Important - Svpernova

[Teknetron]

Or anyone else in LOB with admin access - Please remove my guys from the guild for safety.
Char names are versions of "Tormented"

I believe my accounts have been compromised within the past 3 hours, as I was playing about 3 hours ago. I logged off to watch the tube, came back and there is now an authenticator on my account.

I know svper a month or so ago was removing bank acess to anyone in the guild that does not own an authenticator (which I do not, I sure am buying one now), I only hope that he followed through with this.

I just found out about 20 + minutes ago.

Odd thing is I have ran about 8 different scans from different companies, checked processes, checked for any sniffers while wow login screen open and everything is saying my computer was NOT compromised, but something happened as I'm now being asked for an authenticator code.

I havent been on those characters in awhile so hopefully they are overlooked and this msg. is pointless - but better safe then sorry.

[Fiddlesticks]

checking now. I don't have admin access.. but I can look and see.

1 DK, "T(^overthe O)rmented was on 4 hours ago.. he took nothing of value from the bank. He also is not a promoted Member, so I'm sure he didn't have access.

as I wrote that.. Svper logged on and demoted your toons. No harm done

[Svpernova09]

2 of your toons logged in this morning, but nothing was taken from the bank. I dumped your rank down to the non-bank access rank.

[Teknetron]

Thank goodness,

I would feel freaking horrible if something happened to the guilds bank etc from a dang hacker.

On another note, I can see on the server I have been playing tichondrius 4 of my 5 accounts have had their gear + my own guild bank wiped clean

Which stinks as I was about to transfer (paladin / 3 shams/ 1 priest @ 80, and 1 dk + 4 rets @ 67 now) over to kiljaeden. Now i'll have to wait until the restore process is complete to transfer them.

So in the process of purchasing an authenticator tonight while sitting around waiting for blizzard to open heh.

Thanks for the update and peace of mind that none of this affected LOB.

[Teknetron]

So I'm stumped...

Any other ideas on what i can do to find out what happned?

I have run -
Malwarebytes
Spybot search and destroy
Avast

I'm behind a router + firewall on windows 7 64bit - fully updated with full updates daily on adobe, flash, windows etc... I'm pretty ruthless about system security.

Also checked all processes with and without wow running.

Am I missing something to check becuase after all above scans everything came back as 100% perfect. But they got my account info somehow?

[Fiddlesticks]

You know.. I don't know what is going on.. but my account security has been on my mind as of late as well.

My WoW account hasn't been touched.. but I've had several other account (mostly Gmail) accessed by a third party. My passwords have all been very strong, and very different. I think the only reason my WoW account has been safe is because of that there authenticator thingy. I ran the same software as you and come up clean, but accounts keep getting accessed. (Post-Password change).

I spent the entire day yesterday creating passwords so random, and unrememberable I had to write them down in my own little book thing. Swear to god, it better be good enough, or I will find this person and castrate them.

[crowdx]

From my experience, no virus scanner/trojan scanner is finding anything on compromised machines , I am thinking there maybe a combination of hacks that are being used to get passwords, including hacking gmail, my Bnet accounts were all gmail too.