Hacked - need advice

[schlange]

I realized one of my accounts was hacked and the password was changed somehow. They took all the gold ;(

I reset the password now and started to look for how they could have done it. I have scanned my Vista64 system with NOD32 AV, Windows Defender and LavaSoft Ad-aware 2007. I then changed the access password to my router.

So far no viruses, spyware or ad stuff is on the Pc. I am pretty careful with what I download, but somehow they got the password and managed to change it.

Do you guys have any advice what I can do to ENSURE my PC is indeed clean and will remain so? I want to play today, but I am uncertain it is safe :cursing:

[Gallo]

My only advice is something like ZoneAlarm. It prompts you every time a new program or process is trying to access the internet, or if anyone on the internet is trying to access you. You can either choose to block it, or let it through (and check off that you want it to always do that).

It's fairly annoying at first, but I feel good knowing that any time a program wants to access the net, that I get to see it.

[zanthor]

Account Security is generally violated by one of two ways, first and most common is account sharing. Assuming you haven't done this, you've probably gotten a keylogger.

There is a 3rd, however I believe it's relatively rare and only affects those who have been nailed with a keylogger int he first place. But I believe that once these guys identify a username they run brute force attacks on the passwords... a guy in my guild had his account hacked/stripped 4 times with a complete reformat in between. He finally bought a new account, moved toons to it, and hasn't had a problem since.

[schlange]

ah crap the key logger does not sound good if that is what they have. Just running brute force on the account will break it after a while for sure. I guess I can reset the password on a weekly basis, but still.



Anyway to detect if there is a keylogger installed? NOD32, Windows Defender and Ad-aware did not find one.

[schlange]

?(

My only advice is something like ZoneAlarm. It prompts you every time a new program or process is trying to access the internet, or if anyone on the internet is trying to access you. You can either choose to block it, or let it through (and check off that you want it to always do that).

It's fairly annoying at first, but I feel good knowing that any time a program wants to access the net, that I get to see it.

Unfortunately, Zone Alarm does not support Vista 64 bit. :thumbdown:

[Diamndzngunz]

Talk to a GM also. They can TRY to get you your stuff back. So I think. Also be very carefully what you download. Make sure its a reliable source

[Hippieman]

Talk to a GM also. They can TRY to get you your stuff back. So I think. Also be very carefully what you download. Make sure its a reliable source

This should be the first thing you do if this happends, as the sooner you do it, the bigger are the chances you'll get your stuff back. A mate of mine experienced exactly what you experienced, and he's VERY carefull about what he downloads and wouldn't share his acc info if it ment extending his life. He got all his stuff back, though, and it only took about a week, which ain't much considering all the logs, etc., they would have to investigate.

[Toned]

Don't worry about it... In December my g/f got a keylogger from the WoW forums while she was trolling at work. She logged in to respond to a post and they got her info. We happened to go out of town that weekend, and when we got home our guildbank and all of her toons were missing. Was like 8,000g + items and they renamed her toon and moved it to another server. We submitted a ticket and then got in contact with a guy who's sole job is to investigate compromised accounts. Long story short we got EVERYTHING back. It took about a week for the investigator to restore the stuff, however with Christmas it made it about a week in a 1/2. The first time he restored the stuff he left her mage on the other server and the majority of the guildbank was missing. We had his direct email and emailed him again and he was like oh and took care of it like the same day.

[MaxD]

[quote='Diamndzngunz',index.php?page=Thread&postID= 29409#post29409]Talk to a GM also. They can TRY to get you your stuff back. So I think. Also be very carefully what you download. Make sure its a reliable source[/quote]Be very careful with this now. I am not saying you are being dishonest in any way. There are people that have others log on and "steal" peoples accounts, sell items, take gold and have the accounts recovered. Later on down the road they get the gold back from their buddy and have a boat load of cash, cloned items.... then a knock on the door, or a letter in the mail saying you have now committed Electric fraud. Yes folks these actions are not seeing court. Your Accounts get banned and you can end up with jail time, fees, and Public service. The law is finally catching up to technology.

There is really only 2 effective ways to "hack" an account:
1. is keylogger trojan horse and this is not easy to get.
2. Your friend, buddy, guild mate you trust did it. 99.9% of the time The IP ends up being someone you know that you gave access to your account. I wanted into by buddies room and he had is account information right on the table and it was as easy as his name and a word. Needless to say I logged onto his account and created a toon named Fatcamp and made a little gnome. Then I took his hearth stone away got him naked and ran him all the way into the top of the cave in winterspring. (on his main) with a little not attached "you have been hacked"


Now I know some of the bad guys. I admit freely that some times on my server I had gold farmers I would loan gold to. There is a guild on my server that had several of them in it. What they would do is they sold their gold to IGE people. I in pre-BC would take a rogue/druid/druid into Dire Maul and recoverthe book [url='http://thottbot.com/v261856']Foror's Compendium of Dragon Slaying[/url] There was a bug for a few months where this thing was dropping at a rate of 25%. I sold 11 for 2k-7k Thats right 7K. The price dropped so I had to sell em for 1100-3k I also bought some off China god bless them for 900g

Long story short I got into a guild and then really started to care about my fellow gamers and Quit that business

[MaxD]

I realized one of my accounts was hacked and the password was changed somehow. They took all the gold ;(

I reset the password now and started to look for how they could have done it. I have scanned my Vista64 system with NOD32 AV, Windows Defender and LavaSoft Ad-aware 2007. I then changed the access password to my router.

So far no viruses, spyware or ad stuff is on the Pc. I am pretty careful with what I download, but somehow they got the password and managed to change it.

Do you guys have any advice what I can do to ENSURE my PC is indeed clean and will remain so? I want to play today, but I am uncertain it is safe :cursing:

to me this honestly sounds like it was someone you know. If it was a true hack, someone you didnt know they would have stripped your toon and deleted it to make it harder to track