I got keylogged. Was it Key Clone?

[Siphra]

I downloaded and purchased a liscense for Keyclone last week. I set everything up and was dual-boxing in no time with very little problems. I thought everything was great until this past Sunday. I logged onto my account and everything was gone. They sold all of my items and took all my gold. I have been playing for 3 years now and have changed my password numerous times to keep my account safe. I would just like to warn everyone that uses this software to be cautious because my account was hacked and yours can be too.

Xzin: Correlation is not causation. It is more likely you were keylogged and would have been even without Keyclone. Just because you ran KC does not mean KC keylogged you and stole your items.

Rob/Keyclone: :huh: over 20 years in business... 10 years in my own company... all to get your gear (yee haw! i gotz me 20g! now its off to mexico!!)

[iztehzha]

That is not because of keyclone :p have you ever purchased gold? Or even been on a site which does? Cause then you might have been owned right there.. Account sharing can also lead to this happening.
But NOTHING has happened to my accounts after installing keyclone..

Your also the first one I see to say something like this..

[Xaedra]

LMAO yeah, Keyclone is not to blame for your account being hacked. Myself and dozens of people have been using KC for months without problems.

[Tamu]

If your account really was hacked (I think you're just trolling) then I can assure you it was not because of Keyclone. There are countless people who've used Keyclone for months, myself included, and have had no problems at all. Your idiotic accusations are not welcome here. Bye.

[The_Whack]

^ What they said ^

Keyclone is a wonderful program and the creator is super supportive..... look elsewhere for answers to your problems, not Keyclone.

Unless you downloaded the program from somewhere other than Keyclone website......hmmmmm?

[Eteocles]

Spoilers: Totally legit sites can get you keylogged and you may never know it. Thottbot, wowhead, allakhazam(all owned by IGE) have had virused banners show up occasionally and I've not been back to any of them nor will I go back to any of 'em because of that.

If you did indeed get hacked and are just assuming it's keyclone, I highly recommend you run a thorough virus scan + spyware scan + rootkit scan if you know how. Find proof that the virus came from keyclone before you start to denounce it. Even if it did, that may very well be because you downloaded a cracked version or from a site besides solidice.com or this site, the ONLY two authorized and guaranteed safe downloads.

After reading the VAC forums every day it's quite common for people to blame the wrong thing and end up omitting certain important facts, such as having pirated the software or using things like bots, or outright lie etc. Not saying you are yet, but until you show us some virus scanner proof pointing to keyclone.exe and can assure us or verify with Rob that your key is legit we're not particularly inclined to believe you vs the hundreds of people that have downloaded and used it every day for the past year or so. He wants return business and good word of mouth advertising, doin somethin like that wouldn't be good for said things ;P

[Anahka]

Proof?

Run a decent virus and spyware-scan, I think you'd be surprised what they find. If that's not the issue, stop sharing your account-info.

[Ken]

As this is obviously not a keyclone issue nor is there any proof of it being a keyclone issue, I suggest a topic title rename.
[edit] Plus: Software where you will have to pay for is never likely to contain malware, since the author wants to *keep* his clients.

[opt]

Robs get rich quick scheme. Gets the username and pw of all you boxing accounts and just before you buy epic flyers he hacks you.
lol what a dickhead.

[Siphra]

First and foremost...

I would like to thank everyone with constructive comments for your help in trying to protect the name of this software. Secondly, i would like to tell all the people with negative comments to stop being ignorant. I am entitled to voice my concerns about this software and its intentions. Yes, i did my research before trying out this software. No, i have not bought any gold from anyone nor been to any gold selling/ powerleveling sites. Yes, i have run countless spyware, antivirus, adware software and none of them have come up with any entries. Perhaps before you go flaming innocent victims you should learn how those software works. A piece of software gets labeled malicious if it is reported to companies such as Symantec. I did purchase and download my software from SolidIce. I understand that companies that sell software want to keep their reputation. Yet bad stuff happens to good people all the time and if something happened to you would you want to sit in the corner and weep about it or speak out and let people know to be cautious?

[Korruptor]

I would just like to warn everyone that uses this software to be cautious because my account was hacked and yours can be too.You seriously need to do your homework before making that statement. Just because you are able to come here and make such a post with no backing evidence outside of a coincidence doesn't mean you have the right to. This statement is tantamount to libel (slander).

[zanthor]

KeyClone != Keylogger.

Anyone wanna bet this guy logged into one account, then logged into the 2nd account with keyclone active and broadcast his username and password to Shattrah?

[Korruptor]

Yet bad stuff happens to good people all the time and if something happened to you would you want to sit in the corner and weep about it or speak out and let people know to be cautious?Again, first confirm the issue before speaking out about it in a baseless manner. If you came here with some proof, at least something more then a coincidence then maybe but goodness sake I bet you didn't even search the software tools forum to see if anyone else had ever posted anything like this.

"Hey I got hacked, it must be Windows! After all I was running Windows at the time it happened!!"

[Catamer]

do you have a wireless network? Last December my wireless network was hacked into. I didn't have any wireless security or PC passwords. I had shared the C: drive up so I could push wow interface updates. They stole my Yahoo mail account from me and changed the password, they opened a EBay account in my name and started sell stuff ( fraud, they didn't have anything to sell ) and it took days to get yahoo to give my email account back. I found out they were on my network by looking at my wireless router and seeing the assigned IPs. I do not believe any software on my side is to blame it was my wide open wireless and my wide open passwords with a workgroup of "workgroup". I have since turned off my wireless (didn't really need it for anything), made a real workgroup name, set passwords on all of the pc, only shared up the WTF and AddOn directories. I did not loose any WoW stuff but I could have.

[Eteocles]

Secondly, i would like to tell all the people with negative comments to stop being ignorant. I am entitled to voice my concerns about this software and its intentions. Yes, i did my research before trying out this software.

WTB Virus Scan Results pointing at Keyclone.exe then :p Also, the way Virus Scanners work is AFTER a threat is known, it's added to their definition list, and that's IF it's something that's caught; big name/widespread ones usually, quiet little custom jobs may never make the list, and none of those can find RootKits(see Rootkit Revealer linked to from Microsoft.com in above posts); granted, this also invalidates my demand for scan results if the virus is a custom/new job, but at the same time, there's no proof it is keyclone either and 9 times out of 10 something that IS the cause is omitted; yer not giving us much info besides "KEYCLONE DID IT BURN THE WITCH, BURN HER!"

[OzPhoenix]

KeyClone != Keylogger.

Anyone wanna bet this guy logged into one account, then logged into the 2nd account with keyclone active and broadcast his username and password to Shattrah?

One more reason why I log into my 5 accounts simultaneously.

And add my vote to the votes of support for KeyClone. Rob's been extraordinarily helpful to me when I had some license issues and I've been using it for weeks now without so much as a brass copper razoo going missing.

[Dopledin]

Perhaps before you go flaming innocent victims you should learn how those software works.

It's been pointed out that just because you recently purchased a software (doesn't matter which software) and now your account was alledgedly hacked, that the new software had anything to do with it. Usually poor internet/OS/network security habits (not necessarily downloaded programs) lead to WoW account issues like you describe plus any number of other wonderful issues outside of WoW. So before making unsubstantiated claims that any software is the cause of your "bad stuff", how about doing some due dilligence and look closer to home for the cause.

Did you write Rob directly (not likely) and get any kind of response back? Have any siblings/friends/enemies(used to be recent friends) shared your account(s) in the past(frowned upon by the ToS)?

Am I the new superintendent at the troll zoo and over feeding the animals? Why yes, yes I am! :thumbsup:

Hope you get things worked out!

[Moxy]

this is funny. go away troll.

[Majestic_Clown]

Please keep on the topic at hand, please don't start hating and flaming people.

Please provide evidence to support your claim otherwise this thread will be closed 'soon'.

[keyclone]

i'll leave it up to others to closed it..

i don't want to be accused of stifling conversation or ninja editing the troll droppings...

[Vyndree]

Also, I'm surprised nobody mentioned this...

WHERE did you buy keyclone? If it's anything other than solidice.com/keyclone, you've got yourself a lovely keylogger with its owned cracked illegal version of keyclone.

Do a virus scan, go contact a GM either on the forums or in-game immediately, change your account password/email address password (particularly if they share the same password) from a CLEAN computer, don't log into ANYTHING on the infected computer, and get yourself cleaned up asap.



The OP is right at least in one part -- everyone ought to be careful and smart about what they install so that they can protect themselves from hackers/keyloggers. Tying the reason for the hack to keyclone seems to be a bit of a stretch, but reasonable if you've got yourself an illegal cracked version.

Here's my community service message: Don't download cracked software



In finality, I know of no person who purchased keyclone legally to have gotten any viruses/keyloggers from that program. More likely, they were downloading "other" various things or sharing their account information with goldfarmers/powerlevelers/not-so-good friends. Or they just like clicking the "The girl is so sex! Which girl you like? I like the secone" links on the wowforums.

[tooboxinit]

I dont know about keylogging but i know keyclone gave me a virus!! I downloaded it and now it burns when i pee!! darn you keyclone!!

[mtp1032]

KeyClone != Keylogger.

Anyone wanna bet this guy logged into one account, then logged into the 2nd account with keyclone active and broadcast his username and password to Shattrah?Great advice!!!! This actually happened to me. I caught it in time, but had I not been paying attention the world would have known of my account name and password. Now, I never run Keyclone in the background and always start it up AFTER starting up my toons.

Cheers,

[tooboxinit]

another thing is that you should be using the feature on keyclone where it opens all your wow windows with the user names inputed already, i only have to type in my password when i start my accounts, even if i did accidently spam that in the world, impossible, people woulnt knpow my account names anyhow. I put in my password into my accounts then i dont log any chars in untill all 3 are sitting at the char select screen.
and it still burns when i pee from the keyclone virus

[Damian]

The OP is right at least in one part -- everyone ought to be careful and smart about what they install so that they can protect themselves from hackers/keyloggers. Tying the reason for the hack to keyclone seems to be a bit of a stretch, but reasonable if you've got yourself an illegal cracked version.

Here's my community service message: Don't download cracked softwareVyndree is right, although I do concede one point to the OP. Just as with downloading cracked software, anytime you use an application that requires external authentication to run, you're potentially exposing yourself to having such data captured. Even with encryption schemes, if a determined troublemaker parses out the encrypted password from the stream, those same encrypted credientials can be spoofed in communication to that site or service by another party.

This information is protected by private businesses & large corporations because it would destroy their business to violate the trust of their users. People catch on and will stop using a site or service. The same applies to small entrepreneurs like KeyClone. If their software is going to be a keylogger they better be grabbing and exploiting everyone's encrypted credentials simultaneously, because word would get out very quickly and the long-term opportunity cost is forgoing any future sales or role in the community. In my mind that makes an intentional keylogging functionality built into the product an unlikely prospect.

Expanding on the idea of propagating secured credentials in an uncontrolled matter... Since pretty much everything we do online (such as this message board, paypal, worldofwarcraft, your email) requires you to provide this information you should not only change your passwords periodically, but also make your passwords distinct and unique from one another! Changing your passwords once a month is useless if all your accounts, services, and memberships all use the same password rotation. Also consider Vyndree's advice as golden: Cracking, is, by its nature, a manipulation of an executable process. If one can manipulate it to free it from requiring security/they can easily manipulate it to do other things as well.

[Xar]

I almost broadcast my username and password in regular chat when I first started too. If you're sure your system is totally clean then that might have been what happened.

Before I ever installed Keyclone I did a number of searches through Google trying to find if anyone reported anything fishy with it and could not find anything negative. Been using it for months now.

[Otlecs]

Anyone wanna bet this guy logged into one account, then logged into the 2nd account with keyclone active and broadcast his username and password to Shattrah?

Having done that myself at the very beginning, I'll put a few beer tokens on that being the case!!!

Fortunately, I was quick enough to realise what I'd done (the WoW in question was minimised) and no damage was done ;)

[BGuru]

I don't believe Keyclone is a keylogger, at least the legit version of the program.
Kaspersky AV did identify the program as a keylogger but I believe that was because it was sending keys to my other computer and I just added the exe to be trusted.

[sikerdebaard]

Behold Keyclone, the root of all evil!

Actualy, some Virus / Adware scanners might detect KC as a keylogger, but this is probably due to it using some hooks that most keyloggers use. Ex. a global keyboard hook.

[Drakkun]

If you are ever unsure about an exe that you've downloaded, try uploading it to this website http://virusscan.jotti.org. It will scan the file with several different virus/malware scanners and let you know if its infected.

[Tasty]

But I do like the secone :P

[Havelcek]

Keyclone stole my cat. True story.

[Lockyie]

what can i say never got more instant suport on a application than ok keyclone.
its even bether then windows suport ....
till now no issuse whit keyclone or being logged.
keep up the good work rob. :thumbup:

[keyclone]

windows comes with support? really? ?(

i started doing windows programming around '88.. v2.10.. i tried calling once to ask about bitblts and imaging..
the people i spoke with had no idea (petzold was more help every day of the week)

[kllrwlf]

LOL... Windows Support.

[leukos]

windows comes with support? really? ?(

It actually does. You pay Microsoft a very large amount of money every year for The Enterprise Support Contract. There is also an option to pay per incident, but that isn't real support. I'll be brutally honest and say that I am not fair to Microsoft in what follows. I've had good calls and bad calls, I was asked to write something up at work for a new employee after a particularly bad call. Needless to say, my Manager at the time asked for a rewrite. Unfortunately, this was after I had sent it to the new employee :D

Microsoft Enterprise Support isn't really there to solve your problem, though it is nice when it does, it is to protect your rear end, and your Manager's rear end, when _you_ can't solve the problem.

---

When you have a problem that you can't solve, and a Manager from another group is complaining it is "absurd" that we can't solve the problem, your Manager can request in the daily "Manager's Meeting" that "The Microsoft Support Contract" be used to solve this problem.

Your Manager will point out that all other available methods of solving this problem have been exhausted, and will probably point out the numerous posts in the Microsoft MSDN forums that describe the exact same problem you are having (you did find that forum post? They are priceless). These post usually have several "Microsoft, why won't you solve this problem" messages in them. They always agree.

You call a toll-free number and get to describe your problem to the Call Router. The Call Router usually has no clue about the products you are describing, try to stay away from common acronyms (especially the acronym for any just released System Center product). If you are lucky they will put half of what you tell them on your support ticket, expect to have to correct what gets documented. The Call Router will ask how important this call is, lets assume this is just a regular "It doesn't work" support call that isn't causing company wide work stoppages (someone else will handle those). The Call Router then connects you with the Support Engineer. It is always import to refer to these people as "The Engineers," it implies knowledge and experience.

If you are lucky you will be connected with The Engineer, or you may have to wait on hold for a period of time. If you are very unlucky, the Call Router will tell you support is offered on a call back. This means The Engineer calls you back within four hours. This means if you put your support call in after Lunch, The Enginner will call you back at about 17:05 (make sure you leave on time at 17:00).

Now, this is the beauty of the Microsoft Enterprise Support Contract. Your Manager tells all the other Managers that The Engineer from Microsoft is working on the issue. If there is a solution Microsoft will know it.

You deal with The Engineer all morning, The Engineer is actually clueless and has never heard of your problem before and you have to constantly explain basic concepts to them - like what a VLAN is. Your software environment, which was created by only doing default "Click Next" installs, is unique. The Engineer may have a very heavy accent. Don't worry if you can't understand The Engineer's accent, after a couple months of support calls you will learn to. It is very important you document the time you spend talking to The Engineer and what you are doing.

At Lunch on day two, your Manager calls a meeting with all the other Managers to request authorization to "Escalate" the issue. They always agree.

Your Manager calls The Technical Account Manager (The TAM) assigned to us by Microsoft. The Technical Account Manager will then send some e-mails internal to Microsoft and you will get a call back from another The Engineer. This The Engineer may have a clue, it is about 50/50.

If you are lucky they will be able to provide you a solution to The Problem.. If they can't it is very important to get your Manager and The TAM talking again. By this point there are probably more then five hours into this support call and The TAM will provide options to your Manager on how The Microsoft can assist in solving The Problem.

Your Manager will probably have you spend some more time working on the problem until the next days Manager's Meeting.

The Managers will talk about the problem and how important it is to the company, especially since we only have so many hours on the support contract. They will probably agree The Problem isn't important enough to spend additional support hours.

Here is where the beauty of our support contract. Your Manager will tell all the other Managers, "since Microsoft couldn't solve this problem what hope did we have to solve it." They always agree.

Make sure you point out to your Manager how the time was spent on the support call. If there were any tangents taken in trying to solve it, or if other The Engineers were brought onto the line to solve a problem and they didn't (and for about how long). This allows your Manager to call The TAM to try and get some of the hours spent on the support call refunded. This allows your Manager to tell all the other Managers in the Manager's Meeting that they got back X hours on the support contract (for some small value of X). It is an easy way to make your Manager look good.

We may be asked by Microsoft to write a Business Impact Report on how The Problem is causing problems at The Company. Write up something generic and reuse it in the future. I have a couple of these on file with Microsoft at any given time for various bugs, nothing usually comes of it. This will probably make it's way to the Manager's Meeting so make it presentable. No, you can't have my generic write up.

If the problem causing manager ever stops by your office make sure you give them the party line, "What hope did we have to solve your problem if Microsoft couldn't," and "I recall this issue being closed, I can schedule a meeting with my Manager (make sure you use your manager's name) and us to see how we can solve this problem. When are you available?" This last one will usually get them to leave without scheduling a meeting. They always agree.

[keyclone]

oh.. snap

[kllrwlf]

I don't think it's support when you buy a product... then pay to have them help.

That's like buying a car... paying a mechanic to fix all the problems and calling that support for the car. ?(

... and btw... your story made me cry a little inside... such pain...

[leukos]

I don't think it's support when you buy a product... then pay to have them help.

That's like buying a car... paying a mechanic to fix all the problems and calling that support for the car. ?(

... and btw... your story made me cry a little inside... such pain...

It's an interesting industry, but it pays the bills. I tend to think of Enterprise-class IT support as a bunch of smoke and mirrors.

As an old IBM System Administrator told me very early in my working days, "8 hours labour, 8 hours recreation, 8 hours rest".

Those IBM SysAdms had system administration down to a science. For any large change, they requested an IBM Support Engineer be brought on site to oversee, provide recommendation, and make sure all changes meet IBM Best Practices. Management, they always agree.

The real reason they requested the on site engineer is so when there was a problem, which happened on more then one occasion applying operating system updates, the onsite Engineer could provided a very quick turn around time to getting the problem resolved. No Call Router, no call back, that Engineer wanted to get to sleep before the sun came up.

Those old timers gave me another piece of advice; Management won't pay jack to support a $1,500 desktop or server, but when the hardware cost $250,000, the software cost $500,000, and the consultants that came in to install/configure it cost $1,000,000 they'll pay a fair wage for someone to support that infrastructure.