DON'T CLICK ON THE LINK IN THE "is this 4 real..." THREAD

[Spechel EDD]

HEY GUYS I REFUSE TO RUN ANY VIRUS SCANS OR DO ANYTHING AT ALL ON MY COMPUTER TO CHECK MYSELF AM I CLEAR?

[mugatu668]

[ QUOTE ]
HEY GUYS I REFUSE TO RUN ANY VIRUS SCANS OR DO ANYTHING AT ALL ON MY COMPUTER TO CHECK MYSELF AM I CLEAR?

[/ QUOTE ]
Maybe.

[jsnipes28]

OK I have e-mailed support and linked them to this thread.

Re-posting the HH and screenshot

FullTiltPoker Game #2713221225: Table Avon (heads up) - $5/$10 - No Limit Hold'em - 19:55:26 ET - 2007/06/19
Seat 1: pez_vela ($759.25)
Seat 2: ekibe ($425)
pez_vela posts the small blind of $5
ekibe posts the big blind of $10
The button is in seat #1
*** HOLE CARDS ***
Dealt to pez_vela [Ks 5h]
pez_vela raises to $30
ekibe: you listen what happened with the EMPLOYEE OF FULLTILT ?
ekibe: they $!@!ing stole $200K
ekibe has 15 seconds left to act
ekibe calls $20
*** FLOP *** [8s 5d 3d]
ekibe checks
pez_vela checks
*** TURN *** [8s 5d 3d] [2s]
ekibe checks
ekibe: you heard anything man ?
pez_vela bets $50
ekibe calls $50
*** RIVER *** [8s 5d 3d 2s] [3c]
ekibe checks
pez_vela checks
*** SHOW DOWN ***
pez_vela shows [Ks 5h] two pair, Fives and Threes
ekibe mucks
pez_vela wins the pot ($159.50) with two pair, Fives and Threes
*** SUMMARY ***
Total pot $160 | Rake $0.50
Board: [8s 5d 3d 2s 3c]
Seat 1: pez_vela (small blind) showed [Ks 5h] and won ($159.50) with two pair, Fives and Threes
Seat 2: ekibe (big blind) mucked [Kh 4d] - a pair of Threes

[DrOlson]

i don't see where he gave you the link? is that in the next HH?

[LISceneSucks]

until this is resolved im just going to keep fulltilt open and then itll tell me that someone else is trying to sign on...that seems to be a good short term step of prevention

[willw9]

[ QUOTE ]
[ QUOTE ]
[ QUOTE ]
[ QUOTE ]
How do I check my registry?

[/ QUOTE ]Start > Run > type 'regedit'

DO NOT EDIT ANYTHING IN REGEDIT UNLESS YOU KNOW WHAT YOU ARE DOING. Just look to see if the entries are there.

[/ QUOTE ]

i dont even see th at software there.. so am i clear?

[/ QUOTE ]

[/ QUOTE ]

[Wakko]

[ QUOTE ]
it'll [censored] you up.

[/ QUOTE ]

if it did you deserve it.

[Neuge]

[ QUOTE ]
[ QUOTE ]
[ QUOTE ]
[ QUOTE ]
How do I check my registry?

[/ QUOTE ]Start > Run > type 'regedit'

DO NOT EDIT ANYTHING IN REGEDIT UNLESS YOU KNOW WHAT YOU ARE DOING. Just look to see if the entries are there.

[/ QUOTE ]

i dont even see th at software there.. so am i clear?

[/ QUOTE ]

[/ QUOTE ]
[ QUOTE ]
Under HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER look for the \SOFTWARE\eMando Software\eMando Remote\Installations subfolder to see if they are there and have any entries in them.

[/ QUOTE ]

EDIT: Perhaps I read wrong. If the eMando [censored] isn't there under SOFTWARE, most likely not.

[iSTRONG]

Stage 2. how we gonna get this mofo back?

[jsnipes28]

I just checked regedit.

Under HKEY_LOCAL_MACHINE/Software I have the eMando Software/eMando Remote/Installations folder.

there is some file in there, is this the malware and how should I proceed next?