Damn, this is quite elaborate. Well done for catching it.
Have tagged fando01. He is most welcome to respond here proving his innocence.. with sufficient proof, and I will remove it.
Thanks, and I doubt it, I think he ran
Heh, I doubt it as well. I think he would have said something by now if he was innocent..

Yup, and the buyer and I have been in constant communication. I am releasing the BTC back to him now after he confirms his address.
Just shows that even with escrow, transactions are not fully secure. Props to pterion2910 for taking action quickly.
I would say props to both of you. fando01 tried hard with this one, and nearly got away with it as well.
so fando01 hacked pterion2910's password and waited till trade agrement and after he said coin send he changed pterion2910's info and wrote "i got coins release btc to fando01" in place of pterion2910 ?
Yup, in a nutshell, that is what happened.