Accepted 76561198178211371 (JessY WingMan)

Accused:
| steamname: JessY WingMan
| steam3ID: [U:1:217945643]
| steamID32: STEAM_0:1:108972821
| steamID64: http://steamcommunity.com/profiles/76561198178211371
| customURL:
| steamrep: http://steamrep.com/profiles/76561198178211371

Mark:
| steamname: аdvicebanana
| steam3ID: [U:1:23045495]
| steamID32: STEAM_0:1:11522747
| steamID64: http://steamcommunity.com/profiles/76561197983311223
| customURL: http://steamcommunity.com/id/advicebanana
| steamrep: http://steamrep.com/profiles/76561197983311223

What happened?
This joker added me claiming to buy my AWP Asiimov. He said he'd go first, but he wanted to speak to me through Teamspeak first.
When I connected to his server, I got this error message:

"Install" was a link to this location. I'll just put the URL shortener's analytics page here:

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

That redirects to an executable file hosted on Google Docs.

Virustotal results:
https://www.virustotal.com/en/file/...cbf5134a77e99401412d02d7/analysis/1429730129/

When I told him I could not connect and suggested using a different server instead, he was very unreasonable and pushing me towards connecting to his server and downloading his supposed plugin, which is a virus.

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

Screenshots:
http://files.f-o-g.eu/b9f460
http://files.f-o-g.eu/fb605a
http://files.f-o-g.eu/5faged
http://files.f-o-g.eu/96cdae
http://files.f-o-g.eu/897181
http://files.f-o-g.eu/0afc0e

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

 

Accept since it manual. The accused with have a Full banned Tag. Thanks!

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**