerHelperFrontendWin::Release: loop not entered
2020/08/31 21:05:50.829 10884 10360 G7!! DataTransceiver: Core_TransferProtocol => TransferProtocol::ReceivedChunkCommand: unknown id: 1508970431
2020/08/31 21:05:50.833 10884 11536 G7!! DataTransceiver: Sink => DragAndDropSink::GetInvoker: did not find invoker for dnd id 1508970431
2020/08/31 21:05:50.833 10884 11536 G7!! DataTransceiver: Sink => DragAndDropSink::DestroyInvoker: did not find invoker for dnd id 1508970431
2020/08/31 21:05:50.833 10884 11536 G7!! DataTransceiver: Core_TransferProtocol => TransferProtocol::RemoveTransfer: unknown id: 1508970431
2020/08/31 21:05:50.833 10884 11536 G7!! DataTransceiver: DND_Invoker => InvokerHelperFrontendWin::Release: loop not entered
2020/08/31 21:05:53.105 10884 10360 G7!! DataTransceiver: Core_Serialization => DataSerialization::DeserializeFileGroups: data is empty
2020/08/31 21:05:53.105 10884 10360 G7!! DataTransceiver: Core_Serialization => DataSerialization::DeserializePng: data is empty
2020/08/31 21:05:53.106 3732 8172 L32 CInvokerHelperBackend::Block: Input blocked
2020/08/31 21:05:53.138 10884 10160 G7!! DataTransceiver: DND_Invoker => DragAndDropInvokerWin::GetDragImage: creating dummy drag image failed, dnd id: 415581540, Errorcode=14007
2020/08/31 21:05:53.154 10884 10160 G7!! DataTransceiver: DND_Invoker => DragAndDropDataObjectWin::QueryGetData: invalid type of storage medium, dnd id: 415581540)
2020/08/31 21:05:53.330 10884 10360 G7!! DataTransceiver: Core_Serialization => DataSerialization::DeserializeFileGroups: data is empty
2020/08/31 21:05:53.330 10884 10360 G7!! DataTransceiver: Core_Serialization => DataSerialization::DeserializePng: data is empty
2020/08/31 21:05:54.175 10884 7356 G7 VoIP: System performance (last 10s): CPU load of system = 26%
2020/08/31 21:05:56.153 10884 10360 G7!! DataTransceiver: Core_Serialization => DataSerialization::DeserializeFileGroups: data is empty
2020/08/31 21:05:56.153 10884 10360 G7!! DataTransceiver: Core_Serialization => DataSerialization::DeserializePng: data is empty
2020/08/31 21:05:56.156 3732 8172 L32 CInvokerHelperBackend::Block: Input blocked
2020/08/31 21:05:56.156 10884 764 G7! DataTransceiver: DND_Invoker => InvokerHelperFrontendWin::InvokerBackendResponse: got response when none was expected
2020/08/31 21:05:56.194 10884 764 G7! DataTransceiver: DND_Invoker => InvokerHelperFrontendWin::InvokerBackendResponse: got response when none was expected
2020/08/31 21:05:56.195 10884 5536 G7!! DataTransceiver: DND_Invoker => DragAndDropInvokerWin::GetDragImage: creating dummy drag image failed, dnd id: 576018497, Errorcode=14007
2020/08/31 21:05:56.202 10884 5536 G7!! DataTransceiver: DND_Invoker => DragAndDropDataObjectWin::QueryGetData: invalid type of storage medium, dnd id: 576018497)
2020/08/31 21:05:56.435 10884 10360 G7!! DataTransceiver: Core_Serialization => DataSerialization::DeserializeFileGroups: data is empty
2020/08/31 21:05:56.435 10884 10360 G7!! DataTransceiver: Core_Serialization => DataSerialization::DeserializePng: data is empty
2020/08/31 21:06:04.175 10884 1496 G7 VoIP: System performance (last 10s): CPU load of system = 29%
2020/08/31 21:06:12.965 10884 11536 G7 CMainWindow::InitCloseTV(): Prepare to close TeamViewer
2020/08/31 21:06:13.001 6120 7632 D7!! GuiWindowCheckWin::CheckForValidGUIWindows: n(132730) Invalid , m(132728) Invalid, cnt 0
2020/08/31 21:06:13.001 6120 7632 D7!! GuiWindowCheckBase::CheckForValidGUIWindows() failed!
2020/08/31 21:06:13.013 10884 11536 G7 CMainWindow::OnDestroy(): Closing TeamViewer
2020/08/31 21:06:13.057 10884 11536 G7 Chat::Stop: Stopping chat
2020/08/31 21:06:13.057 10884 11536 G7 ChatManager::UnregisterIncomingCommandRegistration: destroying incomingCommandRegistration
2020/08/31 21:06:13.058 10884 11536 G7 IncomingCommandRegistration::Stop: disconnecting ready state properties
2020/08/31 21:06:13.058 10884 11536 G7 IncomingCommandRegistration::UnregisterIncomingCommands: Unregistering incoming commands
2020/08/31 21:06:13.058 10884 11536 G7 InterProcessBase::SecureNetworkCallbackHandle destroyed (RegistrationID: 401b0fe0-e9d1-4e7c-a94d-bd1edd3885b7)
2020/08/31 21:06:13.058 10884 11536 G7 ChatManagerHolder::Close
2020/08/31 21:06:13.058 10884 11536 G7 ChatManager::~ChatManager: destroyed
2020/08/31 21:06:13.058 3804 4344 S0 SecureNetworkIPCAdapter::UnregisterSharedBCmdCallback(): RegistrationID: 401b0fe0-e9d1-4e7c-a94d-bd1edd3885b7
2020/08/31 21:06:13.058 10884 7356 G7 CallbackWrapperBehaviour::MandatoryOneShot::OnDestructor: [Context: ConversationListModel::Close] trackee expired, callback was not called
2020/08/31 21:06:13.058 10884 11536 G7 IncomingBetterChatCommandHandler::IncomingBetterChatCommandHandler: destroyed
2020/08/31 21:06:14.176 10884 7356 G7 VoIP: System performance (last 10s): CPU load of system = 49%
2020/08/31 21:06:15.047 6120 7632 D7! Desktop grab failed.
2020/08/31 21:06:18.074 10884 11120 G7!!!BlockClose::LogIdentifier(): Still living: TVRemoteControlServerUISession
2020/08/31 21:06:18.074 10884 11120 G7!!!BlockClose::LogIdentifier(): Still living: ConnectionHandler(-2140918430)
2020/08/31 21:06:18.074 10884 11120 G7!!!BlockClose::LogIdentifier(): Still living: WindowHelper(TeamViewer Panel)
2020/08/31 21:06:18.074 10884 11120 G7!!!BlockClose::LogIdentifier(): Still living: WindowHelper(TeamViewer Panel (simge durumuna küçültülmüş))
2020/08/31 21:06:18.074 10884 11120 G7!!!BlockClose::LogIdentifier(): Still living: WindowHelper(TeamViewer Panel >> <NO-TITLE>)
2020/08/31 21:06:18.076 10884 11536 G7 InterProcessBase::SecureNetworkCallbackHandle destroyed (RegistrationID: 81e03570-2bf5-4a5d-a0ff-e13d4d175371)
2020/08/31 21:06:18.076 3804 4348 S0 SecureNetworkIPCAdapter::UnregisterSharedBCmdCallback(): RegistrationID: 81e03570-2bf5-4a5d-a0ff-e13d4d175371
2020/08/31 21:06:18.076 10884 11536 G7!! DataTransceiver: DataTransceiver => DataTransceiverBaseInstance::AbortTransfer: m_transferProtocol is null
2020/08/31 21:06:18.076 10884 11536 G7 RA: RemoteAudioSender get stopped
2020/08/31 21:06:18.076 10884 1564 G7 RA: Stopping capturing thread
2020/08/31 21:06:18.077 10884 1564 G7 RA: LoopbackCapture with 2 discon events within 391672 ms
2020/08/31 21:06:18.077 10884 228 G7 RA: LoopBackCapture stop capturing, wait result = 4
2020/08/31 21:06:18.077 10884 228 G7 RA: RemoteAudioSender stopped
2020/08/31 21:06:18.077 10884 11536 G7 RA: LoopBackCapture stopped
2020/08/31 21:06:18.084 10884 11536 G7 RA: RemoteAudioSender stopping...
2020/08/31 21:06:18.085 10884 11536 G7!! SessionFeatureContactSuggestions::AddContactSuggestionsAfterSession: PartnerList not available.
2020/08/31 21:06:18.085 10884 1336 G7 VoIP: Sender: Removed session -2140918430
2020/08/31 21:06:18.085 3804 4336 S0! CStreamManager::StreamUnregistered: Could not find outgoing stream 24
2020/08/31 21:06:18.085 10884 11536 G7 RA: RemoteAudioSender get stopped
2020/08/31 21:06:18.086 3804 4348 S0! CStreamManager::StreamUnregistered: Could not find outgoing stream 23
2020/08/31 21:06:18.086 10884 11536 G7!! DataTransceiver: DND_Invoker => InvokerHelperFrontendWin::Release: loop not entered
2020/08/31 21:06:18.086 10884 11536 G7!! DataTransceiver: DND_Invoker => InvokerHelperFrontendWin::Release: loop not entered
2020/08/31 21:06:18.087 10884 11536 G7!! DataTransceiver: DND_Invoker => InvokerHelperFrontendWin::Release: loop not entered
2020/08/31 21:06:18.089 3804 4336 S0! UdpConnection[24]: UDP statistics: dp=8 rrp=66 prp=7 nb=44 fc=3
2020/08/31 21:06:18.093 3804 4340 S0 CPersistentParticipantManager::RemoveParticipant: [257066419,-2140918430]
2020/08/31 21:06:18.093 3804 4340 S0 CStreamManager::ParticipantRemoved: Our own participant was removed, we must terminate our session
2020/08/31 21:06:18.093 3804 4340 S0 SessionControl::TerminateSession: Session termination reason 1
2020/08/31 21:06:18.093 10884 11536 G7!! DataTransceiver: DND_Invoker => InvokerHelperFrontendWin::Release: loop not entered
2020/08/31 21:06:18.093 10884 11536 G7!! DataTransceiver: Incoming => DragInterceptorWin::~DragInterceptorWin: resetting s_impl
2020/08/31 21:06:18.094 10884 11536 G7 ~MachineHooks: refcount = 1
2020/08/31 21:06:18.123 10884 11536 G7 VoIP: DestroyComponents start
2020/08/31 21:06:18.123 10884 1336 G7 VoIP: Sender: Terminate
2020/08/31 21:06:18.123 10884 6052 G7 VoIP: Sender: TickUsersAndSinksHub: Stopping tick usage...
2020/08/31 21:06:18.123 10884 11740 G7 VoIP: Receiver: Terminate
2020/08/31 21:06:18.123 10884 1336 G7 VoIP: Sender: Audio pipeline: TickUsersHub: Stopping tick usage...
2020/08/31 21:06:18.124 10884 11740 G7 VoIP: Receiver: Participant channel "DESKTOP-LUQVQVA (1 510 711 529)" [1510711529,1039627595] (V3): Removed from mixer
2020/08/31 21:06:18.124 10884 5584 G7 Periods (in ms): Variability (#samples=0): (Undefined)
2020/08/31 21:06:18.124 10884 1336 G7 VoIP: Sender: Audio pipeline: SpeexAgcDelayingFilter (a DelayingPacketDelegatingFilter): Tick usage stopped, since buffer is empty already
2020/08/31 21:06:18.124 10884 6052 G7 VoIP: Sender: Audio pipeline: RebuildingAutoVoiceCapturerSession #0: EndTickUsage
2020/08/31 21:06:18.124 10884 11740 G7 VoIP: Receiver: Session -2140918430: Channel removed for participant [1510711529,1039627595] called "DESKTOP-LUQVQVA (1 510 711 529)" [1510711529,1039627595]
2020/08/31 21:06:18.124 10884 5584 G7 Periods (in ms): Histogram (#samples=0): avg=0.000000,
2020/08/31 21:06:18.124 10884 1336 G7 VoIP: Sender: Audio pipeline: TickUsersHub: Tick usage stopped by all users
2020/08/31 21:06:18.124 10884 11740 G7 VoIP: Receiver: Participant channel "DESKTOP-LUQVQVA (1 510 711 529)" [1510711529,1039627595] (V3): JitterBuffer statistics block (JBS V5) (StreamId=9): -------------------
2020/08/31 21:06:18.124 10884 6052 G7 VoIP: Sender: TickUsersAndSinksHub: Tick usage stopped by all users
2020/08/31 21:06:18.124 10884 11740 G7 JBS ("DESKTOP-LUQVQVA (1 510 711 529)" [1510711529,1039627595]): JitterBuffer was permanently shut!
2020/08/31 21:06:18.124 10884 1336 G7 VoIP: Sender: Audio pipeline: StopTicking called
2020/08/31 21:06:18.125 10884 1336 G7 VoIP: Sender: Audio pipeline: Terminate
2020/08/31 21:06:18.125 10884 6052 G7 VoIP: Sender: Audio pipeline: RebuildingAutoVoiceCapturer: StopTicking called
2020/08/31 21:06:18.125 10884 1336 G7 VoIP: Sender: Audio pipeline: RebuildingAutoVoiceCapturer: TerminatePipeline called
2020/08/31 21:06:18.125 10884 6052 G7 VoIP: Sender: Audio pipeline: RebuildingAutoVoiceCapturerSession #0: ****** Terminate ******

astralis · Mesaj gönderen **astralis** » Pzt Ağu 31, 2020 9:45 pm

Elinden gelenin fazlasını yap sıkıntı yok shellbang shellhack diyen , saçma sapan yazıları buraya atan arkadaş tekrar söylüyorum umarım corona olursun

astralis · Mesaj gönderen **astralis** » Pzt Ağu 31, 2020 9:47 pm

Bu sahtekar dolandırıcı arkadaşın serverinda kendimi 11 yaşındayım diye tanıttım beni çocuk sanıp ve hiç bir şeyden anladığımı sanıp bilgisayarıma shell attılar KENDİ MESAJINDA DA SÖYLEDİĞİ GİBİ SHELL. SHELLBANG, Geeçmişi gösteren programın adı. kontrol edebilirsiniz. silinen dosyaları gösterir. Yalancının mumu yatsı derler tecrübesiz kardesim bu tutmadı bidaki sefere artık. hadi selametle corona ol

Pzt Ağu 31, 2020 9:51 pm

"Umarım korona olursun" gibi bir ithamda bulunduğu için arkadaşı 1 günlük uzaklaştırıyorum.
Aranızdaki problemi lütfen özel mesaj veya mail yolu ile çözün, bilgisayarını kontrol edilmesine müsade eden arkadaşlar ise sorumluluğun kendisine olduğunu unutmasın ve tedbirlerini mutlaka alsın.
Bu olayda o haklı bu haklı demiyorum ancak bu kontrol durumu suistimal edilmeye çok açık