Yesterday I tried to loggin into steamtrade.com then something pop-up and and asked me to download something called steamguard.exe...after open it...I've lost my account...email address n password have been changed. Now when i click on my friend's profile and saw my account...i lost all items and gift games. I'm desperated now...my english is not very good. My steam account just got hacked. i write an email to valve n still wait in desperation T.T

10 years ago*

Comment has been collapsed.

Steamguard.exe
sounds legit.
i hope you manage to recover all your lost stuff, and be more careful next time.

10 years ago
Permalink

Comment has been collapsed.

yea! tks

10 years ago
Permalink

Comment has been collapsed.

Steam support has the policy of waiting a week for any questions. I think it's a filter to avoid silly requests.
A week is nothing if you can recover the account and all items.

10 years ago
Permalink

Comment has been collapsed.

yes! ofc all i need is my games! i will wait no matter how long it take

10 years ago
Permalink

Comment has been collapsed.

so the most laziest way to say thanks is now tks? :D

10 years ago
Permalink

Comment has been collapsed.

No! It's "ty"

10 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 6 years ago.

10 years ago
Permalink

Comment has been collapsed.

yea! thanks

10 years ago
Permalink

Comment has been collapsed.

1 week now n i still can not hear any news from steam support :(((

10 years ago
Permalink

Comment has been collapsed.

You have to wait. If it's a month with no reply, contact them again.

10 years ago
Permalink

Comment has been collapsed.

Did the contact you back at all?

10 years ago
Permalink

Comment has been collapsed.

still nothing happen now

10 years ago
Permalink

Comment has been collapsed.

wait,isnt there trade block for one week when log on new pc?

10 years ago
Permalink

Comment has been collapsed.

Yes there is. So this is quite strange.

10 years ago
Permalink

Comment has been collapsed.

read the topic - it's been explained several time. basically the program steamguard.exe let's thief pretend to be your PC with your verified SteamGuard.

10 years ago
Permalink

Comment has been collapsed.

But how does the thief trade away items not being on friend list earlier bypassing the new 87 day trade hold? Of course its a different thing if it's on a trade hold the items won't be visible in inventory.

8 years ago
Permalink

Comment has been collapsed.

look at the date my comment was posted - tommorow it will be 2 years ago! 2 years ago there was no trade hold like you know now, no mobile authenthicator etc. Mentioned trade hold was something different - you had 7 day lock when logging from new PC, but the programs were stealing authenthication files from your PC and copying them to phisher. This way his version of the client pretended to be the verified one from your PC. And email Steam Guard was not mandatory and most of ppl were not using it. So back then there were many programs like mentioned in this topic that would steal all your stuff the moment you DL them. They would automatically send and accept trade offer with all of your stuff, ther moment you DLed such a thing few seconds later everything from your account was gone.

8 years ago
Permalink

Comment has been collapsed.

yea! i think steamguard.exe made this strange thing happen

10 years ago
Permalink

Comment has been collapsed.

you also gained something worth more than a steam account: some knowledge about the internet: "do not download and run every shitty executable offered on a not trustworthy website"

sorry for not being understanding - but what you did was just stupid

10 years ago
Permalink

Comment has been collapsed.

ey there all
let me go straight to my point
i like dirty tricks too, but while being on the right side
if anyone here could give me some information about this program, on what sites it appears, or if you could give me a direct download link that would be even better
i'd love to trace back what their program communicates to :) and maybe send out some of my communicating skills to them..
so to sum it up, tell me on what sites it appears and if possible what pages so i could even check how they've gotten there

10 years ago
Permalink

Comment has been collapsed.

http://www.reddit.com/r/Steam/comments/2aqmnr/steamguardexe_im_a_idiot

Seems the url of stearncomrnunlty(.com I assume) provided the same. But then again, if you are into those dirty tricks, you would have been able to find that yourself very easily already, wouldn't you?

10 years ago
Permalink

Comment has been collapsed.

Is best for you to delete that URL, that is now against the rules.

10 years ago
Permalink

Comment has been collapsed.

What rules exactly? I don't see any rulebreaking here when I look up the rules.

10 years ago
Permalink

Comment has been collapsed.

i meant a link to the actual program or a site that was infected with that program
and that stearncomrnunlty site seems safe (for now at least)

10 years ago
Permalink

Comment has been collapsed.

Today, someone had added me and asked me for what steam support does with my circumstance in this thread. yea! I forgot this thread and It had been a while so i dont remember exacly. But after I sent a ticket, provide all proofs (paypal numbers, mail orders, keys game i've used) they've restored my account after 2 weeks. And all my stuffs, too (all lost items in inventory). Thank you steam support! Just writting this for all who need this infomation.

9 years ago*
Permalink

Comment has been collapsed.

Glad you got it all back. Hopefully whoever got ahold of your account got what was coming to them.

9 years ago
Permalink

Comment has been collapsed.

thank you! a guy added me today just got scammed like me. Hope this will help him

9 years ago
Permalink

Comment has been collapsed.

Bump, you will never forget me xD

8 years ago
Permalink

Comment has been collapsed.

Considering people still get hacked nowadays, probably a thread like this should work as a nice PSA.

8 years ago
Permalink

Comment has been collapsed.

this particular thread - not anymore. Since of mobile authenthicator introduction thief would either have to get access to his phone as well (if OP has mobile authenthicator enabled that is - but if he wants to sell cards or to trade - it's a must anyway).

8 years ago
Permalink

Comment has been collapsed.

Don't forget that many still don't use the authenticator, so they need to know to keep their wits and don't do some stupid thing.

8 years ago
Permalink

Comment has been collapsed.

if someone don't use authenthicator than any trade done from his account will be put on trade hold, same goes to amrket transactions as well. So thiefs nowaday can potentially only steal gifts (by gifting them), but cannot touch anything else on your account. And stolen gifts will simply be revoked by Steam after you inform them :>

8 years ago
Permalink

Comment has been collapsed.

Why in the world would you bump this.

8 years ago
Permalink

Comment has been collapsed.

You, Because i have the power to change the world

8 years ago
Permalink

Comment has been collapsed.

I was also stupid enough to click on a phishing link, but steamguard blocked the intrusion before it could do anything , I was worried to death because I couldn't access my steam account but that was because steamguard was blocking it on my PC , after a nice format and double check virus clean it was all good again , most stressful time of my life !

PS was like a year ago when I started to use steam on a regular bases , and it was one of those bot accounts that add you with "you have won a CSGO skin, open this link www.phising.com to choose your skin" and I fell for it XD

8 years ago
Permalink

Comment has been collapsed.

THX for this big waterfall of warnings and infos
Some Month ago I got another try of phising or hacking into my PC.
Someone at SteamLevel "0" (!!!!) wrote into my chat that I won any giveaway at any group, which name I couldn't find anywhere!
After that he sent a link, which "include" the list of games that I can choose!
I DIDN'T WANT TO DOWNLOAD this file! I wrote that I can't open his "LIST" and he has to write me the games at chat.
Suddenly the guy didn't answer on anything i wrote!
I think that was an auto-writing-bot or anything else
So I searched for this in Internet and found a lot of other victims.

BEWARE of false GIVEAWAYS !!!!!
http://steamcommunity.com/groups/100pAG#announcements/detail/65668531643879197

8 years ago
Permalink

Comment has been collapsed.

Oh, that? It affected many semi-large public groups. It was strange, since that form of attack was outdated even by then, most scammers switched to totally different tactics. (Then again, people still fall for the Nigerian prince scam, even these days.)

8 years ago
Permalink

Comment has been collapsed.

Come on, he's gonna send me that money any day now. I just need to send him another few $$$ to cover his fees.

8 years ago
Permalink

Comment has been collapsed.

Holy crap this is an old thread

8 years ago
Permalink

Comment has been collapsed.

I get it these phishing malwares get account details. What I don't get it even if they do get account details they would still need a steam guard code to access account as steam would detect the account being operated from a new ip, PC, phone or location. That can only be obtained from your actual email id attached to account or your mobile phone authenticator or SDA. How can they access that?

8 years ago
Permalink

Comment has been collapsed.

this topic is 2 years old - back then there was no mobile authenthicator, eventually there was emeil authentication, but it could be bypassed as well. After you verified your account on a new PC once steam would store verification files in it's folder. All the phishing program had to do was to copy these verification files and send them to phisher and he could pretend to be on your verified client and easilly send all your items via trade without any holds.

8 years ago
Permalink

Comment has been collapsed.

LOLOL. Why would someone bump a 2 year old thread? OP maker please close thread.

8 years ago
Permalink

Comment has been collapsed.

Im the bumper here

8 years ago
Permalink

Comment has been collapsed.

It's only after we've lost everything that we are free to do anything.

So sayeth the Chuck.

8 years ago
Permalink

Comment has been collapsed.

Closed 7 years ago by jatan11t.